Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
File:                     _9XXjnVnnozv_5gXPaanm0zID_0.mft (raw, json)
Hash identifier:          gd+OhocTHGmCQ2ifig+NcidU2F3/dHJh5wO6mEO3n5Q=
Subject key identifier:   3B:F0:AF:09:C3:86:E3:F4:67:92:BB:70:92:57:AF:38:40:F1:C2:4E
Authority key identifier: FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD
Certificate issuer:       /CN=F366C76DAF/serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
Certificate serial:       EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
Manifest number:          EA
Signing time:             Tue 28 Jul 2026 05:19:38 +0000
Manifest this update:     Tue 28 Jul 2026 05:19:37 +0000
Manifest next update:     Thu 30 Jul 2026 05:19:37 +0000
Files and hashes:         1: _9XXjnVnnozv_5gXPaanm0zID_0.crl (hash: HPpXo1y0KAZRoyGyJ1Pk8hAW4H+/s30K3ZvKMRq490k=)
                          2: 51BF4370D5CD11F0BF78ACDCDAE4EC9C.roa (hash: GpfJtRTKikRCRP7GY2KeAG+0LEHAqBX0XHiILcklaao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C76DAF, serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
        Validity
            Not Before: Jul 28 05:19:37 2026 GMT
            Not After : Jul 30 05:19:37 2026 GMT
        Subject: CN=6a683bea-102b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:fe:ab:6f:c7:9d:ee:21:53:f6:98:f9:64:
                    9c:06:dc:0f:c2:6e:07:28:fd:9d:40:4f:32:b8:d6:
                    fb:aa:d4:59:d1:79:5e:df:81:1f:17:cf:ea:e0:f3:
                    99:6c:37:fb:f7:41:99:1f:42:2e:0e:8a:d6:88:ac:
                    fc:98:49:09:e6:a2:67:dd:31:7a:12:40:2e:9f:cb:
                    fc:11:ee:a8:b2:1c:81:4c:07:40:e6:19:30:f4:cf:
                    ee:76:5f:52:04:19:59:75:b6:d5:dd:13:52:14:af:
                    b7:d1:0c:e8:75:ab:3c:60:a6:11:53:b3:8f:5e:e3:
                    c2:ba:46:0d:53:64:11:d3:1e:42:0a:88:ba:bd:9b:
                    39:bf:f4:c1:25:f2:51:60:24:b4:22:7c:7d:97:c0:
                    32:e5:46:9b:ce:8a:85:a2:c4:01:60:c2:72:e1:27:
                    63:07:c5:03:23:5d:f7:f9:19:50:fe:63:3e:38:e4:
                    68:12:25:7b:1e:a0:a8:dd:20:38:51:d5:07:ac:7e:
                    ac:38:8f:02:52:54:42:45:a2:51:04:09:30:09:4d:
                    26:71:aa:35:ac:d1:bb:34:4c:6a:b8:c4:dd:15:f6:
                    da:39:4d:9b:f6:90:69:1b:19:5b:0f:aa:d4:7c:9c:
                    5b:6a:61:08:e3:22:d2:c0:9b:63:0f:82:b6:08:79:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F0:AF:09:C3:86:E3:F4:67:92:BB:70:92:57:AF:38:40:F1:C2:4E
            X509v3 Authority Key Identifier:
                keyid:FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:83:41:c0:20:91:86:a8:ee:6f:02:7b:a1:5c:8f:1a:ea:ea:
         ef:39:ec:08:57:82:0d:b2:00:62:eb:b6:7a:3c:c0:76:c7:c5:
         ba:08:76:32:c2:3d:60:c0:7f:23:88:69:d0:08:40:a1:b3:fe:
         c0:c1:af:1f:89:0d:54:3d:7d:ad:7b:22:9d:26:66:5f:01:4c:
         7a:f4:c9:f0:87:33:73:51:a2:79:00:ce:77:b0:a0:01:36:fd:
         5a:42:84:b0:a0:38:09:5f:47:8c:05:be:90:cd:62:2e:70:d9:
         9f:af:f0:47:ce:66:48:40:8c:a9:bb:44:66:8a:c8:d5:8e:83:
         99:8d:6f:fc:9b:fd:2d:f7:7e:60:1f:20:29:44:ce:aa:ef:2c:
         83:85:3c:c7:b5:d6:f6:b0:71:8c:54:e8:81:e6:0c:dc:85:a2:
         fa:a1:a2:3c:d5:7e:ae:c3:3c:7c:cd:4f:2e:15:65:7a:3e:2d:
         58:ef:3d:a6:b9:d6:d1:2e:1d:1e:07:aa:df:ba:f8:97:95:9c:
         cf:b0:67:02:65:87:ec:fb:74:87:aa:21:59:44:06:5f:62:4a:
         2a:65:39:17:4b:4c:f3:f5:4e:0f:cb:ac:d6:8f:fa:1a:04:7e:
         02:b7:02:71:19:ba:de:d2:ba:f6:3e:d9:f8:16:cb:da:40:8d:
         09:c5:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:35 2026 by rpki-client