Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
File:                     Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft (raw, json)
Hash identifier:          Pw01YEZ2+bAi64n/E44IzN0X00p5NRdFORP3e8VuVDY=
Subject key identifier:   C7:CB:02:FF:18:17:C2:3C:D3:01:03:30:F7:86:50:9D:60:50:51:1A
Authority key identifier: 5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A
Certificate issuer:       /CN=F3674A7AAF/serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
Manifest number:          1A
Signing time:             Tue 28 Jul 2026 05:45:43 +0000
Manifest this update:     Tue 28 Jul 2026 05:45:42 +0000
Manifest next update:     Thu 30 Jul 2026 05:45:42 +0000
Files and hashes:         1: Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl (hash: j9yvF5oFUsRzvcvDDQIy8dLGlzDPNKTV1ghojQngrQ4=)
                          2: 180C9F1A793811F19CA8B2B9CE1D38B0.roa (hash: DAs78s5LvDn7SQOIhkA/UYbBae9oa0Ki1f+XOP4srJs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674A7AAF, serialNumber=5E9E1264A2E914E551FC379EEADCB9B8005D008A
        Validity
            Not Before: Jul 28 05:45:42 2026 GMT
            Not After : Jul 30 05:45:42 2026 GMT
        Subject: CN=6a684206-2542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:e1:f0:7a:5a:92:ee:2b:cf:41:3a:09:47:
                    89:28:e2:a0:3d:e4:d8:02:a4:04:22:26:c2:a4:83:
                    f5:5f:19:cb:3b:80:68:00:93:94:c0:b2:cf:83:f0:
                    07:9e:57:93:93:c5:c1:f4:e7:eb:c2:0c:ac:a1:7c:
                    af:45:9e:be:46:5e:fa:07:a3:05:09:5f:08:a7:e5:
                    da:4d:84:e0:d7:24:4f:dd:e6:39:b1:d6:46:77:92:
                    a5:c8:c6:4a:78:68:6c:a1:ae:ca:68:cf:99:34:07:
                    c4:97:ea:26:d6:0e:c0:4f:28:c4:ef:e9:7a:ef:1d:
                    9a:3a:50:78:44:0a:4c:72:21:ed:df:42:ce:f4:b6:
                    c6:0a:e9:73:32:c2:b1:f0:7c:d7:c8:99:74:38:eb:
                    0a:de:77:90:70:e3:9b:bd:29:f1:23:3e:9c:6f:b2:
                    d7:d5:26:83:0f:80:57:30:60:a8:0e:85:f0:c9:3a:
                    5b:03:ea:4c:ff:38:c6:bd:c0:34:e5:48:39:f2:bc:
                    93:14:2b:f6:8d:2c:44:a2:79:f5:22:dc:56:5d:6b:
                    08:cc:ca:1a:86:43:17:e6:f2:43:b8:00:5e:da:47:
                    b5:50:b9:40:13:ae:4a:ed:81:20:74:94:b8:28:e0:
                    a6:ec:ed:a7:4a:83:40:0d:0e:6b:eb:ec:24:29:39:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:02:FF:18:17:C2:3C:D3:01:03:30:F7:86:50:9D:60:50:51:1A
            X509v3 Authority Key Identifier:
