Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
File:                     AAXJbaZmm3B_OK0bxYUpxT44q_0.mft (raw, json)
Hash identifier:          P2EKWOHwxUR+HwHD7JmGJJbdr0mUhfYh0fjryHrDeDk=
Subject key identifier:   46:61:D9:5B:DF:B0:15:C8:53:BC:A3:DB:3A:CE:96:BC:1E:12:D5:49
Authority key identifier: 00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
Certificate issuer:       /CN=F36412BEAF/serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Certificate serial:       A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
Manifest number:          A3
Signing time:             Tue 28 Jul 2026 05:28:38 +0000
Manifest this update:     Tue 28 Jul 2026 05:28:37 +0000
Manifest next update:     Thu 30 Jul 2026 05:28:37 +0000
Files and hashes:         1: AAXJbaZmm3B_OK0bxYUpxT44q_0.crl (hash: dwPLn9PdaxMFPxvS0RVvCII59gwadhahQf8A0FDBRdo=)
                          2: 30569F3C0C9411F1BE9799E5DAE4EC9C.roa (hash: SaqHcwD+guZ1feoju2N/bp3ZmAIiJzcI5uUiy12YasU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36412BEAF, serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
        Validity
            Not Before: Jul 28 05:28:37 2026 GMT
            Not After : Jul 30 05:28:37 2026 GMT
        Subject: CN=6a683e06-5d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:7a:24:f9:c7:98:c2:f2:55:27:98:58:ef:
                    c2:c8:d7:4d:a4:b7:9c:6e:68:55:b3:39:8a:41:16:
                    0c:cc:be:79:ca:8d:69:60:14:53:43:e0:db:7d:93:
                    40:4e:66:62:6e:20:64:43:c2:48:07:74:0f:fb:6b:
                    4f:cd:a5:13:88:b3:47:ce:48:cd:4e:34:6a:9d:41:
                    43:7c:96:61:df:e5:12:ee:01:fa:c7:3f:3a:d3:44:
                    e2:d7:ef:f5:c4:58:3c:1b:e2:b0:1f:84:78:0c:da:
                    cb:63:27:a2:a1:23:cd:35:17:7b:e4:90:35:84:b9:
                    fd:1b:e5:68:57:4b:5d:a1:47:d0:f6:35:56:27:71:
                    79:97:1c:43:bb:d4:16:29:83:53:42:16:04:4a:c4:
                    4b:7e:a4:1d:43:9e:14:3f:c4:8d:5a:04:b9:c0:f8:
                    9e:f9:22:5f:71:8f:78:01:ad:52:bd:b3:34:22:15:
                    a8:f3:6b:58:af:2e:91:b6:92:cb:bd:6b:27:be:38:
                    ee:5d:c3:de:8c:22:ba:6b:b7:cb:04:87:7d:7f:99:
                    86:65:cb:49:4c:3f:8a:73:e1:83:07:9a:7f:78:94:
                    e3:8e:24:b1:1d:8b:b1:16:ae:df:1c:e2:44:00:91:
                    ed:ff:74:d9:24:39:3b:ab:78:9e:44:1c:57:fd:aa:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:D9:5B:DF:B0:15:C8:53:BC:A3:DB:3A:CE:96:BC:1E:12:D5:49
            X509v3 Authority Key Identifier:
                keyid:00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:66:78:63:2d:ce:2a:2f:00:62:b3:39:0f:cb:71:8d:c5:83:
         82:46:77:ac:7f:2d:1e:aa:35:14:8e:cb:e1:98:22:4d:07:a1:
         b6:ca:4f:97:da:26:16:0f:34:56:a7:79:71:7d:b6:fa:30:09:
         e5:5c:75:54:e0:59:b9:4c:fd:9c:77:fe:da:5f:a5:7a:1b:f8:
         94:81:fd:60:41:32:7c:93:39:ee:e2:25:b5:c7:70:ca:bb:5d:
         59:19:0f:79:1b:86:49:54:0e:56:63:a7:77:24:a6:e6:03:ca:
         ef:e5:60:ba:b2:6a:91:45:45:c9:0c:f0:c1:a3:1d:3c:06:ca:
         36:d0:72:02:d3:91:b4:21:3f:7a:9a:cc:4c:fe:72:b8:df:8f:
         ab:9c:d9:fd:5e:54:81:f5:32:ed:ea:47:5f:49:43:1f:13:cb:
         f5:e6:1c:3d:b7:49:38:43:e6:dd:ba:a1:72:ad:e0:13:be:69:
         55:5b:be:af:31:39:e8:c3:cb:f5:f3:6b:1a:f6:94:22:bc:f2:
         28:31:9a:ac:ad:d2:32:dc:4f:1c:8f:41:08:b8:57:06:41:af:
         fa:66:67:8b:f9:b3:20:ce:76:0c:61:6b:91:bd:e1:97:de:25:
         92:28:ab:7e:cc:5b:a3:f3:d1:99:e6:7b:8c:83:1f:dd:26:2c:
         e6:ef:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:10 2026 by rpki-client