Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          6yRtzROejASnWQGEYIfnl0igO3iqHUifk0+M3R1u2O0=
Subject key identifier:   25:35:34:9C:F8:E5:68:EA:F7:FC:59:58:B7:05:41:40:DF:C1:A7:B1
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       09A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          09A2
Signing time:             Sat 13 Jun 2026 01:38:01 +0000
Manifest this update:     Sat 13 Jun 2026 01:38:01 +0000
Manifest next update:     Mon 15 Jun 2026 01:38:01 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: hrr98LNQLpemDXv8TmS5/KhphHJFmavHNWQEHqZbGy4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Jun 13 01:38:01 2026 GMT
            Not After : Jun 15 01:38:01 2026 GMT
        Subject: CN=6a2cb479-96f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:04:52:2d:dd:21:cb:d0:b7:eb:18:a5:5d:
                    18:3f:79:48:f4:9d:6c:bf:99:d2:29:a9:f0:64:7a:
                    0d:e9:b8:f6:5f:af:21:0f:bd:d7:03:d2:9e:36:a9:
                    42:8a:ff:25:5e:da:57:ca:eb:5b:70:11:1d:f5:7a:
                    1c:5b:e0:05:67:16:0a:53:8d:ae:2b:0a:2c:f6:5a:
                    8b:d3:55:b6:89:16:b5:97:9e:fc:dc:37:df:e3:52:
                    4d:e8:49:22:5f:64:3b:37:74:37:7a:42:99:0b:22:
                    6c:ce:2e:64:d7:cc:82:6a:86:ad:2b:e6:4e:54:c5:
                    21:ff:3f:7a:66:07:fb:e6:44:5d:97:c4:6b:cf:99:
                    72:42:67:61:ef:8d:6c:40:16:fb:0f:73:88:b2:02:
                    6d:36:48:ba:19:57:42:a1:95:e1:ed:46:25:64:a7:
                    c9:dd:de:c8:2a:e4:65:3e:2f:ee:9b:aa:1a:e1:4b:
                    ec:79:7e:13:eb:4e:63:af:6b:b7:96:6b:95:a8:59:
                    d7:9c:fc:15:eb:1c:6e:8b:ae:08:ae:0f:ae:5a:00:
                    06:0c:74:7a:de:1c:ce:02:94:81:61:9d:05:d4:21:
                    78:2a:8b:b4:a7:48:29:8b:ab:99:69:36:76:66:33:
                    64:89:86:f4:0c:d3:38:26:9c:e3:33:41:09:fe:3e:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:35:34:9C:F8:E5:68:EA:F7:FC:59:58:B7:05:41:40:DF:C1:A7:B1
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:4c:43:4e:e8:b8:30:a8:22:d8:12:f4:79:1a:2e:d5:c7:
         6b:06:bb:0e:34:90:70:41:1f:5a:61:e2:72:b8:f7:5a:82:1b:
         9e:d1:8b:29:b4:79:76:dd:76:0b:98:af:62:80:58:00:c6:c8:
         b2:00:25:4d:f9:3c:f8:45:ba:25:66:fb:6f:d3:13:b8:40:71:
         9d:3b:24:33:6d:a4:1f:18:fc:a7:7b:c6:3e:d2:3f:e9:94:9e:
         c8:8f:ff:0a:ad:5c:60:46:7b:28:47:0d:c1:a9:b9:63:10:c0:
         10:b6:80:b2:b5:6e:1e:5a:e5:14:3b:14:61:4c:c7:d8:3e:d1:
         4c:33:60:19:1e:34:38:79:2b:62:21:5d:4d:45:f1:1a:fb:a2:
         74:8b:3c:ea:f3:ed:82:52:f2:df:9b:a3:cb:6d:66:7c:02:b7:
         54:31:cb:a3:48:ec:8f:1b:19:83:3e:ac:fc:48:f9:50:7e:31:
         3c:53:fe:55:57:ce:a1:e6:f1:37:19:ba:0c:e2:21:f8:c0:29:
         6d:6a:4e:54:b9:11:74:44:6e:25:e3:30:b8:06:8a:97:af:56:
         98:3d:5a:ff:b4:5d:6e:42:96:22:2a:eb:3b:29:4b:21:9c:ea:
         54:ff:21:e9:5a:da:0e:29:8f:8b:93:91:fd:eb:4d:82:f3:54:
         fa:e9:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:33:54 2026 by rpki-client