Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          G0rdsWWFa/CRsbzaXYMlsWRRFSVj4lXbNOV0W+f6q00=
Subject key identifier:   E0:03:A1:26:D9:98:DD:42:05:FF:C2:92:DC:CE:CF:52:09:E7:37:2F
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       03DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          03DA
Signing time:             Tue 28 Jul 2026 03:54:11 +0000
Manifest this update:     Tue 28 Jul 2026 03:54:10 +0000
Manifest next update:     Thu 30 Jul 2026 03:54:10 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: c4/P5/P/R6RkoxtVemaCSUbTlxJlhKjoT8kJPtglyZI=)
                          2: C44EDCDE47A111F189DCF8F2CE1D38B0.roa (hash: 5wtUZaGAD6hnevPQoGy0Wp/M21ZmQcq4eTIcxSJMHIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Jul 28 03:54:10 2026 GMT
            Not After : Jul 30 03:54:10 2026 GMT
        Subject: CN=6a6827e3-b3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:6a:ec:48:07:59:9b:35:53:a6:d5:7f:d8:
                    2a:f8:62:bc:c7:58:aa:07:d8:93:7e:02:cb:9e:f7:
                    99:a5:b4:e8:48:c6:e9:76:db:de:fb:46:aa:45:1a:
                    85:bc:a3:0a:f8:47:42:0c:9e:ab:4e:5e:df:5f:f5:
                    4a:23:e0:64:de:45:d7:76:4e:a8:8a:3f:0d:62:55:
                    c6:5e:2a:86:33:bb:73:24:c5:05:c2:e0:99:80:5e:
                    24:6b:d0:48:16:19:b8:0b:ee:02:e6:9b:ea:5e:c3:
                    84:ad:b0:38:18:cc:4d:b0:98:a4:43:bf:36:f2:10:
                    57:8c:18:ce:60:fa:0a:90:29:28:57:3b:db:a3:c7:
                    84:4d:f9:fc:01:c2:a4:e7:68:40:8c:11:7c:ee:1a:
                    3b:23:da:d5:4e:2b:eb:f0:74:32:02:28:be:15:aa:
                    c9:a0:59:23:6e:59:14:39:e2:21:1d:6d:19:a9:4e:
                    67:1a:f5:df:5b:61:b7:1e:4d:4f:e1:b1:b7:44:9f:
                    3b:63:60:39:ca:5e:16:cc:af:73:af:08:99:47:f0:
                    59:ac:73:ba:21:8c:2a:c3:a2:e4:2b:e7:44:11:bd:
                    ef:14:4f:a7:b2:30:f2:e3:12:86:2d:a2:e6:5c:99:
                    7e:96:d8:44:70:99:1a:c3:69:53:81:9c:12:c4:84:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:03:A1:26:D9:98:DD:42:05:FF:C2:92:DC:CE:CF:52:09:E7:37:2F
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b7:ba:7a:38:63:33:98:ea:71:bf:34:b4:0d:b5:98:be:fb:
         9e:7f:46:b4:c6:ab:c1:c3:4c:af:4d:cb:0c:8a:08:0c:40:c0:
         e5:e6:8d:da:b7:3f:a5:62:8e:f7:4d:38:1c:0b:a8:18:31:88:
         9a:4a:85:5d:ea:90:bc:b5:17:57:0c:b2:ff:c1:c4:01:2f:33:
         5b:8b:b7:b6:9c:98:6b:7e:fb:00:2b:f6:1a:24:49:be:ae:0e:
         76:00:e4:f7:02:8a:3a:ec:ba:e1:7a:38:c6:13:1f:f1:d5:dd:
         11:01:26:24:b9:c2:f7:07:c0:50:b8:7a:6c:2e:e2:a7:49:d1:
         1e:e6:27:1f:fa:df:f8:6f:ab:30:c3:66:14:79:51:88:8e:b5:
         16:c2:f7:e5:c8:1d:d9:d7:34:c6:03:71:a4:56:6b:c5:c9:db:
         8a:28:5f:94:16:d3:16:f2:5d:8b:39:13:3d:2d:bf:88:8d:56:
         68:94:db:5c:0d:45:a5:4f:e8:1a:80:20:2a:79:4d:a5:5f:97:
         5c:d0:2f:e3:e1:64:82:6f:f8:e2:aa:7d:be:d5:2e:4d:9f:08:
         c6:66:c6:db:75:b4:be:e7:aa:d8:33:d3:42:d6:7e:ab:bb:d8:
         21:73:09:34:7c:69:e9:04:5a:71:c9:82:be:0f:b5:71:c8:57:
         21:43:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:21 2026 by rpki-client