Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
File:                     nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft (raw, json)
Hash identifier:          Ys5dleII+1r4Oxmg4vzVZuqi2RmlOsRDZelCeysIfZs=
Subject key identifier:   02:AF:FE:F7:D1:BF:09:B3:91:B5:CE:17:AB:B4:52:AC:35:33:0B:F8
Authority key identifier: 9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
Certificate issuer:       /CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Certificate serial:       0266
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
Manifest number:          0265
Signing time:             Tue 28 Jul 2026 04:41:55 +0000
Manifest this update:     Tue 28 Jul 2026 04:41:54 +0000
Manifest next update:     Thu 30 Jul 2026 04:41:54 +0000
Files and hashes:         1: nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl (hash: zpPS61Kxr0/R07o1HzkhGmgiHz/y1BNzaTFSSoMDP6w=)
                          2: 0CBAC432B27111EF99B95144762E951A.roa (hash: gmMvunoj5KNwjAHQwXEB9NQDDcCeTBCj9SxbM2LLQYk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AF, serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
        Validity
            Not Before: Jul 28 04:41:54 2026 GMT
            Not After : Jul 30 04:41:54 2026 GMT
        Subject: CN=6a683313-957e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:5d:53:34:7d:f5:c9:dd:aa:09:f5:85:19:
                    eb:53:50:6f:e9:66:19:a1:a2:ce:11:79:60:20:d6:
                    d8:0d:4a:8e:8b:fc:c0:18:26:34:80:cc:15:70:31:
                    61:22:55:30:7f:f2:e5:d0:28:78:a1:da:6b:52:f9:
                    4b:0a:72:b6:7c:33:e0:ae:bf:48:ad:5c:5f:29:88:
                    0f:d6:b8:c0:8d:62:de:75:d1:f3:9d:88:ac:49:05:
                    83:9a:59:a2:79:d9:57:11:7a:05:72:68:f3:bf:2f:
                    49:58:7e:8a:a0:7a:fb:28:2c:4a:22:4d:d3:22:d7:
                    e4:ee:91:d4:40:29:d4:b8:c4:cf:15:d4:ee:5e:a1:
                    ba:42:4c:e2:e1:3b:23:96:59:62:38:e4:e3:aa:fc:
                    eb:91:dc:65:88:14:69:26:0e:54:8c:4d:c3:19:57:
                    64:fb:53:d1:50:6d:11:1e:75:8d:13:6d:e2:78:2e:
                    5b:6b:98:68:c5:cd:a5:3e:30:02:9b:7e:f9:5a:6e:
                    08:7b:41:9c:e7:ba:2b:75:3f:4c:da:b9:2e:4c:ce:
                    55:77:7f:9e:c2:4f:97:08:4c:72:79:69:40:70:b9:
                    24:9a:6d:89:e5:24:81:fe:b1:1a:69:2e:d8:00:44:
                    40:2c:ec:39:24:d7:1d:2d:8f:b4:5a:9c:c9:9a:22:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:FE:F7:D1:BF:09:B3:91:B5:CE:17:AB:B4:52:AC:35:33:0B:F8
            X509v3 Authority Key Identifier:
                keyid:9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bc:6d:62:b9:28:24:a6:67:09:77:e7:9b:82:eb:3b:fb:37:
         37:d0:f4:99:19:94:04:a7:dc:ad:71:68:3c:ab:88:fd:36:74:
         62:68:e8:9d:d3:ab:27:9f:a4:89:af:71:d8:98:21:f6:43:3a:
         50:1d:87:48:cd:b7:be:a5:4c:d0:93:80:0a:d8:4f:e0:7a:3f:
         2c:ca:36:be:13:d5:11:f0:94:ea:0f:48:e6:df:6f:fa:3b:2c:
         ea:6c:9c:cb:f8:c9:cd:c1:21:15:2e:96:69:ec:00:be:81:e3:
         17:7e:5f:b8:6e:a6:6d:b9:60:c2:2e:db:7d:ac:a3:9b:fa:f8:
         f7:a6:ab:34:ef:9d:d6:be:4e:71:55:c7:75:de:19:3b:fc:8a:
         b8:f3:14:77:7a:b4:dc:9a:c5:f1:ac:42:63:70:6a:48:af:0f:
         6c:0b:b8:e1:b9:05:47:c9:1b:0a:a9:65:a7:6b:40:51:e7:3f:
         ed:91:0f:5a:22:81:be:6d:66:cc:89:5e:1f:af:a3:53:5a:5d:
         07:13:c9:27:a4:3f:a7:89:17:5d:9b:36:07:3f:85:33:77:04:
         f9:a6:a3:eb:07:19:89:e8:80:9b:06:9e:31:6a:54:8a:a2:2b:
         3a:6f:4a:16:21:50:c1:53:74:1d:b4:be:6c:b1:12:2d:41:98:
         53:b3:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:10 2026 by rpki-client