Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
File:                     2FLZY43gNj3YSH_gDch1vI-a080.mft (raw, json)
Hash identifier:          tdtKRVgH3Vdhu26j4f3Nht1xjTfZzSt/UlgtjrUBrIE=
Subject key identifier:   29:B6:AD:F7:25:C9:EF:95:4D:48:BE:65:23:82:7B:05:B1:20:C8:ED
Authority key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Certificate issuer:       /CN=F3636791AF/serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Certificate serial:       48
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
Manifest number:          45
Signing time:             Fri 12 Jun 2026 05:33:32 +0000
Manifest this update:     Fri 12 Jun 2026 05:33:32 +0000
Manifest next update:     Sun 14 Jun 2026 05:33:32 +0000
Files and hashes:         1: 2FLZY43gNj3YSH_gDch1vI-a080.crl (hash: ZCdssRDyrWpNRYSb/1MQKvS3wNQXhfCm1DBOJjHyi3E=)
                          2: 3CC30608340711F1AFB184CFCE1D38B0.roa (hash: I53gWi2CJOwoPI79Xfi6bjQo4aU2ORPkeD1ir1Rh7cI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
        Validity
            Not Before: Jun 12 05:33:32 2026 GMT
            Not After : Jun 14 05:33:32 2026 GMT
        Subject: CN=6a2b9a2c-c23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:7e:9b:53:3f:82:16:97:16:d9:32:a1:72:
                    d8:0e:d6:1e:94:6e:fa:00:f3:c9:d3:64:5e:b1:e5:
                    2a:1d:dd:15:78:d9:94:0f:aa:ae:ce:4f:dc:59:f4:
                    59:05:47:5b:da:9c:3f:aa:13:56:75:e4:d7:f9:9c:
                    6c:3c:00:54:39:0d:0e:35:db:9f:ed:ec:12:97:a2:
                    64:92:11:ca:70:d4:d1:05:55:5a:78:0a:2b:00:b9:
                    a0:02:51:72:18:30:d9:8a:9a:3e:22:35:29:32:a6:
                    2a:08:8e:d0:fe:66:b9:11:be:0a:53:43:dd:e4:68:
                    cf:a5:33:95:75:6d:79:1f:4e:4a:1d:33:49:df:da:
                    7a:73:dc:8b:13:a7:55:a8:91:e3:cf:b5:f8:04:80:
                    52:f5:80:7e:d7:26:b6:99:4b:cb:f2:17:ad:18:21:
                    2d:bd:d7:33:5a:cf:ef:8f:40:20:f9:72:72:48:7a:
                    8c:15:c3:f6:ce:fc:16:df:a3:47:46:6b:57:3c:d6:
                    f6:d3:3b:19:1b:12:72:02:43:22:64:0a:f5:5c:86:
                    41:4d:a2:86:ac:82:37:66:91:e9:e9:5c:da:ac:81:
                    b9:b6:8c:8f:d7:e2:6f:e7:d2:4e:c0:ec:c3:63:ed:
                    e8:a3:47:1e:de:07:09:1c:a4:24:c3:f6:93:67:c3:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B6:AD:F7:25:C9:EF:95:4D:48:BE:65:23:82:7B:05:B1:20:C8:ED
            X509v3 Authority Key Identifier:
                keyid:D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:5f:4d:44:c9:91:a0:30:16:86:c8:6e:cc:bf:56:f8:a4:
