Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File:                     CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier:          sFVpyaI4aSfDRCVFHCphyPK0k/vXqtIisay7EmCE7d4=
Subject key identifier:   DA:86:68:22:6F:15:95:C7:1A:1A:FB:82:8E:61:32:3E:8B:D7:A0:64
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer:       /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial:       02F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number:          02F3
Signing time:             Tue 28 Jul 2026 04:20:57 +0000
Manifest this update:     Tue 28 Jul 2026 04:20:56 +0000
Manifest next update:     Thu 30 Jul 2026 04:20:56 +0000
Files and hashes:         1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: xg8rFfPSWdmF++4S0fVIZ/dn4n+ORFnyL7EcsAmWTQs=)
                          2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
                          3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
                          4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
        Validity
            Not Before: Jul 28 04:20:56 2026 GMT
            Not After : Jul 30 04:20:56 2026 GMT
        Subject: CN=6a682e29-7a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e8:ed:9d:5e:3c:c5:e6:4e:73:21:00:36:49:
                    a4:c9:53:92:68:54:d1:42:41:65:ca:94:7a:3b:a3:
                    ac:52:15:a0:fb:b7:3c:07:5f:41:87:75:0d:61:4f:
                    c3:78:bc:77:ee:7d:44:a0:3a:87:26:7e:f2:07:d0:
                    d3:05:fa:e5:0c:fe:6e:fb:11:9a:27:a3:15:72:e4:
                    67:6c:90:49:41:f5:01:78:cb:8a:52:b1:03:42:0b:
                    56:81:e3:1e:39:81:2d:e2:74:db:b8:fa:86:83:45:
                    7a:fd:41:ea:5b:41:14:fd:c7:b2:f5:ac:0e:7f:5e:
                    2c:48:a3:16:21:7b:08:c9:fe:c7:7b:d5:34:91:5b:
                    96:cd:64:02:99:76:44:45:12:0d:e8:5b:3d:f1:18:
                    b6:1c:11:f9:02:26:69:93:8f:7a:78:40:be:8f:b0:
                    2f:1e:6a:fd:92:99:0f:da:81:6f:1c:39:5f:53:67:
                    f4:d1:2e:7f:b4:79:b9:e0:cb:d8:a5:4d:c6:34:dd:
                    c6:55:0c:37:08:d2:96:61:7b:41:03:85:88:c6:61:
                    92:3e:0e:36:8d:ed:32:6b:3e:6f:f1:18:83:a4:fd:
                    ae:1a:3c:a7:a4:ff:14:18:11:f7:4c:79:af:73:99:
                    8b:1f:45:c6:ba:ce:ee:5c:4b:22:d4:65:32:59:fc:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:68:22:6F:15:95:C7:1A:1A:FB:82:8E:61:32:3E:8B:D7:A0:64
            X509v3 Authority Key Identifier:
                keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:e5:8e:f0:c1:b6:6b:40:e6:43:8a:d7:64:95:b2:cc:39:
         e2:fb:96:f2:c4:8d:68:91:ec:fb:a6:4b:3b:1f:74:ef:dc:60:
         d0:55:c6:db:b1:21:8a:59:38:21:eb:78:bd:b6:76:31:5d:a8:
         4b:57:13:2c:fb:6a:d4:9c:d3:5c:e6:49:aa:97:67:5a:ba:a8:
         a3:d9:fa:75:c2:7d:68:41:2c:71:51:90:9c:3c:17:24:22:7f:
         cf:7e:8e:22:d1:b3:5c:0c:ad:35:24:e5:c8:df:fb:fd:aa:7c:
         4f:ff:37:6e:34:6d:dc:9e:5e:59:85:4b:8c:79:fc:0c:ff:5d:
         01:c6:6f:af:04:8c:b2:c2:a2:57:ab:85:60:c2:cc:8d:ce:7c:
         9f:8b:a2:ba:df:8a:b4:f4:d1:9a:60:a1:93:27:a0:fe:1d:c0:
         35:c4:d8:dd:18:35:b0:35:13:83:a4:aa:da:d3:18:63:fd:57:
         82:e4:d7:4e:68:3e:4d:01:c5:d6:94:bc:60:d9:60:cf:e6:5a:
         b6:e6:26:a1:0f:19:0a:e9:ad:68:16:9d:45:96:8c:a2:79:36:
         29:de:66:84:5b:ac:04:b9:77:67:03:0f:19:3f:0e:e5:a5:2a:
         47:80:90:da:84:c6:53:26:55:0c:cd:eb:64:21:61:1d:45:e1:
         b9:a3:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:42 2026 by rpki-client