Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File:                     NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier:          zM5XxQdEqtebVAnx1EYbIyYr3x4ilZgaqBfwp53RW0Q=
Subject key identifier:   3D:A2:25:5B:18:38:32:64:D2:24:12:FC:D2:D1:F4:B1:47:48:33:CE
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer:       /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial:       0647
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number:          0644
Signing time:             Sat 13 Jun 2026 02:38:09 +0000
Manifest this update:     Sat 13 Jun 2026 02:38:08 +0000
Manifest next update:     Mon 15 Jun 2026 02:38:08 +0000
Files and hashes:         1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: 2WU4MwVhQkF4WrvxJP6hMlrVcri7f0oYw4jp38bK6/I=)
                          2: 99A1984E57F311F086ED54DEDAE4EC9C.roa (hash: ZM8T8/0Cbu1okxArEtkbxlaS5j1+sO4e39kgIitch78=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
        Validity
            Not Before: Jun 13 02:38:08 2026 GMT
            Not After : Jun 15 02:38:08 2026 GMT
        Subject: CN=6a2cc291-ac1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:96:2f:28:7b:be:43:0f:80:57:40:cd:71:
                    ea:79:23:4f:ed:b6:44:20:55:53:30:fd:fa:ab:de:
                    90:e6:fd:76:c7:30:cc:6b:ca:cd:60:25:c6:76:55:
                    1f:96:94:90:e6:9e:e0:62:ac:d4:d5:94:1c:32:c7:
                    ec:d7:46:3e:df:bc:4e:9e:52:c4:ca:ae:bf:ba:e2:
                    74:a3:9a:cb:f8:1e:94:c4:28:ab:7a:94:4b:b4:f2:
                    e2:87:4b:60:d0:00:bc:5c:a5:ce:6f:7e:e0:19:07:
                    fe:e9:fb:e8:d2:3b:1f:5b:0d:07:0f:23:23:f1:9f:
                    76:06:35:f1:0f:d8:ac:bc:3b:b0:6b:43:e5:5f:5f:
                    ee:af:be:9e:38:9b:61:fa:f5:3d:20:65:69:c1:ce:
                    2b:71:e0:d5:48:ba:2f:a6:af:9d:04:ee:bf:a2:29:
                    cc:6d:f0:91:7d:7e:c4:30:80:1e:88:20:2b:60:38:
                    c6:88:82:e1:3b:56:dd:5d:15:a1:93:8f:c3:1f:ff:
                    d1:c7:82:84:7d:19:a0:9f:87:53:03:e6:ad:8b:b2:
                    76:21:9e:d1:10:7f:e4:00:fc:cd:24:84:8b:43:b7:
                    2d:0b:1e:1f:aa:ba:65:bf:49:ec:da:21:69:b0:5d:
                    8d:19:15:7e:08:62:29:0e:2a:29:53:ef:50:77:65:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:25:5B:18:38:32:64:D2:24:12:FC:D2:D1:F4:B1:47:48:33:CE
            X509v3 Authority Key Identifier:
                keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:20:08:fe:69:d7:37:1d:51:04:ba:8b:33:c0:8e:c3:dd:47:
         d2:8f:3e:e9:fb:32:bf:14:65:a6:ce:4f:ce:85:8e:41:f7:dc:
         74:15:88:24:7d:98:b5:6c:a6:01:7b:5b:aa:f1:ed:e7:44:55:
         9f:40:13:3a:e1:51:19:5d:47:10:a9:63:d8:eb:52:75:d9:04:
         1b:63:45:2c:d3:a8:21:d5:14:7b:cd:44:a1:10:fc:c8:b2:d3:
         80:40:d1:b8:11:fc:91:79:35:d8:41:5d:8a:38:51:fc:28:bd:
         92:c8:fb:50:21:c8:4c:ab:73:eb:ab:b4:a4:43:3f:10:0a:0d:
         57:1e:f0:3e:88:67:e7:24:f2:5c:5b:33:cb:22:a7:3c:61:a7:
         cc:54:8d:82:ee:67:97:74:93:ff:bb:53:33:59:d7:46:59:43:
         85:35:81:66:e9:4a:93:2f:78:04:77:c9:f2:00:9d:d4:34:f3:
         aa:bb:1d:3f:d9:c0:b4:92:57:72:1a:31:e6:8e:24:ab:c0:27:
         90:45:7c:b4:c5:91:c9:b5:bb:b1:19:5c:18:21:27:60:70:50:
         c4:aa:80:4d:54:40:d7:fd:ff:17:64:05:81:0e:25:96:8d:fd:
         90:95:2a:62:df:55:e3:3a:2a:52:c5:a1:e6:18:9b:97:8a:3a:
         77:c5:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:30:56 2026 by rpki-client