         27:6c:23:fc:d5:b5:ff:4a:6e:45:dd:9a:51:d4:94:80:e2:f5:
         50:f8:ae:c4:5c:5b:2f:d0:24:80:3d:2b:ad:75:2b:eb:08:80:
         64:7e:d1:49:8e:ef:e1:dd:0b:95:cc:cf:f7:8f:14:55:09:f0:
         d2:e2:46:10:12:cd:82:0f:af:8d:aa:c1:a9:7d:85:94:2a:dc:
         eb:01:a0:1b:45:e4:41:57:f0:a9:e6:dd:c9:58:7d:00:4c:d7:
         ae:47:52:d0:2a:f1:a9:bf:8d:17:30:ac:59:4c:d8:1b:41:33:
         a3:92:9d:13:42:0c:38:f8:a3:27:0c:2f:3f:3c:df:22:a5:0b:
         98:da:4f:9c:9b:b0:f6:27:4b:32:99:cb:2c:21:d3:e8:ca:25:
         46:5e:c5:fd:05:f2:8b:84:d8:bf:59:51:ba:5c:73:2f:7f:52:
         51:96:e3:68:5d:f6:bb:be:7d:b0:ab:0d:49:61:b1:fc:0b:c1:
         9c:ec:c1:52:e8:dd:e6:06:e6:43:64:c0:85:12:8c:28:17:15:
         d2:72:98:04:78:c9:45:04:50:38:b7:87:fd:00:c6:7d:39:d1:
         d4:f5:01:4e:78:0b:49:e1:11:24:55:a3:40:dc:92:37:8e:b0:
         7a:05:e9:e1
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBSDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
Njc5MUFGMTEwLwYDVQQFEyhEODUyRDk2MzhERTAzNjNERDg0ODdGRTAwREM4NzVC
QzhGOUFEM0NEMB4XDTI2MDYxMjA1MzMzMloXDTI2MDYxNDA1MzMzMlowGDEWMBQG
A1UEAxMNNmEyYjlhMmMtYzIzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANXvfptTP4IWlxbZMqFy2A7WHpRu+gDzydNkXrHlKh3dFXjZlA+qrs5P3Fn0
WQVHW9qcP6oTVnXk1/mcbDwAVDkNDjXbn+3sEpeiZJIRynDU0QVVWngKKwC5oAJR
chgw2YqaPiI1KTKmKgiO0P5muRG+ClND3eRoz6UzlXVteR9OSh0zSd/aenPcixOn
VaiR48+1+ASAUvWAftcmtplLy/IXrRghLb3XM1rP749AIPlyckh6jBXD9s78Ft+j
R0ZrVzzW9tM7GRsScgJDImQK9VyGQU2ihqyCN2aR6elc2qyBubaMj9fib+fSTsDs
w2Pt6KNHHt4HCRykJMP2k2fDDxcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQptq33
JcnvlU1IvmUjgnsFsSDI7TAfBgNVHSMEGDAWgBTYUtljjeA2PdhIf+ANyHW8j5rT
zTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzY3OTEvNTU3ODIyRDgzNDA2MTFGMUE1NTIzM0NCQ0UxRDM4QjAvMkZMWlk0
M2dOajNZU0hfZ0RjaDF2SS1hMDgwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMkZMWlk0M2dOajNZU0hfZ0RjaDF2SS1hMDgwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYzNjc5MS81NTc4MjJEODM0MDYxMUYxQTU1MjMzQ0JDRTFE
MzhCMC8yRkxaWTQzZ05qM1lTSF9nRGNoMXZJLWEwODAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAG4OX01EyZGgMBaGyG7Mv1b4pCdsI/zV
tf9KbkXdmlHUlIDi9VD4rsRcWy/QJIA9K611K+sIgGR+0UmO7+HdC5XMz/ePFFUJ
8NLiRhASzYIPr42qwal9hZQq3OsBoBtF5EFX8Knm3clYfQBM165HUtAq8am/jRcw
rFlM2BtBM6OSnRNCDDj4oycMLz883yKlC5jaT5ybsPYnSzKZyywh0+jKJUZexf0F
8ouE2L9ZUbpccy9/UlGW42hd9ru+fbCrDUlhsfwLwZzswVLo3eYG5kNkwIUSjCgX
FdJymAR4yUUEUDi3h/0Axn050dT1AU54C0nhESRVo0DckjeOsHoF6eE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:31:57 2026 by rpki-client