Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          hGee4H06s8gB2JANInAdy0+kW4iIlJts+IJLFMEbIFE=
Subject key identifier:   25:62:70:F5:A7:A6:9E:BF:25:E6:92:99:04:C9:26:E7:2A:B7:EA:CA
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0AE3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          0ADF
Signing time:             Tue 28 Jul 2026 01:17:47 +0000
Manifest this update:     Tue 28 Jul 2026 01:17:46 +0000
Manifest next update:     Thu 30 Jul 2026 01:17:46 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: JwaCxzDQbesaPLn6lMgM3YLphpNRXWXvzCItWdZni+4=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Jul 28 01:17:46 2026 GMT
            Not After : Jul 30 01:17:46 2026 GMT
        Subject: CN=6a68033a-870c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:ca:02:61:17:30:6c:21:3b:8e:17:c0:b1:
                    6a:5c:15:1d:12:3c:55:59:e6:19:45:19:e0:01:c0:
                    32:a0:fc:0e:b6:45:a8:65:dc:4f:3a:c4:2f:73:81:
                    98:60:bf:fa:90:49:29:d1:e4:31:0d:f2:9d:94:a0:
                    40:7e:fd:4d:a9:be:37:58:ed:12:1d:8e:3f:68:4f:
                    0e:cd:a3:8f:ac:b5:e0:8d:ed:cd:d8:52:fa:f8:67:
                    61:e9:ca:df:15:57:c4:50:49:df:5b:7f:bf:b7:a5:
                    27:6b:d5:cd:3b:e3:26:dc:07:a3:65:86:cc:37:21:
                    6d:ab:51:d3:61:83:16:8e:68:32:35:46:47:75:67:
                    ae:b5:69:c1:50:45:fd:9e:ed:b2:3c:6b:37:8c:a9:
                    fe:0d:24:9b:d0:9e:d2:0d:57:88:b2:05:01:1c:2f:
                    45:79:4f:14:be:57:38:64:c4:4c:8c:5b:64:34:21:
                    88:03:e6:b1:9f:19:44:c6:da:25:63:9a:83:c3:34:
                    95:17:88:34:d5:d7:f1:05:bc:21:0a:13:00:6a:df:
                    8b:90:50:e8:47:9b:48:27:cc:5b:ef:90:ad:4b:6a:
                    7a:8c:c8:17:55:7a:22:46:54:ae:85:72:31:71:55:
                    6c:3c:01:27:51:a3:2d:e9:17:19:fd:69:81:62:74:
                    80:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:62:70:F5:A7:A6:9E:BF:25:E6:92:99:04:C9:26:E7:2A:B7:EA:CA
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e1:80:44:86:24:7c:66:0c:f1:55:e4:58:34:65:63:a0:7b:
         02:ad:17:ed:27:48:3f:46:f2:24:f1:3a:a7:c2:b7:b0:31:3e:
         dc:02:01:c8:e4:e9:de:50:87:d9:77:29:f1:2c:74:2d:48:a7:
         d1:1e:3a:ed:b7:99:f0:3e:21:1e:a0:5b:18:8f:0b:e4:7b:63:
         5f:30:1f:af:e0:98:e8:91:68:19:e3:18:66:a0:e3:f0:53:71:
         87:05:b0:50:68:52:59:d0:06:18:24:5c:5a:c2:bb:88:a3:f9:
         64:cf:21:62:27:2b:b1:4e:d7:03:bd:26:e7:20:82:02:9e:e9:
         27:94:7d:c4:19:18:21:33:00:56:69:67:31:74:56:5a:de:1e:
         bf:ec:55:2f:33:4c:d1:ae:5d:91:40:e2:58:ae:5a:87:10:0b:
         d2:d4:82:26:01:37:08:54:e8:70:ed:20:d6:11:d4:92:54:da:
         c8:90:b8:ff:67:03:51:24:1d:82:8d:1b:f6:dc:d5:6f:ea:e5:
         d5:eb:77:2b:c6:86:31:a7:22:58:ab:66:fa:08:26:58:25:ac:
         d9:ca:4a:46:c0:5d:06:2d:e9:19:b5:91:fd:4a:0f:76:97:5f:
         a4:2a:59:38:91:94:e6:e9:e2:a5:7d:e5:5d:33:b9:86:08:a3:
         a4:9a:99:c4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjhEREVBRjExMC8GA1UEBRMoNDJCNThDRUVBQTJDMTJFOEYyREM5OEQ2NDRDMjBD
RjgxQ0UxQ0UwNTAeFw0yNjA3MjgwMTE3NDZaFw0yNjA3MzAwMTE3NDZaMBgxFjAU
BgNVBAMTDTZhNjgwMzNhLTg3MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdgcoCYRcwbCE7jhfAsWpcFR0SPFVZ5hlFGeABwDKg/A62Rahl3E86xC9z
gZhgv/qQSSnR5DEN8p2UoEB+/U2pvjdY7RIdjj9oTw7No4+steCN7c3YUvr4Z2Hp
yt8VV8RQSd9bf7+3pSdr1c074ybcB6Nlhsw3IW2rUdNhgxaOaDI1Rkd1Z661acFQ
Rf2e7bI8azeMqf4NJJvQntINV4iyBQEcL0V5TxS+VzhkxEyMW2Q0IYgD5rGfGUTG
2iVjmoPDNJUXiDTV1/EFvCEKEwBq34uQUOhHm0gnzFvvkK1LanqMyBdVeiJGVK6F
cjFxVWw8ASdRoy3pFxn9aYFidIDlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJWJw
9aemnr8l5pKZBMkm5yq36sowHwYDVR0jBBgwFoAUQrWM7qosEujy3JjWRMIM+Bzh
zgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4RERFL0JGNzgyMzNBMzY5RTExRTlBN0Q1RTIyMEY4QUVBMjI4L1FyV003
cW9zRXVqeTNKaldSTUlNLUJ6aHpnVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FyV003cW9zRXVqeTNKaldSTUlNLUJ6aHpnVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjhEREUvQkY3ODIzM0EzNjlFMTFFOUE3RDVFMjIwRjhB
RUEyMjgvUXJXTTdxb3NFdWp5M0pqV1JNSU0tQnpoemdVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBu4YBEhiR8ZgzxVeRYNGVjoHsCrRft
J0g/RvIk8TqnwrewMT7cAgHI5OneUIfZdynxLHQtSKfRHjrtt5nwPiEeoFsYjwvk
e2NfMB+v4JjokWgZ4xhmoOPwU3GHBbBQaFJZ0AYYJFxawruIo/lkzyFiJyuxTtcD
vSbnIIICnuknlH3EGRghMwBWaWcxdFZa3h6/7FUvM0zRrl2RQOJYrlqHEAvS1IIm
ATcIVOhw7SDWEdSSVNrIkLj/ZwNRJB2CjRv23NVv6uXV63crxoYxpyJYq2b6CCZY
JazZykpGwF0GLekZtZH9Sg92l1+kKlk4kZTm6eKlfeVdM7mGCKOkmpnE
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:36 2026 by rpki-client