Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
File:                     70yhIX5q46jhmBgRk1txzuHW5YU.mft (raw, json)
Hash identifier:          FUQp7e5lE6rPGNRPyA9EtE7PnzIG+Z4sK5M0GI4/B18=
Subject key identifier:   32:D8:BF:F8:E6:32:7E:A1:AE:58:81:BD:A8:9C:0E:83:03:6C:9D:C9
Authority key identifier: EF:4C:A1:21:7E:6A:E3:A8:E1:98:18:11:93:5B:71:CE:E1:D6:E5:85
Certificate issuer:       /CN=F363851FAF/serialNumber=EF4CA1217E6AE3A8E1981811935B71CEE1D6E585
Certificate serial:       014A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
Manifest number:          0149
Signing time:             Tue 28 Jul 2026 05:09:48 +0000
Manifest this update:     Tue 28 Jul 2026 05:09:48 +0000
Manifest next update:     Thu 30 Jul 2026 05:09:48 +0000
Files and hashes:         1: 70yhIX5q46jhmBgRk1txzuHW5YU.crl (hash: jIXIeokUc3yt7IlulAR+R5eutRCvaVHV5eQky+cgwwI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363851FAF, serialNumber=EF4CA1217E6AE3A8E1981811935B71CEE1D6E585
        Validity
            Not Before: Jul 28 05:09:48 2026 GMT
            Not After : Jul 30 05:09:48 2026 GMT
        Subject: CN=6a68399c-8f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:51:6b:47:87:d5:9d:d6:57:1a:b6:1c:85:
                    72:9c:8e:39:db:c8:1c:28:25:13:e5:4d:92:62:67:
                    be:09:53:3e:b0:22:5e:2d:d4:ae:c4:bb:8a:7a:2a:
                    89:b2:41:78:f5:67:7a:bd:aa:ee:bb:78:92:a2:7c:
                    33:ce:86:8a:5c:34:84:ca:c1:b3:5c:b5:2b:7f:16:
                    22:2d:5f:19:40:b8:26:e4:65:67:97:6b:b9:42:60:
                    ba:d5:bf:1d:68:33:e7:c5:19:03:27:91:57:61:d2:
                    38:ef:ad:ca:20:37:d8:0b:7e:ba:2a:f5:88:58:39:
                    b1:f0:d7:15:47:70:7b:eb:f3:4c:e6:1a:68:3f:fe:
                    79:a0:10:a8:df:81:82:6e:dc:bf:0a:66:23:1c:29:
                    fc:62:2d:1c:51:fd:f4:20:5d:56:0c:99:85:f0:5a:
                    6a:65:da:58:89:fc:74:7e:33:cf:58:cf:3e:b5:15:
                    d1:0a:d9:81:5f:fc:c6:64:ba:19:11:a6:bb:aa:59:
                    26:87:bf:4b:de:14:74:d2:4f:12:a9:5c:03:13:df:
                    99:8a:01:aa:a4:d4:07:88:ec:08:5c:e4:52:2e:68:
                    a7:83:fb:9c:23:96:b4:2e:38:4f:5f:a8:84:f8:9e:
                    74:a3:04:6f:23:93:95:4d:c0:56:9a:7c:f5:f8:60:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D8:BF:F8:E6:32:7E:A1:AE:58:81:BD:A8:9C:0E:83:03:6C:9D:C9
            X509v3 Authority Key Identifier:
                keyid:EF:4C:A1:21:7E:6A:E3:A8:E1:98:18:11:93:5B:71:CE:E1:D6:E5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:13:4c:8b:ee:8f:7e:a0:e8:5c:3e:be:ed:c5:ef:42:d6:ed:
         b7:35:87:06:21:c9:34:07:68:de:ee:fc:f4:84:14:e8:a5:c8:
         06:f0:af:cd:88:3f:5e:16:14:4e:68:47:e9:35:2c:53:e0:8c:
         24:a2:ab:d8:b1:64:c8:84:21:36:eb:ca:4b:a3:26:c4:10:13:
         e5:ac:28:6a:a6:13:da:0e:89:52:57:7f:dd:60:1e:fe:78:f9:
         4c:d3:5c:90:3e:77:bc:9a:01:ad:c8:14:1c:f4:48:c6:a9:5c:
         10:83:0b:65:e8:8d:90:b3:06:c7:f8:11:1d:f2:a1:1b:ad:17:
         a3:f6:11:ed:0a:1d:ee:e1:c9:4c:7d:dd:0b:f7:07:2e:22:0a:
         d3:15:06:38:52:ee:b3:31:5c:bd:dd:a1:cd:f0:e7:49:71:4d:
         26:56:91:8c:2c:54:24:39:ca:7d:2b:22:12:1b:39:25:8a:f0:
         cf:2d:6b:5b:73:ff:77:42:a8:f2:f7:47:2c:cd:dc:14:7a:8f:
         e3:42:73:a2:c3:16:30:74:86:f7:a1:d1:33:a1:d5:07:d9:d9:
         b9:d6:6c:99:7e:51:c9:6a:e9:47:6b:ab:3a:5f:8e:69:ed:b2:
         60:a5:8d:24:9f:96:2d:d8:0b:b5:c2:d9:c8:be:47:af:db:40:
         5f:5b:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:19:14 2026 by rpki-client