Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
File:                     OeBYqNzoFjByS4lzRvoEsTIUauc.mft (raw, json)
Hash identifier:          osy4XH26289oxOaiiEbfZ044cO5Oz8SKArMd2AWuFEg=
Subject key identifier:   2A:13:14:59:54:DB:EC:7F:A8:79:FD:5A:14:CD:A1:6D:3C:89:E1:C9
Authority key identifier: 39:E0:58:A8:DC:E8:16:30:72:4B:89:73:46:FA:04:B1:32:14:6A:E7
Certificate issuer:       /CN=F366D16AAF/serialNumber=39E058A8DCE81630724B897346FA04B132146AE7
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
Manifest number:          1C
Signing time:             Sat 13 Jun 2026 05:37:45 +0000
Manifest this update:     Sat 13 Jun 2026 05:37:45 +0000
Manifest next update:     Mon 15 Jun 2026 05:37:45 +0000
Files and hashes:         1: OeBYqNzoFjByS4lzRvoEsTIUauc.crl (hash: sn4ykHby7pPiZt2qyePHB/WCuG+6HS9+ZLNsQru99t4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D16AAF, serialNumber=39E058A8DCE81630724B897346FA04B132146AE7
        Validity
            Not Before: Jun 13 05:37:45 2026 GMT
            Not After : Jun 15 05:37:45 2026 GMT
        Subject: CN=6a2ceca9-ec92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:db:9d:d0:0e:46:85:75:c9:c6:60:f5:c3:
                    4a:14:57:ef:7b:67:b2:d6:0c:51:af:ca:26:6b:98:
                    66:51:b1:16:ba:e6:ea:4c:2e:d4:f4:6f:5b:9a:11:
                    7c:6e:83:6b:65:24:60:09:12:3c:bb:e0:64:95:2a:
                    6a:67:60:c5:ab:49:b8:7a:1a:a8:b3:11:fb:21:04:
                    92:b7:17:1d:73:1a:32:a8:0b:09:84:ec:b7:8e:77:
                    81:59:fd:39:2f:b7:97:71:a4:c8:8d:61:d4:46:9e:
                    78:0e:f6:2d:97:82:45:a5:2d:56:39:66:29:cd:12:
                    29:67:0c:6f:45:e2:29:da:3f:ee:55:0e:0b:38:54:
                    1f:98:08:d7:8a:81:66:fd:a8:7a:6b:a2:42:88:d4:
                    10:5a:79:1b:fa:56:8b:66:89:c5:07:4c:14:01:35:
                    17:5c:a3:79:00:f0:42:b5:9a:02:94:4a:66:75:dc:
                    76:f1:29:6b:4d:a7:5a:18:b8:17:b9:e6:04:02:97:
                    11:bd:a4:cd:06:9f:5f:6d:93:d3:e7:cb:91:c4:8f:
                    e7:80:42:26:3a:da:65:e0:be:6e:ba:49:a6:e3:02:
                    69:2c:13:43:ea:c9:18:80:95:ba:55:a6:6b:5c:ce:
                    60:50:42:1d:f7:4d:b6:1d:d9:c2:2e:e3:11:97:c4:
                    b0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:13:14:59:54:DB:EC:7F:A8:79:FD:5A:14:CD:A1:6D:3C:89:E1:C9
            X509v3 Authority Key Identifier:
                keyid:39:E0:58:A8:DC:E8:16:30:72:4B:89:73:46:FA:04:B1:32:14:6A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OeBYqNzoFjByS4lzRvoEsTIUauc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D16A/D1BA228452A011F187323DD1CE1D38B0/OeBYqNzoFjByS4lzRvoEsTIUauc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:d9:46:96:6a:bc:aa:48:b6:ac:e2:32:42:a1:68:2e:cd:
         42:e8:50:34:57:2f:69:13:03:c5:2b:45:cd:ff:6f:30:f5:81:
         57:ac:74:2c:e0:f4:8d:be:5a:8b:1f:22:c5:7e:da:ab:f7:8b:
         9d:e1:93:49:93:54:4e:18:e4:9f:19:25:7a:38:e5:55:d4:4b:
         66:32:3d:61:16:49:ca:af:c8:fa:14:af:67:ca:33:e0:71:c8:
         a9:55:b2:84:b6:f7:97:1d:1f:90:06:a6:2c:77:02:ec:12:0c:
         dc:cc:06:00:2d:9f:07:70:6a:b3:7b:c4:6d:ba:f5:6c:82:96:
         dc:e0:e7:50:ee:98:a2:2b:9e:27:7f:a2:6e:2c:9e:8b:ae:a0:
         c0:b2:73:0c:74:7d:51:db:22:bc:ca:71:93:40:07:5c:ce:3a:
         ea:48:e6:0d:5f:c2:2c:b0:a4:a5:d4:be:b0:62:b5:c8:24:4b:
         ea:a7:3c:84:27:32:7b:4b:a4:b9:03:d6:59:81:c0:f1:f8:48:
         7c:41:e7:6b:eb:0b:be:fb:94:cc:7f:3d:35:b7:de:cb:38:39:
         fc:a3:d7:f2:f3:dc:79:8e:f9:92:89:6b:23:a7:c9:df:28:fb:
         8a:b8:cd:72:bd:3b:f9:38:9e:93:60:fe:6f:b6:57:1e:b5:26:
         a0:fa:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:25:41 2026 by rpki-client