Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier:          ov37eDxWHZYWRNhD36Cqw9wl9AEQ4y8c+eBCM5udxg4=
Subject key identifier:   67:B5:22:B4:9C:A7:22:44:5F:9D:F1:5F:16:09:FF:E1:C0:CF:8C:98
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer:       /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial:       023C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number:          023A
Signing time:             Tue 28 Jul 2026 04:43:55 +0000
Manifest this update:     Tue 28 Jul 2026 04:43:55 +0000
Manifest next update:     Thu 30 Jul 2026 04:43:55 +0000
Files and hashes:         1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: 3v9Na6fi5qBcr+lxzMUncz7gZqzRhEiBifr7i4DJkKE=)
                          2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Validity
            Not Before: Jul 28 04:43:55 2026 GMT
            Not After : Jul 30 04:43:55 2026 GMT
        Subject: CN=6a68338b-6e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:61:ef:f0:d6:16:b1:b5:12:1a:e7:b9:db:
                    9b:0a:f8:3c:97:c0:f9:e2:12:10:4f:ce:b1:d5:22:
                    69:f1:7d:de:e7:2d:1c:f0:4c:b8:01:0d:6a:76:f9:
                    41:d6:da:3f:5f:5a:37:b8:69:5f:1d:19:15:2e:13:
                    38:cb:07:1b:b9:85:4a:1a:65:eb:8c:47:09:3f:1f:
                    e4:af:e7:dd:4b:03:c3:28:e7:29:13:f7:dc:cb:1e:
                    85:bb:94:c0:a3:21:7a:81:7e:0d:98:ce:66:71:61:
                    e1:6d:a5:ba:61:65:56:d4:08:9d:d2:05:29:1c:e5:
                    f2:b1:b5:8f:49:4f:e0:82:6f:d8:cb:e1:f6:bf:86:
                    20:8d:f3:50:47:b4:52:b3:45:8f:75:9f:2e:53:32:
                    2e:04:87:95:55:e8:d0:c3:e0:ea:ab:7b:13:20:1f:
                    f1:6c:ee:69:45:e2:3e:82:80:03:61:5d:01:59:7c:
                    f5:56:7b:6f:55:6a:32:33:7b:88:c6:45:f9:4c:47:
                    ef:2f:04:b7:ab:90:94:3e:7c:18:1c:f6:b4:d6:c4:
                    4b:e9:dc:70:9e:d1:1e:b4:5d:3b:d2:c8:76:84:5a:
                    63:80:bb:3e:9a:e2:9f:fa:74:f6:84:61:e9:a4:02:
                    e0:e4:99:30:48:79:ea:a1:f0:03:95:9c:1a:e8:8e:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B5:22:B4:9C:A7:22:44:5F:9D:F1:5F:16:09:FF:E1:C0:CF:8C:98
            X509v3 Authority Key Identifier:
                keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:f1:80:66:38:32:ca:77:c1:79:7c:ba:c9:b7:ec:4e:7c:
         80:cf:b4:35:74:bb:86:9a:ba:a3:5b:81:ed:27:77:68:2c:22:
         14:13:34:39:c2:ed:b0:67:1f:91:e3:4b:6a:c4:25:2a:c7:b8:
         1d:e6:45:45:b2:97:39:e2:d5:51:be:10:b9:8e:5a:63:3d:ed:
         79:b2:60:64:25:e1:3c:d1:74:44:17:2a:c7:fa:40:80:b8:28:
         5f:72:c7:47:23:0d:aa:4d:da:ba:4e:7b:b6:70:fe:f9:8d:e2:
         57:b8:70:b6:11:00:42:ec:45:64:06:d6:39:0d:3f:2d:b4:5b:
         9b:85:e8:45:3a:22:5b:a8:f7:0c:c1:9c:9d:45:5d:8b:ed:2e:
         55:14:0b:31:a5:7a:f2:38:9c:39:b4:13:a1:40:12:f3:66:a8:
         78:55:67:15:17:fa:34:e3:06:5e:d0:51:7e:59:66:78:17:9d:
         dc:e8:dc:7d:02:ef:c0:3c:28:3a:08:b5:f3:74:dc:8c:1c:ff:
         3c:b7:99:e9:36:1b:9f:cf:5b:0e:81:ee:2f:ac:9c:57:05:52:
         da:1c:7f:eb:91:08:41:53:93:e6:fc:a6:4f:a0:b3:c7:1d:bf:
         53:7e:fc:43:54:08:49:88:49:21:37:8a:a9:93:c2:3c:f8:96:
         e0:3c:0f:d1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQxMzJBRjExMC8GA1UEBRMoOTJDQTJCNDFFRUMzRTAxQTE5Mzg5RTIyMjA4OEFD
M0ZDM0ExNDhFRDAeFw0yNjA3MjgwNDQzNTVaFw0yNjA3MzAwNDQzNTVaMBgxFjAU
BgNVBAMTDTZhNjgzMzhiLTZlMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa72Hv8NYWsbUSGue525sK+DyXwPniEhBPzrHVImnxfd7nLRzwTLgBDWp2
+UHW2j9fWje4aV8dGRUuEzjLBxu5hUoaZeuMRwk/H+Sv591LA8Mo5ykT99zLHoW7
lMCjIXqBfg2YzmZxYeFtpbphZVbUCJ3SBSkc5fKxtY9JT+CCb9jL4fa/hiCN81BH
tFKzRY91ny5TMi4Eh5VV6NDD4OqrexMgH/Fs7mlF4j6CgANhXQFZfPVWe29VajIz
e4jGRflMR+8vBLerkJQ+fBgc9rTWxEvp3HCe0R60XTvSyHaEWmOAuz6a4p/6dPaE
YemkAuDkmTBIeeqh8AOVnBrojt4xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZ7Ui
tJynIkRfnfFfFgn/4cDPjJgwHwYDVR0jBBgwFoAUksorQe7D4BoZOJ4iIIisP8Oh
SO0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0MTMyLzhCRkJEOTUyRDFBQzExRUZBNUQxMTY1NTc2MkU5NTFBL2tzb3JR
ZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tzb3JRZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYy
RTk1MUEva3NvclFlN0Q0Qm9aT0o0aUlJaXNQOE9oU08wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhT/GAZjgyynfBeXy6ybfsTnyAz7Q1
dLuGmrqjW4HtJ3doLCIUEzQ5wu2wZx+R40tqxCUqx7gd5kVFspc54tVRvhC5jlpj
Pe15smBkJeE80XREFyrH+kCAuChfcsdHIw2qTdq6Tnu2cP75jeJXuHC2EQBC7EVk
BtY5DT8ttFubhehFOiJbqPcMwZydRV2L7S5VFAsxpXryOJw5tBOhQBLzZqh4VWcV
F/o04wZe0FF+WWZ4F53c6Nx9Au/APCg6CLXzdNyMHP88t5npNhufz1sOge4vrJxX
BVLaHH/rkQhBU5Pm/KZPoLPHHb9TfvxDVAhJiEkhN4qpk8I8+JbgPA/R
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:08 2026 by rpki-client