Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          CeLSsSuGIQxnr5y2w1T095yLF1Tywmlg4VAwxDuq3mU=
Subject key identifier:   21:33:15:DC:5B:C7:41:42:DF:20:90:E8:1D:BB:DE:8E:3E:D1:12:AD
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       049A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          0499
Signing time:             Tue 28 Jul 2026 03:28:28 +0000
Manifest this update:     Tue 28 Jul 2026 03:28:27 +0000
Manifest next update:     Thu 30 Jul 2026 03:28:27 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: Nd7pZo7ewtPV5XoOeZP+ayA2hc71r71z2v7IqmxZ9Lg=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: Jul 28 03:28:27 2026 GMT
            Not After : Jul 30 03:28:27 2026 GMT
        Subject: CN=6a6821dc-31ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:3c:80:df:d2:c5:96:4b:09:34:d5:27:6c:
                    5e:2e:bf:bc:53:7f:05:a5:4c:12:2c:a9:c5:29:50:
                    16:90:3c:16:ca:90:41:c9:05:07:b9:b0:74:c9:49:
                    37:63:82:26:a8:e5:11:3c:01:be:b8:b8:a4:0e:60:
                    81:05:90:32:b3:dc:50:80:d1:23:e6:f6:01:cd:76:
                    b5:1a:01:9d:73:1a:c7:84:59:be:78:7b:f5:02:15:
                    5c:21:58:8b:33:c6:bb:0c:26:c8:57:88:88:14:7e:
                    09:e9:48:47:9c:d2:56:68:b6:d8:00:2e:a3:df:16:
                    a5:6e:81:3d:e0:57:f0:36:43:fb:7d:5a:af:a4:1d:
                    a7:07:a9:0b:74:93:72:94:80:0f:5e:23:63:ec:61:
                    07:23:f9:a2:5e:c0:b5:33:3e:46:26:8d:a3:2f:f5:
                    24:ad:7e:14:9f:35:e9:98:32:b6:53:a5:20:28:1e:
                    03:06:26:b8:77:97:f0:a4:ef:b6:4b:a4:62:56:6d:
                    14:2f:65:30:53:42:db:4a:b5:59:91:6d:73:6c:66:
                    61:ee:57:86:d2:4b:0f:65:0a:ee:e4:00:7e:a5:74:
                    96:b2:7b:2c:68:cd:12:b8:d3:fa:e5:2c:cb:30:6c:
                    75:16:39:38:7b:e2:24:84:10:88:9f:2e:e9:fb:4f:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:15:DC:5B:C7:41:42:DF:20:90:E8:1D:BB:DE:8E:3E:D1:12:AD
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:d9:d2:34:76:95:e3:c8:fe:7a:bd:cd:6e:ff:0d:c1:b0:
         53:f8:5b:0f:44:c0:0c:65:7b:65:d8:de:5e:6e:e9:46:70:51:
         59:8e:49:da:24:f6:17:e4:72:41:de:1e:54:ea:ec:c0:1c:f4:
         9d:e6:9d:ed:df:fd:ad:fc:16:91:1f:e4:7c:61:e7:8e:3f:ad:
         fe:c8:04:9a:18:4b:33:21:12:32:f0:48:07:40:67:1a:24:2b:
         cf:f4:8c:7c:a6:ae:00:57:5e:2b:8f:c7:55:f3:95:f0:ca:a4:
         b1:4d:df:ba:ad:14:79:af:f6:0f:f2:56:d1:b4:70:7e:8d:c8:
         97:da:e4:77:55:4c:99:5d:55:5b:1b:95:41:19:2f:98:fa:ab:
         35:8b:03:01:98:ed:ee:f8:2b:0c:7d:ff:76:7e:a8:b7:f9:35:
         30:ad:7a:8a:c6:6f:cd:52:b2:f3:2b:33:87:39:45:53:2a:dc:
         ee:ca:ca:01:99:db:84:ff:e5:24:17:11:dc:fe:74:71:0b:8d:
         1c:5b:e1:37:8c:81:fd:65:e9:e2:ed:9c:d0:5a:30:36:8d:bf:
         98:fb:bb:ef:49:d2:41:6e:a1:f4:59:c5:b1:1d:6d:52:78:c9:
         fb:a6:2e:d7:9b:0f:e1:45:e1:3f:2d:b4:ee:54:24:d2:db:79:
         79:d2:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:39 2026 by rpki-client