Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
File:                     PTg51e4dl7STFVYoMdygQJMxSB8.mft (raw, json)
Hash identifier:          nrVhNsjtf1l/qgzkGg8BrZg3Chidq25d3osByJIsJwI=
Subject key identifier:   25:75:D6:2E:04:4A:43:8A:F7:A4:D1:D7:50:65:82:51:19:CA:C4:57
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Certificate issuer:       /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial:       09D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
Manifest number:          09C8
Signing time:             Sat 13 Jun 2026 01:36:48 +0000
Manifest this update:     Sat 13 Jun 2026 01:36:48 +0000
Manifest next update:     Mon 15 Jun 2026 01:36:48 +0000
Files and hashes:         1: PTg51e4dl7STFVYoMdygQJMxSB8.crl (hash: HmzdU3EfpO5OxAdBdaDUUxHU8lHwuviqGdlkoYN3RHU=)
                          2: EBE9D8E4002911F1B948E098DAE4EC9C.roa (hash: A27M1xspmH5ryATJrqn4YiVO/fe+mYlUQpMbMsLJvnw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520 (0x9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36763E5AF, serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
        Validity
            Not Before: Jun 13 01:36:48 2026 GMT
            Not After : Jun 15 01:36:48 2026 GMT
        Subject: CN=6a2cb430-9845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:b9:3d:b4:6f:a4:aa:da:a3:6d:56:ab:1a:
                    1b:02:c7:bf:dc:4d:57:fd:3f:26:c9:4b:1a:d3:88:
                    6a:85:de:37:ea:27:3e:f2:a3:ed:fc:77:cc:fb:95:
                    e5:2d:6f:26:85:d7:3a:e6:ff:ec:f9:54:ad:61:c6:
                    c1:55:28:ab:be:ea:54:2d:3b:4e:79:83:71:40:ed:
                    fb:55:47:9d:3e:09:ce:73:ac:62:1c:fe:41:9e:05:
                    16:2c:de:84:e8:b7:94:4f:4c:62:d0:97:b1:2c:c0:
                    49:13:d2:61:25:b2:c9:d6:92:a9:5a:e1:e0:e7:49:
                    db:49:c7:d5:fe:ca:ff:c2:aa:46:83:57:56:92:bd:
                    fb:0b:80:54:31:2d:cc:44:1f:25:f3:83:19:92:4b:
                    13:89:7f:98:5d:2e:44:e7:09:5c:88:c5:0e:0d:f5:
                    76:95:b5:b0:4b:c7:47:9a:ae:a8:56:24:86:8f:54:
                    1e:52:00:21:2d:9c:c1:3f:c1:5f:ee:da:c0:2c:2f:
                    4a:08:4f:f0:a5:d6:f6:b9:68:96:a7:cb:ec:15:14:
                    1d:f2:cb:75:4d:f7:69:94:b1:40:1f:8d:83:65:e9:
                    1f:2d:e6:e9:04:a0:22:30:a6:dc:2e:b2:75:b4:8b:
                    28:61:68:fc:9a:79:68:23:14:e0:2e:fc:ef:1f:37:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:75:D6:2E:04:4A:43:8A:F7:A4:D1:D7:50:65:82:51:19:CA:C4:57
            X509v3 Authority Key Identifier:
                keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:20:b0:cb:cd:72:61:99:a2:19:2a:df:52:0e:84:45:2a:52:
         81:63:3c:bb:90:09:36:8f:e4:08:b2:38:1e:fb:97:4e:55:36:
         ef:ca:af:09:40:c2:4d:6d:31:ba:c3:ad:00:0b:13:60:9e:57:
         7d:c6:4f:c0:27:54:cc:2f:f5:fc:2f:ba:12:94:00:e2:12:96:
         0c:70:f5:e1:e8:40:5a:fc:cd:8e:e1:28:ab:f8:04:ce:ab:ca:
         68:8e:f7:64:76:07:79:5b:be:57:0f:7f:c9:21:e7:f7:4f:9d:
         3b:06:b2:d7:28:a6:34:94:a6:39:69:10:fd:98:f1:8f:65:88:
         da:7b:e7:16:30:9b:93:c9:eb:54:27:e8:e9:0e:7d:fd:10:12:
         e1:c6:eb:d5:cd:f4:dd:5f:9d:3a:25:2f:71:c3:cc:85:93:1c:
         9c:51:93:fb:f3:3f:0b:44:1c:2d:44:79:22:c5:6d:68:50:58:
         73:9f:ef:11:94:f9:94:d5:fc:45:b0:de:0e:a0:a7:b4:44:d5:
         9e:0e:dc:94:4c:ed:0e:6a:ba:88:59:94:df:6d:a0:4a:9b:db:
         aa:9d:c8:5c:03:62:33:11:a0:6b:84:96:65:5b:1d:a5:9c:ea:
         29:e8:ca:a8:b4:47:57:1e:5c:13:b4:85:4b:6c:ce:ae:f6:42:
         97:a0:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:31:59 2026 by rpki-client