Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
File:                     _pOvT0KHl7wjB3xuK6XkNRfU4vs.mft (raw, json)
Hash identifier:          6FQL6yLd9ZwpUSNJmHqPFMD8J59pMphK85DaiGeN6Xg=
Subject key identifier:   45:87:0A:A2:E3:6A:4F:71:49:5C:55:28:EB:F9:83:FA:CF:92:BC:7B
Authority key identifier: FE:93:AF:4F:42:87:97:BC:23:07:7C:6E:2B:A5:E4:35:17:D4:E2:FB
Certificate issuer:       /CN=F3678B2CAF/serialNumber=FE93AF4F428797BC23077C6E2BA5E43517D4E2FB
Certificate serial:       A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
Manifest number:          A8
Signing time:             Wed 29 Jul 2026 05:27:21 +0000
Manifest this update:     Wed 29 Jul 2026 05:27:20 +0000
Manifest next update:     Fri 31 Jul 2026 05:27:20 +0000
Files and hashes:         1: _pOvT0KHl7wjB3xuK6XkNRfU4vs.crl (hash: Nam6v/NEAttIbgR6jRvCB2D9gg6ZIe0jxrfySr48A6U=)
                          2: FE138FA208C511F1827C647CDAE4EC9C.roa (hash: VfBb7QRNJ+0kJ0a9czJU7oLPc0BoZ7T1d1tl93Q0e1I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678B2CAF, serialNumber=FE93AF4F428797BC23077C6E2BA5E43517D4E2FB
        Validity
            Not Before: Jul 29 05:27:20 2026 GMT
            Not After : Jul 31 05:27:20 2026 GMT
        Subject: CN=6a698f39-c584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:02:33:1f:88:fc:82:75:8b:a0:a4:f8:2c:
                    5d:89:19:f3:26:90:f5:b0:e5:d2:55:39:59:b6:df:
                    51:41:e6:c1:ad:c3:dd:68:18:a4:33:b4:82:c2:37:
                    3f:89:35:86:73:22:70:b1:15:0a:fc:d9:94:de:4c:
                    48:6c:c4:dd:50:2a:ea:aa:a8:3c:b8:c9:0d:dc:c2:
                    54:e5:e8:56:2a:87:28:94:de:be:f6:bf:fd:ab:be:
                    66:94:cc:cb:9b:45:e5:32:24:12:d3:3c:cb:59:d1:
                    d4:75:a6:15:dd:f0:15:d5:4a:c1:e0:47:d6:31:c6:
                    f2:c3:f2:41:5e:a1:e3:79:16:77:0f:73:9b:bd:12:
                    67:9b:5e:d2:31:9d:a8:74:cf:ac:77:78:8f:9e:7a:
                    4e:66:8e:ab:e5:c6:4f:12:04:b2:b1:99:88:b3:8e:
                    3c:3e:7f:37:29:a1:db:22:03:ec:9d:ac:4c:78:3f:
                    44:85:ad:94:89:90:77:71:6b:f7:06:8c:cb:1e:72:
                    6b:b0:e9:ca:26:71:79:31:a5:74:6c:a9:ce:e1:36:
                    b6:af:00:01:cb:5f:8b:db:15:e3:2b:ac:8a:3e:a6:
                    9d:1f:ad:89:b6:49:a3:fb:f3:68:0f:10:2c:ae:6b:
                    f2:fc:72:33:cb:3f:12:80:26:02:9f:3f:6a:17:d3:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:87:0A:A2:E3:6A:4F:71:49:5C:55:28:EB:F9:83:FA:CF:92:BC:7B
            X509v3 Authority Key Identifier:
                keyid:FE:93:AF:4F:42:87:97:BC:23:07:7C:6E:2B:A5:E4:35:17:D4:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_pOvT0KHl7wjB3xuK6XkNRfU4vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678B2C/903267CE08C511F1BD6ADA7BDAE4EC9C/_pOvT0KHl7wjB3xuK6XkNRfU4vs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:9e:81:f4:11:a5:ad:94:fc:73:92:54:c1:6d:89:68:57:
         1e:d0:2c:37:14:13:ea:f4:fe:f6:2c:93:38:c2:ab:1b:76:7f:
         be:d7:a8:42:f5:49:0d:e7:02:bd:08:2a:13:fa:0a:c3:a4:0d:
         c0:14:f2:6d:f7:b0:d8:94:e6:4b:13:af:21:36:b6:3f:ac:48:
         c2:00:f5:af:e2:ca:c0:65:80:80:71:91:95:bd:92:70:56:12:
         84:33:e3:68:98:ad:8e:a7:42:89:57:d4:5f:7f:0b:ba:da:b4:
         62:de:b8:92:62:86:7e:0c:83:fc:89:a7:81:ac:af:d5:c2:b6:
         ae:f8:52:c6:41:d8:66:95:c0:2f:22:e2:21:c9:a8:92:d2:a2:
         45:86:28:ed:15:91:75:8b:aa:50:08:a9:72:b5:ee:d3:90:b4:
         6d:c8:0f:f3:b1:96:51:c6:c2:80:fa:20:8a:fa:4b:b3:82:df:
         39:b7:7e:f7:78:3e:b8:be:9b:bd:69:58:60:78:b7:46:c0:32:
         f5:70:e5:ee:95:6a:e7:0a:f3:d7:4e:35:2d:7d:cc:8b:e2:3c:
         ab:18:d2:82:56:06:39:5c:ce:43:95:49:bd:bc:78:b0:28:b1:
         39:e2:70:92:1a:34:ff:26:5b:81:98:97:92:38:bd:7d:57:3d:
         02:3e:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:52:06 2026 by rpki-client