Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
File:                     qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft (raw, json)
Hash identifier:          q7Vlf8/T8eOp5lgG3yApFgVzsxNr4XjXVtzmpnDm9NM=
Subject key identifier:   11:FE:A6:71:F0:75:C5:63:3D:BE:D5:B7:E4:39:C2:08:A6:1E:E8:2D
Authority key identifier: AA:C5:5D:12:34:D3:B7:F6:EA:76:38:18:40:92:11:72:39:91:72:62
Certificate issuer:       /CN=F367E4D9AF/serialNumber=AAC55D1234D3B7F6EA7638184092117239917262
Certificate serial:       039C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
Manifest number:          039B
Signing time:             Tue 28 Jul 2026 04:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 04:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:12 +0000
Files and hashes:         1: qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl (hash: IkZfQp2Dwrx1b2BkyvQA3TCdTAbAj71DgHszuemuFQQ=)
                          2: B8E765D0C4D311EEBA5AF067775412E6.roa (hash: b0IzaXHkBIGfBIdqoNnOyRPJUQsYRBOGUhp6wp/+Nvw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E4D9AF, serialNumber=AAC55D1234D3B7F6EA7638184092117239917262
        Validity
            Not Before: Jul 28 04:01:12 2026 GMT
            Not After : Jul 30 04:01:12 2026 GMT
        Subject: CN=6a682989-be85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9c:97:58:34:cd:40:e8:00:b0:fd:90:7d:cc:
                    d7:82:ef:ce:c0:ba:99:72:61:f5:b1:40:a1:21:bb:
                    f2:ff:e3:60:a5:82:15:5c:53:4d:b7:36:57:28:bf:
                    c4:9e:98:7e:9c:54:7d:a9:c3:8c:c4:78:dd:da:1a:
                    3b:d5:71:87:29:1a:ff:ba:6c:5a:03:9b:9c:32:b7:
                    64:01:67:3d:e2:aa:5c:62:ce:c1:36:d0:8f:d8:53:
                    ac:42:82:74:e7:c8:5c:31:b9:a1:9a:55:98:4b:f4:
                    9c:2a:4f:02:6c:ea:01:b5:ab:e0:30:9f:78:a1:e9:
                    11:2a:39:a4:56:0d:60:ee:f8:4e:56:63:72:21:62:
                    ee:9b:07:d3:57:b0:4f:c3:0c:4e:47:f7:18:6c:a4:
                    4b:da:12:ac:9e:bb:b7:73:d1:e7:4f:29:f8:42:f2:
                    95:6b:e7:29:33:08:f5:c7:2b:6d:17:36:95:8b:a0:
                    02:86:6f:eb:18:00:63:af:43:c0:e0:53:7a:92:d6:
                    fd:7d:8a:a1:5e:d7:91:71:9c:c5:a5:09:78:03:54:
                    0c:db:65:15:77:07:1e:83:bf:49:3a:7b:e6:30:65:
                    e4:c7:73:eb:59:55:b8:41:d2:5f:bc:1d:b3:2a:95:
                    2f:48:9b:0e:f0:87:b1:42:ba:72:c0:6c:42:3c:7e:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FE:A6:71:F0:75:C5:63:3D:BE:D5:B7:E4:39:C2:08:A6:1E:E8:2D
            X509v3 Authority Key Identifier:
                keyid:AA:C5:5D:12:34:D3:B7:F6:EA:76:38:18:40:92:11:72:39:91:72:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c6:64:0b:ca:d6:2c:37:28:41:cc:1b:56:07:27:fa:ce:8e:
         d7:78:05:36:87:77:fa:74:ce:ab:d9:9e:76:19:d4:c0:7a:38:
         e3:79:f6:95:5e:90:0e:ac:6f:b8:6f:16:17:67:0f:0b:c9:a2:
         f7:08:5e:bd:f2:ec:af:10:62:85:b1:71:1c:ee:ee:56:92:9b:
         84:a6:d2:21:66:a7:14:0d:7d:da:ae:6c:65:23:2c:1d:2a:03:
         f9:25:43:3e:e4:c2:b5:a6:7d:ae:1d:28:ea:ab:5a:ec:fc:8e:
         e9:0e:de:f7:e6:74:c0:30:39:ae:e4:28:2e:5d:03:e9:9f:2a:
         1e:55:5a:b3:16:b3:e6:99:59:2e:13:2d:ec:9b:3c:d1:25:30:
         cf:78:ff:49:ba:d7:28:ad:d5:a5:de:8a:9d:6b:3e:74:c4:57:
         22:c0:27:54:1a:40:d3:36:e8:3f:02:e1:64:b2:46:32:fb:91:
         52:57:b1:b3:fe:d7:b3:94:64:35:eb:28:51:38:89:1b:6e:d7:
         21:a1:e8:d9:40:e7:34:05:cc:d6:84:d4:de:b3:af:a9:5e:76:
         ff:93:44:2f:77:25:39:9b:ef:9a:41:48:fe:c9:67:c8:26:eb:
         30:a5:a9:1a:97:8b:cf:bf:07:a3:db:28:90:6e:ee:61:40:5f:
         79:70:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:50 2026 by rpki-client