                keyid:5E:9E:12:64:A2:E9:14:E5:51:FC:37:9E:EA:DC:B9:B8:00:5D:00:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xp4SZKLpFOVR_Dee6ty5uABdAIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674A7A/6C8C72DC793711F18BE695B5CE1D38B0/Xp4SZKLpFOVR_Dee6ty5uABdAIo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:28:e2:19:d3:2c:cd:ec:d5:fc:44:12:ce:3c:5b:f3:24:
         13:a4:98:b0:c9:fd:f3:60:78:96:6b:26:51:39:9e:49:de:c8:
         e6:ab:32:f5:b4:ba:79:85:f1:17:f6:28:32:ca:2c:77:18:56:
         34:45:e6:ba:ca:24:2f:be:2f:91:76:17:d2:61:fa:7e:33:57:
         39:26:f5:7a:ae:18:3c:db:32:58:89:ff:85:e1:68:a8:19:4a:
         be:3d:4a:b2:2f:03:d3:d9:cc:2b:6e:67:ee:6a:92:a3:e2:a5:
         33:48:3d:84:40:20:80:eb:64:da:5e:f3:66:d6:10:90:7c:d1:
         f7:c4:dd:d9:dd:20:5f:e3:64:ea:2e:82:42:58:79:c8:57:13:
         96:71:eb:2f:16:26:69:18:3d:ab:41:f3:6e:65:18:12:0a:0a:
         cd:f6:37:d4:cd:f3:2d:9b:77:49:4d:40:ba:34:b9:07:92:b9:
         89:f1:82:5c:cf:67:b0:ef:e2:93:16:a2:9e:83:c5:36:7e:c9:
         19:bc:98:55:19:70:e0:15:a1:fc:65:69:eb:b0:94:58:25:60:
         15:54:51:cc:37:6f:c3:c8:78:a9:75:94:a9:dc:c1:7d:07:7b:
         1f:00:2f:fe:77:9e:4b:5a:37:88:9b:97:ae:6f:40:2d:d4:15:
         fd:10:96:6d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBGzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NEE3QUFGMTEwLwYDVQQFEyg1RTlFMTI2NEEyRTkxNEU1NTFGQzM3OUVFQURDQjlC
ODAwNUQwMDhBMB4XDTI2MDcyODA1NDU0MloXDTI2MDczMDA1NDU0MlowGDEWMBQG
A1UEAxMNNmE2ODQyMDYtMjU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALdk4fB6WpLuK89BOglHiSjioD3k2AKkBCImwqSD9V8ZyzuAaACTlMCyz4Pw
B55Xk5PFwfTn68IMrKF8r0WevkZe+gejBQlfCKfl2k2E4NckT93mObHWRneSpcjG
SnhobKGuymjPmTQHxJfqJtYOwE8oxO/peu8dmjpQeEQKTHIh7d9CzvS2xgrpczLC
sfB818iZdDjrCt53kHDjm70p8SM+nG+y19Umgw+AVzBgqA6F8Mk6WwPqTP84xr3A
NOVIOfK8kxQr9o0sRKJ59SLcVl1rCMzKGoZDF+byQ7gAXtpHtVC5QBOuSu2BIHSU
uCjgpuztp0qDQA0Oa+vsJCk58c0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTHywL/
GBfCPNMBAzD3hlCdYFBRGjAfBgNVHSMEGDAWgBRenhJkoukU5VH8N57q3Lm4AF0A
ijAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzRBN0EvNkM4QzcyREM3OTM3MTFGMThCRTY5NUI1Q0UxRDM4QjAvWHA0U1pL
THBGT1ZSX0RlZTZ0eTV1QUJkQUlvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWHA0U1pLTHBGT1ZSX0RlZTZ0eTV1QUJkQUlvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3NEE3QS82QzhDNzJEQzc5MzcxMUYxOEJFNjk1QjVDRTFE
MzhCMC9YcDRTWktMcEZPVlJfRGVlNnR5NXVBQmRBSW8ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIesKOIZ0yzN7NX8RBLOPFvzJBOkmLDJ
/fNgeJZrJlE5nkneyOarMvW0unmF8Rf2KDLKLHcYVjRF5rrKJC++L5F2F9Jh+n4z
Vzkm9XquGDzbMliJ/4XhaKgZSr49SrIvA9PZzCtuZ+5qkqPipTNIPYRAIIDrZNpe
82bWEJB80ffE3dndIF/jZOougkJYechXE5Zx6y8WJmkYPatB825lGBIKCs32N9TN
8y2bd0lNQLo0uQeSuYnxglzPZ7Dv4pMWop6DxTZ+yRm8mFUZcOAVofxlaeuwlFgl
YBVUUcw3b8PIeKl1lKncwX0Hex8AL/53nktaN4ibl65vQC3UFf0Qlm0=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:32 2026 by rpki-client