Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File:                     Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier:          THv39HcG3sO7ZI5exxUQdCTRU/ADMx/u8NF5xz+Pwg0=
Subject key identifier:   3F:6F:CC:3C:BE:49:61:1A:03:DC:FA:A1:60:D8:B4:05:74:3A:B9:6D
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer:       /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial:       0E52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number:          0E52
Signing time:             Tue 28 Jul 2026 01:06:00 +0000
Manifest this update:     Tue 28 Jul 2026 01:05:59 +0000
Manifest next update:     Thu 30 Jul 2026 01:05:59 +0000
Files and hashes:         1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: 1Lhggy1mTFLxmQDFpp6B1d8hOSgcZS123ITT6QLiSPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3666 (0xe52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
        Validity
            Not Before: Jul 28 01:05:59 2026 GMT
            Not After : Jul 30 01:05:59 2026 GMT
        Subject: CN=6a680078-6478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:de:12:8e:72:4f:e8:b7:8e:4b:fd:00:65:
                    7e:53:3a:da:f0:57:26:af:dd:04:61:8e:76:db:1c:
                    b3:98:a3:d1:14:96:0c:63:7e:a8:15:91:f7:88:97:
                    ae:11:d5:2e:5f:7e:11:74:81:4d:75:bf:d4:71:5e:
                    23:1e:b0:c9:41:b7:53:10:61:df:f5:9f:4f:67:8a:
                    c1:55:51:83:ed:bd:a8:1f:43:b9:13:74:ff:66:46:
                    87:c8:40:16:87:d7:78:11:8a:d0:69:84:85:9b:da:
                    d5:d3:da:2c:d1:8c:08:8c:dc:0b:5f:10:3a:f2:ae:
                    5d:9a:2a:1a:c7:12:de:68:85:59:89:0f:72:8e:4f:
                    98:17:73:52:a3:51:01:b1:e7:b3:3d:8c:bb:9d:48:
                    fc:99:d7:79:1f:0e:7d:28:1d:8c:14:86:91:d7:f5:
                    27:6a:d6:2d:39:9e:54:d6:39:01:ae:41:21:d8:f3:
                    6e:5b:9b:82:d3:06:84:ad:9f:e9:b7:63:b6:ef:4c:
                    36:98:53:e1:fb:29:39:86:28:e5:bc:c6:32:82:a0:
                    5f:89:d5:6b:13:58:4b:60:30:69:2b:d3:b9:a0:b7:
                    7e:7d:cd:ac:5d:90:2f:e7:53:9b:86:91:62:8d:26:
                    50:25:fc:2c:af:16:8a:23:a7:62:ce:3b:0b:14:05:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6F:CC:3C:BE:49:61:1A:03:DC:FA:A1:60:D8:B4:05:74:3A:B9:6D
            X509v3 Authority Key Identifier:
                keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:93:03:7d:71:cf:d3:8f:d5:10:8d:38:c3:45:30:1c:b5:
         f4:dc:cb:12:63:b6:1b:66:25:a0:95:0a:23:45:39:27:59:a6:
         89:0d:c5:b3:d9:a2:88:84:e5:55:eb:84:82:c7:6f:d5:db:64:
         a2:24:a4:7f:86:db:c8:a9:bf:b2:2d:9e:ec:a5:71:32:fd:d8:
         01:86:9f:2e:63:83:8a:29:ee:b7:df:74:72:aa:d7:55:5f:ad:
         17:a1:05:c5:65:4e:79:89:a5:f6:cd:31:79:8e:3c:0b:6b:2d:
         4a:93:75:40:e4:04:3c:1e:ea:75:53:f1:e3:77:49:b5:dc:21:
         f4:3b:87:3f:7a:41:af:4b:0c:1e:dc:a1:6e:17:56:86:33:f3:
         14:d6:5b:dd:82:bd:c6:81:d6:2a:3e:fe:f7:3a:a6:66:2a:3c:
         64:6e:10:a0:77:1a:ee:a6:70:39:d1:83:36:a1:4a:45:a5:01:
         4e:85:28:11:cd:12:11:b0:a4:fb:6f:94:81:f1:1a:f1:a6:4d:
         7f:9b:35:7b:93:f3:b0:c3:1f:b4:8e:f7:4f:24:9e:e7:0e:78:
         b6:48:7a:48:6a:66:f7:2b:86:76:92:f1:21:26:fa:44:46:ef:
         36:c8:ca:f2:fd:59:28:9c:4a:10:3b:9b:b6:2e:13:bc:25:e7:
         f5:ba:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:26 2026 by rpki-client