Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
File:                     AAXJbaZmm3B_OK0bxYUpxT44q_0.mft (raw, json)
Hash identifier:          CvlgpGt8fx2ujiSLEEWC4Ll1UaoH37XWpcC2eUcp55U=
Subject key identifier:   0C:F0:01:43:1B:CF:E9:8E:8D:8D:12:54:BD:F4:24:F7:31:DB:22:4A
Authority key identifier: 00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
Certificate issuer:       /CN=F36412BEAF/serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Certificate serial:       76
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
Manifest number:          75
Signing time:             Fri 12 Jun 2026 05:28:33 +0000
Manifest this update:     Fri 12 Jun 2026 05:28:33 +0000
Manifest next update:     Sun 14 Jun 2026 05:28:33 +0000
Files and hashes:         1: AAXJbaZmm3B_OK0bxYUpxT44q_0.crl (hash: 4WhG4TsJYUXrmDmvELWBDCBrzMJP0sU7bILtSnRgHlc=)
                          2: 30569F3C0C9411F1BE9799E5DAE4EC9C.roa (hash: SaqHcwD+guZ1feoju2N/bp3ZmAIiJzcI5uUiy12YasU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36412BEAF, serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
        Validity
            Not Before: Jun 12 05:28:33 2026 GMT
            Not After : Jun 14 05:28:33 2026 GMT
        Subject: CN=6a2b9901-581f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:54:0f:c4:c2:b4:8e:16:b0:bc:bd:07:7d:
                    32:46:6e:b3:6f:17:56:4a:56:31:19:fb:2c:99:c8:
                    13:22:b0:cc:5e:7e:e2:05:58:f6:2f:94:36:fe:d6:
                    aa:94:31:e6:d9:f5:f9:68:b8:a7:f1:8d:85:40:66:
                    4d:31:41:9f:70:1a:06:09:72:2f:14:b6:18:3b:82:
                    3d:8d:58:9d:8f:d6:cc:9d:78:d9:1d:47:d3:48:fc:
                    18:b7:58:d6:b7:be:db:ef:b5:24:5e:3a:fb:8e:c0:
                    7c:87:1c:a7:72:9b:36:3d:7d:4b:39:26:b6:73:a5:
                    f3:f3:59:7e:79:c1:e6:cf:47:7c:e5:dd:63:1a:99:
                    05:8e:9b:7d:67:61:27:a1:af:2f:ec:1d:a3:7e:16:
                    fd:d1:4a:d4:97:63:43:9f:79:c2:6d:b7:41:2f:4f:
                    ed:68:4d:c7:87:89:65:72:f9:d8:ac:29:ca:f7:f3:
                    1a:1d:bf:44:f2:a3:fd:dd:ee:e0:b3:77:46:23:8c:
                    a4:71:ab:f8:2a:c9:78:70:ef:20:a6:fc:86:b2:3f:
                    c3:a2:c5:c0:ed:bf:62:36:82:2e:95:80:15:18:60:
                    4d:d0:58:d1:65:d7:27:d4:a2:64:05:a0:4c:92:e9:
                    6b:b8:77:4c:30:22:5d:6a:e7:d6:49:53:a8:90:9f:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F0:01:43:1B:CF:E9:8E:8D:8D:12:54:BD:F4:24:F7:31:DB:22:4A
            X509v3 Authority Key Identifier:
