Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          HBYAVksFuoysGNgQg+/Vs5peAtjal0t0yUjCxQC6SGs=
Subject key identifier:   32:6D:C2:C0:1E:37:C8:40:7D:FD:85:B8:38:8E:CF:E8:8A:6A:0B:1F
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       038A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          0389
Signing time:             Tue 28 Jul 2026 04:04:00 +0000
Manifest this update:     Tue 28 Jul 2026 04:04:00 +0000
Manifest next update:     Thu 30 Jul 2026 04:04:00 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: Oz5hSgmWgg7IQN6JtBWmVjyJ7Eim1JFirO7XTKw/ol4=)
                          2: 698B22BAB0E011F098883C87DAE4EC9C.roa (hash: 5UZtU7DBbaKMgey3XqLzKXM826/jRqDSRDPI7cDwmOY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Jul 28 04:04:00 2026 GMT
            Not After : Jul 30 04:04:00 2026 GMT
        Subject: CN=6a682a30-6305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:2d:57:d1:d6:5d:dc:4a:31:ae:51:63:f3:
                    51:ed:6e:65:36:16:3a:d2:d5:f5:6f:79:a1:cd:22:
                    0a:c8:17:b1:e6:41:12:e1:9d:6d:d0:99:eb:ec:b1:
                    ff:84:6c:03:44:94:90:72:cc:dd:85:72:26:d5:6c:
                    57:67:2e:a6:2d:01:ec:8d:d2:d6:de:7c:10:e4:6d:
                    e0:6d:c8:8d:71:de:85:07:89:40:80:e5:c1:99:58:
                    0f:75:89:eb:e6:2c:f8:5c:1c:0b:de:e1:5d:2f:0f:
                    75:4c:de:41:33:db:e3:47:79:0a:b8:88:24:5d:cf:
                    51:e3:77:bf:d0:31:10:b7:98:5f:93:29:2d:71:0a:
                    dc:78:ec:6d:38:9a:4e:4d:62:a3:53:c5:b4:97:f5:
                    c8:52:b7:6c:60:48:91:2f:07:d6:ad:d4:25:7f:4c:
                    bf:44:5b:33:da:77:69:30:0e:29:85:ba:8b:6e:b1:
                    e0:41:98:64:d5:f4:8c:34:af:0e:f7:4d:92:c0:ee:
                    c6:1a:b3:c6:dd:3b:17:96:f8:45:51:65:bd:b0:47:
                    28:72:ab:73:e7:1e:3b:97:4f:e3:9c:1b:c0:5c:b8:
                    18:bf:4b:f0:e3:ee:c5:41:6c:2e:9b:a6:7f:f8:8f:
                    87:2d:ca:fa:59:2c:42:ba:ed:5b:4b:11:d5:16:4f:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:C2:C0:1E:37:C8:40:7D:FD:85:B8:38:8E:CF:E8:8A:6A:0B:1F
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:d4:c9:c6:62:2e:f0:d7:88:3f:7e:49:9f:ad:b4:3c:bc:
         d8:0c:2a:8d:e7:8c:d9:7b:07:3b:f5:f2:a3:c4:0e:d2:c2:e2:
         ce:ed:9a:8f:37:68:19:55:13:3e:83:5d:36:8d:d2:c2:52:60:
         73:c3:a8:1f:57:a5:e4:6c:b5:48:03:69:fe:b2:24:9c:c8:34:
         24:b1:29:98:87:58:3e:ca:8f:8a:f2:10:d0:bc:8e:10:a4:3e:
         bf:69:b1:8a:ac:99:71:de:55:61:6f:46:f6:5c:e4:fa:e7:4a:
         d6:2c:c4:20:d7:1c:5b:65:de:e6:fb:03:e0:fa:ab:3b:57:6f:
         c1:1c:e7:01:11:5f:45:59:6b:11:e5:63:88:f2:07:32:f8:38:
         b5:55:5c:f5:96:7d:a2:8a:98:55:e5:f7:6d:64:7a:27:16:73:
         57:13:30:40:3d:44:82:ca:78:ed:7c:87:77:64:03:e8:c3:9a:
         18:95:b3:e3:86:e6:05:cc:ca:3a:e3:71:85:17:6f:52:cd:9c:
         1e:6f:94:29:d3:2d:6d:69:42:e7:c8:4b:f8:45:8d:e2:1c:e9:
         8c:de:3e:71:3f:31:7c:f0:61:75:88:64:49:67:a9:c2:7b:8d:
         4e:e3:e8:69:6a:67:00:2e:d4:7f:95:d2:a9:8e:fd:c5:c4:1e:
         b2:cf:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:10 2026 by rpki-client