Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier:          djva8L7o4qD7AT50TSY9wdpFNOtnm25Hkm/ddoyl30U=
Subject key identifier:   0E:D6:0D:69:DE:9A:08:B3:98:6B:BA:9A:75:54:83:71:F0:74:8B:E0
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer:       /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial:       0472
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number:          046D
Signing time:             Tue 28 Jul 2026 03:36:08 +0000
Manifest this update:     Tue 28 Jul 2026 03:36:07 +0000
Manifest next update:     Thu 30 Jul 2026 03:36:07 +0000
Files and hashes:         1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: 7h8VKL5pxHoJTCb1YAvA6ZS1J0pq4PdnBh9Y14eeqVE=)
                          2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
                          3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
                          4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
                          5: 621AA83C2CED11F1BD66A280DAE4EC9C.roa (hash: aW8sKhCXcHPjuzp5UNhH+Nw6XIrL1+PMzKJWjjR5zDM=)
                          6: F826BE522CEC11F1B5DF3280DAE4EC9C.roa (hash: fi+fPzRV49+4XUClZdX633bw6RHfPVBTJln+gH9qYnw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Validity
            Not Before: Jul 28 03:36:07 2026 GMT
            Not After : Jul 30 03:36:07 2026 GMT
        Subject: CN=6a6823a8-22f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:32:50:01:b0:c1:3b:c8:d5:d6:6f:2e:22:
                    e4:94:21:0b:2b:37:14:0e:cb:d9:15:63:5e:8b:1a:
                    a5:fb:a3:8f:50:17:b4:91:74:7f:9f:ed:96:d6:d2:
                    8a:76:5e:75:14:6f:77:d9:2c:d3:ed:2c:bb:ef:51:
                    22:a5:a2:45:91:bb:80:5e:49:fa:93:64:cb:b5:c8:
                    94:e4:d5:2e:38:0a:89:57:39:67:45:7b:52:53:e2:
                    8d:ba:0b:de:98:a3:f4:e8:4f:a9:ca:34:db:c7:02:
                    43:8c:f9:22:53:7a:f9:80:fd:fd:49:79:56:61:5e:
                    09:65:4b:62:be:25:fb:e5:09:22:bd:9d:1e:f6:4f:
                    31:dd:5b:97:e5:69:1c:11:68:49:3f:40:92:eb:9a:
                    5e:1f:74:94:6b:aa:be:11:97:59:97:94:2c:8c:68:
                    9e:8a:54:ea:ef:49:b6:e2:4a:3b:4c:97:ae:12:c7:
                    5e:96:11:12:33:b8:3f:a4:49:7b:4c:17:42:54:14:
                    42:f7:ae:c0:be:2a:11:1b:4e:95:02:ea:2a:31:bd:
                    07:82:9f:b9:94:94:90:09:26:ed:b1:89:9d:5f:e0:
                    16:25:92:c2:0a:7b:9d:ca:f7:4d:7e:8d:4c:fc:47:
                    60:49:41:de:f1:4e:ff:ce:64:05:b6:d9:37:6e:7c:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D6:0D:69:DE:9A:08:B3:98:6B:BA:9A:75:54:83:71:F0:74:8B:E0
            X509v3 Authority Key Identifier:
                keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:f8:38:50:6e:ab:1a:0d:ff:4c:24:ab:62:f5:46:67:43:
         fd:17:1c:14:1b:f6:80:0b:ee:01:57:2a:ce:7e:b8:8e:d6:52:
         37:8c:28:c9:c4:b5:04:fe:19:33:39:14:8a:9a:c7:fd:3f:bb:
         de:68:c6:de:ba:0d:cb:d5:93:51:9f:ed:a3:90:c0:69:c4:1c:
         ea:55:31:a8:77:19:5a:eb:28:f3:11:c9:54:9f:f6:22:38:6a:
         cc:df:15:d3:31:0c:80:eb:f3:cf:76:71:52:7b:c8:a7:5d:b8:
         02:f5:33:6e:61:c4:a4:cf:47:99:69:a7:cd:e5:a7:f1:e3:e7:
         4b:32:e3:4d:51:3f:ed:8d:61:cc:d7:16:7a:45:a4:ee:d2:b9:
         fb:ac:14:cd:ac:e4:04:18:05:a0:43:89:70:92:38:e6:78:3e:
         fe:2c:24:c3:94:ca:f4:ca:85:70:b2:c4:3b:40:1a:6e:b5:c4:
         a6:ea:d7:04:80:4d:5f:6e:29:b8:6e:7a:10:9c:b5:3b:ce:8a:
         c4:d7:74:1e:ac:01:b1:46:3b:12:30:21:4c:13:b3:94:b8:f4:
         1f:f1:9c:b9:ef:27:70:d0:88:91:8a:3d:ba:00:e7:9b:a1:ff:
         f0:21:5c:05:5d:b4:44:b0:45:ff:e9:8f:ef:62:d8:4c:99:e8:
         d6:61:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:49 2026 by rpki-client