Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
File:                     U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json)
Hash identifier:          TfHDnftKEhq23iHycioCre56ZXaaNveM30uBcnrfv9g=
Subject key identifier:   81:58:C7:00:84:DC:C6:13:8A:8E:20:72:59:99:DB:A1:89:E9:61:82
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Certificate issuer:       /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial:       040B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
Manifest number:          0406
Signing time:             Tue 28 Jul 2026 03:48:47 +0000
Manifest this update:     Tue 28 Jul 2026 03:48:46 +0000
Manifest next update:     Thu 30 Jul 2026 03:48:46 +0000
Files and hashes:         1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: peqswTIRaGi8H07ijqJWb3x3FPPJkQtQ8vbxy6uU7i0=)
                          2: DBC979D8CFB411F0BD144F9CDAE4EC9C.roa (hash: 4zbQGzXYjWG9pUVTMR7RzWQtxqPrQhTqI/M5Rc7TchA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
        Validity
            Not Before: Jul 28 03:48:46 2026 GMT
            Not After : Jul 30 03:48:46 2026 GMT
        Subject: CN=6a68269f-a528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:92:31:7b:23:5e:4a:18:43:0c:c3:03:87:
                    e2:f2:0d:a1:8a:92:fd:35:c2:c2:b5:ac:52:f5:9f:
                    79:c0:ff:ea:c0:9a:d9:e1:9b:4e:d7:3b:89:53:44:
                    97:f1:5c:3d:b6:b6:40:5d:f7:af:95:dc:74:21:c7:
                    cd:b0:3d:22:8a:fd:45:9c:7b:04:8e:5b:b9:9b:3f:
                    c7:e1:19:32:4e:10:fa:d8:8b:b9:95:52:8a:c1:1d:
                    75:a2:02:44:5b:69:f7:65:2f:7d:f8:a2:33:e8:e9:
                    89:e0:4c:72:68:72:31:1c:89:6c:59:59:2e:bc:41:
                    d7:ee:4f:2f:ce:47:89:de:8e:01:d1:74:48:e6:44:
                    bb:a0:ac:f7:4e:ae:2a:c5:4b:ee:69:e0:50:57:fb:
                    ab:19:72:bb:e3:73:33:8b:e5:48:f0:f3:a3:fa:23:
                    86:f1:56:0e:69:b4:2d:6d:b9:ac:54:b0:33:27:15:
                    42:8e:59:96:df:6d:6a:f0:84:3f:5f:70:7c:11:88:
                    5b:a0:b2:89:ba:99:b0:e5:05:04:7d:ff:28:e4:14:
                    41:ef:f6:7a:cd:4e:28:56:89:18:56:46:6c:17:1c:
                    12:e8:7e:db:03:22:22:c5:60:37:bf:21:e7:0a:c4:
                    83:3c:cb:5c:4e:b9:ff:ce:32:9a:c3:b0:c9:20:7c:
                    c8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:C7:00:84:DC:C6:13:8A:8E:20:72:59:99:DB:A1:89:E9:61:82
            X509v3 Authority Key Identifier:
                keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:99:01:c8:e6:8c:74:cb:46:66:47:59:7d:f8:bc:12:40:
         7c:9a:86:47:47:e3:fc:33:53:7f:15:b5:11:dd:a6:b8:66:90:
         f6:a6:0b:84:7f:15:ac:40:c2:76:78:13:4a:a8:39:21:d9:80:
         5a:2e:73:84:6b:60:d3:51:09:ce:0f:2c:14:76:2b:d6:bb:8c:
         81:fc:8c:42:cc:7e:1b:f1:c8:94:81:be:4c:b5:a4:05:a8:55:
         7e:8d:2b:b6:dc:da:8c:27:e1:84:8a:0c:4c:79:da:cc:72:d0:
         b4:ee:1f:a0:9d:b6:18:3f:e9:78:b5:cf:3a:33:f4:f6:6a:41:
         64:9c:dd:b6:89:61:8c:78:2b:42:f8:02:b2:f9:97:e4:80:c6:
         4f:0c:ea:f9:46:03:cc:bb:1c:7a:36:0d:6b:6a:52:5f:48:50:
         9c:33:ae:0f:f8:21:a9:17:52:a6:96:30:f9:3f:8a:10:a6:57:
         11:81:86:06:70:d6:df:dc:15:65:89:f2:ce:d0:d0:aa:58:f4:
         c2:b4:f4:4d:ab:3c:b3:22:df:e0:1a:be:ab:fe:81:d6:06:b8:
         31:9f:d1:91:4d:52:9d:f7:74:5a:70:11:87:6b:96:a3:f2:0d:
         7e:0e:44:22:91:75:15:a9:1d:6b:0b:4b:d5:c4:7e:38:e6:00:
         70:b1:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:55 2026 by rpki-client