Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          oul9/3d/QKVNt88bXKKOJqbl/zAeIkjLP/JPBwXBYKU=
Subject key identifier:   15:68:28:46:22:81:D1:5D:B0:4C:DB:CF:26:60:6E:EA:61:10:5E:95
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       018E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          018D
Signing time:             Tue 28 Jul 2026 04:59:09 +0000
Manifest this update:     Tue 28 Jul 2026 04:59:08 +0000
Manifest next update:     Thu 30 Jul 2026 04:59:08 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: YK+1STfdKOOvcFP+SP9/gK6eOikeXMsrch/Nh1i/haA=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Jul 28 04:59:08 2026 GMT
            Not After : Jul 30 04:59:08 2026 GMT
        Subject: CN=6a68371d-fa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b4:b9:86:cf:df:f0:51:c6:cd:58:64:23:45:
                    ad:48:df:2d:0a:f2:99:bb:be:d1:b4:85:dc:21:44:
                    ec:61:b2:0a:14:50:4c:33:50:03:64:06:ff:b7:16:
                    66:be:cb:b8:e4:8c:19:5e:bb:38:e4:13:12:53:b6:
                    f3:58:b3:a2:e4:e8:dd:20:2d:da:da:8d:d0:25:a8:
                    b1:d1:68:f8:f5:27:81:fa:74:dd:e0:21:c9:64:8b:
                    1b:c1:a9:7b:b7:6f:12:b8:a9:6d:b3:87:cd:79:f6:
                    af:04:55:a0:1d:a3:b3:cd:ce:b9:f8:20:32:e7:26:
                    b0:7c:00:bd:4a:fa:53:c8:81:ce:be:aa:2f:10:fa:
                    9a:bf:c0:dc:34:30:6f:f5:a6:1b:76:46:88:a3:df:
                    d3:21:e2:7a:61:38:75:04:f4:dd:35:86:25:af:f2:
                    f0:cb:df:84:c8:75:0d:83:dc:56:a7:48:05:d3:d3:
                    9a:5b:d6:bf:c6:41:44:71:f3:4a:3d:21:23:ca:e9:
                    09:e1:f4:0a:78:c2:12:4b:7d:0e:1f:0e:2e:b2:96:
                    0e:1f:ec:fc:21:11:6e:0e:fc:cb:8a:9a:e4:8c:8b:
                    63:cc:64:44:1c:e7:fb:e3:8b:98:5e:ca:d2:93:0d:
                    ea:af:61:92:d6:12:f2:58:2c:c7:aa:42:9a:78:cc:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:68:28:46:22:81:D1:5D:B0:4C:DB:CF:26:60:6E:EA:61:10:5E:95
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:e0:6a:1a:29:78:e6:86:7b:3a:39:78:c2:ea:07:67:7f:
         80:d4:db:a3:64:8b:85:e5:f4:eb:14:23:b5:0a:36:e7:ba:7d:
         4d:e5:6a:d0:8d:0d:d2:d1:a1:6b:b6:80:2f:ff:ec:76:1e:45:
         74:07:a5:bd:5b:26:07:ed:7c:a4:a8:54:b6:fe:d7:18:b0:bf:
         c8:6a:a0:19:1b:f1:85:d1:bc:19:c8:e5:b6:82:7e:60:79:c7:
         5e:09:bd:e0:7e:59:3d:64:c9:77:a4:c0:0b:cd:34:4e:50:cb:
         4e:f5:86:44:3a:20:58:d2:7e:10:bd:56:90:bc:36:6b:07:9e:
         31:58:61:e2:1f:57:2d:92:68:f2:99:7e:47:b8:2b:ff:d0:86:
         b7:cc:c3:0f:fb:4f:5f:da:1d:0c:e8:a8:e0:c6:29:5a:14:5b:
         e3:85:2c:9c:b4:8f:5f:7e:da:71:72:2c:fd:f1:4a:9f:fc:12:
         9a:e4:28:ef:be:d6:0f:4b:dd:f0:79:48:c2:a8:ec:c3:93:b8:
         69:be:91:69:40:a6:2b:7b:22:ac:f6:ff:6a:d2:d9:e7:1c:a3:
         af:b6:1a:25:f0:b3:24:c3:dd:6c:f7:8d:58:04:d6:e8:39:45:
         09:53:56:47:6f:06:d6:69:f1:36:88:a0:42:d4:54:29:d8:5f:
         c8:f7:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:18 2026 by rpki-client