Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          KDA0nNXfxPfEpj37p7vukTrHFUAkOXF7PdCyzEnoQcU=
Subject key identifier:   39:B9:AB:32:1C:32:DD:41:AA:FD:F2:BF:C2:A0:4B:B6:D5:4E:CB:E4
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0DAA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0DA8
Signing time:             Tue 28 Jul 2026 01:07:50 +0000
Manifest this update:     Tue 28 Jul 2026 01:07:49 +0000
Manifest next update:     Thu 30 Jul 2026 01:07:49 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: R/Z655Kfv1uo6HBxInsl2NfLQcWq8qxyRNslJamx/v8=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3498 (0xdaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Jul 28 01:07:49 2026 GMT
            Not After : Jul 30 01:07:49 2026 GMT
        Subject: CN=6a6800e6-47ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:ca:8b:d6:13:f6:ad:c7:68:e9:5c:14:d9:
                    98:26:73:88:da:16:6f:ee:6d:11:f7:7c:5e:bc:10:
                    c9:96:ae:d9:3f:e0:60:e3:b5:cb:9c:15:ad:8d:e8:
                    e5:9f:c4:dd:e4:bc:9a:8a:bc:61:ef:18:0b:f2:22:
                    fc:ed:a4:25:55:c3:d3:42:64:00:8e:9d:d4:7d:44:
                    3b:21:e4:eb:fd:b6:60:af:cc:55:7b:20:10:6e:75:
                    54:fa:75:7b:e7:92:59:ea:4a:72:24:f2:9a:03:c0:
                    a8:ef:b7:db:94:8b:75:82:f8:f1:58:9c:81:2e:71:
                    81:27:06:b3:ea:94:b8:9d:5b:7f:81:5c:3d:77:91:
                    9d:af:a8:05:5e:19:04:bf:f7:c0:03:cc:9f:79:2f:
                    20:72:9c:74:fe:f0:3a:7e:11:f6:f9:56:81:03:b6:
                    2c:3f:8a:4a:93:22:71:d8:b3:31:34:fe:c9:55:5d:
                    2f:18:01:24:76:dc:0c:7b:92:da:0f:13:bd:a4:0f:
                    02:88:2b:aa:70:d0:d6:cb:ed:45:a1:c6:78:6d:90:
                    ad:8a:43:81:ec:49:be:f4:d1:ba:ac:08:d4:3c:c7:
                    83:de:7b:7d:6f:1d:72:6b:ed:29:7f:f5:31:d3:c1:
                    68:d6:d9:21:56:9b:63:7a:f7:29:e9:9b:3f:60:11:
                    e5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B9:AB:32:1C:32:DD:41:AA:FD:F2:BF:C2:A0:4B:B6:D5:4E:CB:E4
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:0f:ce:59:ca:de:8a:c7:5e:42:c3:52:56:cb:9d:d1:3e:
         17:5b:3b:95:6d:b3:93:5c:7f:b9:82:a6:e3:e2:b1:9c:6d:00:
         af:8c:8e:f6:76:c3:4d:3f:1f:1b:46:f3:ea:a4:81:92:3e:f2:
         bb:10:56:0a:11:69:48:d4:e3:61:9f:da:4d:78:00:fd:cc:3f:
         f3:1f:6b:f2:a5:36:99:51:ef:da:37:aa:a5:c7:07:a0:20:81:
         bb:d5:28:6a:47:f2:ca:53:ea:a8:04:3c:36:0a:40:24:5f:07:
         02:29:69:22:f9:22:f3:c3:d2:52:9d:a8:2c:c9:a1:b2:e3:8f:
         49:7e:46:f2:51:4d:56:b8:7e:96:ce:83:fc:85:08:f6:ec:71:
         7e:09:f8:32:4f:62:ea:69:c0:de:e2:d1:de:78:42:a5:30:e3:
         67:8a:cf:e5:b3:37:d4:9d:fb:1d:e9:1d:19:b4:f2:95:0e:6d:
         02:30:e8:41:a7:bb:bf:d0:1f:0d:64:f7:60:d8:44:ff:e3:9b:
         69:d2:ad:fe:bc:3b:dd:9b:0f:8e:33:48:a4:ae:ec:28:cf:05:
         41:9d:e1:df:8d:64:58:85:f3:c3:fe:f2:63:49:30:69:05:71:
         17:57:f6:88:fd:e5:c2:16:ca:19:92:06:f6:cd:26:f5:62:49:
         6e:8d:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:20 2026 by rpki-client