Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
File:                     KvCNgqXIimbwBbMcgOhymuKM11U.mft (raw, json)
Hash identifier:          ut4klSCy2eoHHM0U+YkYCaj7RMv3PQcbaAeAL8ngGnM=
Subject key identifier:   4E:59:52:CD:2A:DD:48:7C:8F:DF:39:ED:52:9E:E8:40:AA:7F:17:5E
Authority key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
Certificate issuer:       /CN=F36406D3AF/serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Certificate serial:       0A76
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
Manifest number:          0A74
Signing time:             Tue 28 Jul 2026 01:26:22 +0000
Manifest this update:     Tue 28 Jul 2026 01:26:21 +0000
Manifest next update:     Thu 30 Jul 2026 01:26:21 +0000
Files and hashes:         1: KvCNgqXIimbwBbMcgOhymuKM11U.crl (hash: ARGd9TNJ3IitZqLwBfZmVD8mQBbOuS6jASKlQUquSV8=)
                          2: E0B7E5C6AE2111E98F04DF3CF8AEA228.roa (hash: DsX+R5lwZz5IbPxYwdbT3HKP4x8lgrMkS5VZBHtyCkQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
        Validity
            Not Before: Jul 28 01:26:21 2026 GMT
            Not After : Jul 30 01:26:21 2026 GMT
        Subject: CN=6a68053e-37ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:3d:3d:b3:7d:f8:98:09:55:9b:3d:3b:aa:
                    f5:54:84:96:de:36:a9:eb:4b:e8:4b:d4:5f:09:47:
                    8b:bd:38:f4:f5:9b:96:b5:55:db:ef:b6:3e:a6:76:
                    70:20:a0:07:62:eb:14:87:25:f0:88:81:4d:cd:7a:
                    a8:78:27:20:63:1e:52:3b:ab:7a:15:56:26:2f:fe:
                    80:8f:ff:8c:d4:fd:4d:97:0e:a7:cf:86:c9:8a:29:
                    ff:27:94:b6:1a:7e:6f:40:b4:63:e9:37:c5:6f:d3:
                    36:63:0d:17:b2:77:93:d5:26:17:d7:d6:97:b5:fb:
                    df:21:94:b6:be:de:ec:71:5f:b6:34:f0:b1:5d:ec:
                    13:52:c7:89:89:e4:26:82:b8:91:50:3b:04:6a:80:
                    0c:96:41:8a:f1:84:2c:7c:82:49:50:55:78:4d:66:
                    7d:93:6e:d2:91:3f:17:6d:7f:3e:b4:11:32:7e:87:
                    dc:b0:7f:18:ee:fa:65:36:dc:54:b4:ef:39:00:79:
                    6b:b2:35:ac:0e:49:fd:0a:af:7c:50:42:99:ff:ea:
                    5c:26:ab:b4:92:e3:c2:74:55:bf:81:fa:59:f7:24:
                    80:93:44:fd:dd:5d:7d:0c:ef:aa:a6:a7:f6:23:da:
                    ef:5d:29:8b:ae:05:39:c6:b9:ca:b6:fe:fd:73:d3:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:59:52:CD:2A:DD:48:7C:8F:DF:39:ED:52:9E:E8:40:AA:7F:17:5E
            X509v3 Authority Key Identifier:
                keyid:2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f9:35:ac:a8:e9:2c:01:84:55:78:f4:cc:af:73:c8:44:f7:
         4b:c4:e6:7a:d2:45:19:7e:7b:66:07:f1:31:6f:74:87:0c:f6:
         e1:51:1a:6c:51:04:31:04:63:29:4a:1e:8a:40:c3:cf:9f:65:
         f3:1e:68:59:c4:76:6a:dc:4f:56:95:c6:ca:02:38:84:23:f0:
         33:31:6b:b7:c0:25:95:ae:0f:d1:96:57:d6:59:f7:93:74:c0:
         4e:d7:6e:43:33:ed:d0:d0:13:96:66:6c:1a:2f:9f:04:9b:c1:
         f1:3b:c7:0f:6c:e1:36:be:cc:b7:0e:62:31:79:c8:d7:b1:bf:
         df:ec:9f:f4:33:6b:a1:ab:79:35:34:48:1b:be:fa:43:2c:65:
         21:a5:34:25:b7:90:24:79:fa:7c:48:d1:6b:3a:a8:2f:4a:9f:
         45:15:42:f6:72:b3:74:11:e3:4c:b2:65:80:01:62:af:ad:d1:
         c4:cd:81:2b:a2:31:02:c8:e8:eb:2f:4b:32:5c:27:15:78:a4:
         4a:82:98:2f:ef:dc:3b:be:59:67:d8:90:d8:4a:16:19:61:ad:
         1e:79:40:a7:c6:54:62:d8:0d:fb:b0:f0:4d:20:dd:5e:64:b4:
         1e:91:93:bd:da:4f:bc:7d:5c:7a:3c:62:a3:68:40:b6:da:b5:
         64:f4:32:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:46 2026 by rpki-client