                keyid:00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:26:08:1e:e5:ce:43:af:56:03:03:e9:ca:1b:e9:c9:9d:
         22:3b:2a:2d:10:69:4b:c3:1a:15:f2:74:97:16:bd:a4:39:99:
         c4:1d:07:04:68:6c:39:45:bc:10:34:51:6d:81:94:79:14:fa:
         d2:fc:d2:d4:74:b6:ef:a3:49:a4:b2:19:ff:8c:51:78:95:3e:
         ad:ec:e2:be:53:97:77:ef:23:f1:6c:3e:6a:67:03:98:60:84:
         b7:84:b9:f7:6a:ea:03:ba:96:3b:56:a9:5c:3d:d6:1d:e5:28:
         dd:6b:be:9a:fe:d9:f9:43:41:c2:73:b6:51:11:8a:47:7b:3d:
         a5:5d:f4:5d:55:50:07:e2:c2:7c:de:0f:c0:c1:37:32:63:aa:
         4b:b7:ed:ba:9a:f6:5d:a8:da:d1:ab:e0:d6:df:e7:50:37:a2:
         c9:4e:cf:da:0a:5c:2e:ee:c6:26:78:a2:2b:8f:ea:9e:8c:bc:
         0d:d9:26:85:c4:e7:5c:96:e0:87:83:bd:f8:6e:f2:b5:f9:b2:
         07:59:3c:7d:a1:af:b2:1f:60:55:02:7a:c4:05:a0:40:d5:ac:
         e7:a2:45:7a:54:a0:a6:64:10:b2:57:11:bb:46:3e:96:3e:e6:
         8c:5d:64:12:a9:6f:a1:a8:16:dd:1f:d7:6f:23:9c:2a:8d:66:
         60:f7:5e:0d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBdjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MTJCRUFGMTEwLwYDVQQFEygwMDA1Qzk2REE2NjY5QjcwN0YzOEFEMUJDNTg1MjlD
NTNFMzhBQkZEMB4XDTI2MDYxMjA1MjgzM1oXDTI2MDYxNDA1MjgzM1owGDEWMBQG
A1UEAxMNNmEyYjk5MDEtNTgxZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANgQVA/EwrSOFrC8vQd9MkZus28XVkpWMRn7LJnIEyKwzF5+4gVY9i+UNv7W
qpQx5tn1+Wi4p/GNhUBmTTFBn3AaBglyLxS2GDuCPY1YnY/WzJ142R1H00j8GLdY
1re+2++1JF46+47AfIccp3KbNj19SzkmtnOl8/NZfnnB5s9HfOXdYxqZBY6bfWdh
J6GvL+wdo34W/dFK1JdjQ595wm23QS9P7WhNx4eJZXL52KwpyvfzGh2/RPKj/d3u
4LN3RiOMpHGr+CrJeHDvIKb8hrI/w6LFwO2/YjaCLpWAFRhgTdBY0WXXJ9SiZAWg
TJLpa7h3TDAiXWrn1klTqJCfiHkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQM8AFD
G8/pjo2NElS99CT3MdsiSjAfBgNVHSMEGDAWgBQABcltpmabcH84rRvFhSnFPjir
/TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDEyQkUvN0RDQTQxMEMwQzkzMTFGMTk1MEY3QkUxREFFNEVDOUMvQUFYSmJh
Wm1tM0JfT0swYnhZVXB4VDQ0cV8wLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQUFYSmJhWm1tM0JfT0swYnhZVXB4VDQ0cV8wLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MTJCRS83RENBNDEwQzBDOTMxMUYxOTUwRjdCRTFEQUU0
RUM5Qy9BQVhKYmFabW0zQl9PSzBieFlVcHhUNDRxXzAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIwzJgge5c5Dr1YDA+nKG+nJnSI7Ki0Q
aUvDGhXydJcWvaQ5mcQdBwRobDlFvBA0UW2BlHkU+tL80tR0tu+jSaSyGf+MUXiV
Pq3s4r5Tl3fvI/FsPmpnA5hghLeEufdq6gO6ljtWqVw91h3lKN1rvpr+2flDQcJz
tlERikd7PaVd9F1VUAfiwnzeD8DBNzJjqku37bqa9l2o2tGr4Nbf51A3oslOz9oK
XC7uxiZ4oiuP6p6MvA3ZJoXE51yW4IeDvfhu8rX5sgdZPH2hr7IfYFUCesQFoEDV
rOeiRXpUoKZkELJXEbtGPpY+5oxdZBKpb6GoFt0f128jnCqNZmD3Xg0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:31:54 2026 by rpki-client