Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
File:                     SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft (raw, json)
Hash identifier:          sKQZmuiJxTbdwTupi9llg//2Bh/st/G8TpVq+x2EU+I=
Subject key identifier:   4F:51:8E:4E:19:05:A6:9F:84:ED:EF:20:26:82:92:59:90:4B:42:EB
Authority key identifier: 48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F
Certificate issuer:       /CN=F367DA9BAF/serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
Certificate serial:       0531
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
Manifest number:          0530
Signing time:             Tue 28 Jul 2026 03:11:03 +0000
Manifest this update:     Tue 28 Jul 2026 03:11:02 +0000
Manifest next update:     Thu 30 Jul 2026 03:11:02 +0000
Files and hashes:         1: SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl (hash: /9rJTmj+es+B4cmQKUJUhccEqGx+rWUD8cV3ZTOWhXc=)
                          2: 46F0B40CABC211ED9ACEA683F1222468.roa (hash: gMJyXLKD9QP+OLiQjsuXWN3MuSsqyBtsebI9uk9Cd8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAF, serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
        Validity
            Not Before: Jul 28 03:11:02 2026 GMT
            Not After : Jul 30 03:11:02 2026 GMT
        Subject: CN=6a681dc7-99f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:77:aa:78:f0:47:99:7e:5e:22:61:d2:6c:
                    6c:2c:26:19:d1:ee:ee:97:19:33:3c:c7:65:77:cc:
                    5e:bd:32:6c:b0:84:cc:63:af:e0:1c:64:e3:51:38:
                    39:f9:77:dd:7c:55:e2:95:40:45:f8:fc:03:3b:68:
                    30:a6:6d:4d:bd:f9:04:c3:66:90:52:82:e7:8d:04:
                    38:d1:89:00:e8:ee:d7:f5:af:df:78:06:14:9e:9e:
                    1b:78:b4:7b:82:a9:ba:a1:2a:27:8f:85:95:69:c8:
                    f3:d6:56:4b:04:7e:02:a8:11:f6:9c:8a:f0:2b:3f:
                    a5:37:91:d9:0a:7e:00:f1:83:c8:61:ff:c4:eb:b7:
                    5f:29:86:b1:a9:36:70:76:53:50:50:04:fa:65:59:
                    9b:9a:29:87:2f:bd:ce:42:a7:23:02:89:be:39:4c:
                    35:b7:57:83:46:4b:6c:d2:d4:fc:26:36:b4:f3:a8:
                    bf:14:d0:05:57:4e:8b:3c:e6:9e:85:60:f3:49:e3:
                    92:80:af:53:ae:cd:ff:89:14:64:88:82:4a:5b:7c:
                    63:7f:5e:03:b5:28:ea:77:c8:cc:5b:db:5c:6b:b8:
                    49:f0:12:75:72:51:74:5f:5b:98:56:6e:9f:cd:ff:
                    a3:a5:ba:8a:7c:8f:e2:a7:13:3b:89:91:de:58:4f:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:51:8E:4E:19:05:A6:9F:84:ED:EF:20:26:82:92:59:90:4B:42:EB
            X509v3 Authority Key Identifier:
                keyid:48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:59:a9:e8:dd:39:ae:74:19:1c:c6:c7:d0:57:dd:7f:88:
         7f:89:cc:e3:11:aa:51:7f:f8:42:1b:99:59:00:3f:14:a6:9a:
         ae:d6:cd:dc:0b:5b:43:7d:0e:69:a4:d7:aa:0a:19:db:16:00:
         c1:64:b1:26:a2:0d:66:93:60:90:db:ca:15:27:8f:51:db:a0:
         e9:b8:8b:b0:ce:ca:d4:95:23:7d:8c:18:b6:0f:bb:32:95:ff:
         34:26:d9:78:a8:9f:bb:80:64:b9:3e:2c:2f:b8:63:0a:90:e1:
         58:99:34:45:bd:11:d5:96:07:4b:ca:97:e9:6e:5c:0e:59:49:
         88:f7:29:7f:13:70:5f:c3:6e:6e:ee:ad:9b:06:9f:b4:46:d5:
         87:f5:e0:2e:a4:03:df:58:8c:e4:92:87:b6:b5:21:04:1d:f1:
         8d:c2:62:6f:0e:8c:31:af:c9:fd:ee:d3:66:2d:a2:9a:74:fc:
         fd:d6:68:21:5b:a6:03:ee:ba:1c:30:1a:bb:f0:da:5e:83:c1:
         8f:db:e4:2f:c9:eb:7e:bf:b2:42:27:81:25:c6:42:1a:18:d6:
         a4:34:d0:22:4f:25:84:23:d8:7b:1b:f7:ad:1a:20:f5:7b:e4:
         fe:4c:7f:f6:3f:56:43:9b:d8:76:02:2b:22:2d:1d:dc:2d:57:
         25:b2:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:18:15 2026 by rpki-client