Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
File:                     RSGre8up5c6Zxxr-vyNySLagDAQ.mft (raw, json)
Hash identifier:          JkzrvnkHDuJU769oojbirrDV3opfY1Va8C4jfsWQIfY=
Subject key identifier:   88:5A:C2:56:1D:DC:07:87:D4:A0:34:69:9E:D1:4A:34:7A:1C:B7:31
Authority key identifier: 45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04
Certificate issuer:       /CN=F368CB9CAF/serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
Certificate serial:       4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
Manifest number:          49
Signing time:             Tue 28 Jul 2026 05:39:43 +0000
Manifest this update:     Tue 28 Jul 2026 05:39:42 +0000
Manifest next update:     Thu 30 Jul 2026 05:39:42 +0000
Files and hashes:         1: RSGre8up5c6Zxxr-vyNySLagDAQ.crl (hash: bQoiQXxEROq/O1ceXwctYuIjwLjuP9nlhEFiZm5vpuw=)
                          2: ECF7E816529011F19C538BF1CE1D38B0.roa (hash: KeoVSn8KB99E9DkmWp38WX9SJJQPBicrHWJ8t32m24w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CB9CAF, serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
        Validity
            Not Before: Jul 28 05:39:42 2026 GMT
            Not After : Jul 30 05:39:42 2026 GMT
        Subject: CN=6a68409f-5bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:c7:c3:08:10:9f:82:da:2a:0c:4d:cf:5c:
                    8d:6a:12:cf:27:97:67:fc:d6:68:aa:34:34:59:f3:
                    34:a0:90:47:0a:d7:dd:37:d4:49:60:f5:0e:19:7b:
                    92:df:c0:43:0f:ac:d0:20:d2:fb:17:c5:a3:0e:84:
                    e7:9c:ad:70:be:b1:95:be:48:6c:43:78:24:6b:b9:
                    77:f5:ae:d6:12:c5:69:c5:62:d5:67:43:6e:94:78:
                    ec:02:90:95:22:7f:19:c8:09:00:d2:81:9a:74:2f:
                    ba:f0:d6:bd:b5:79:c0:dd:8f:39:54:7b:0b:ea:23:
                    a6:3a:e2:d6:7e:97:e1:64:aa:91:47:5e:53:e5:27:
                    17:7c:0a:ab:b1:d4:5f:47:85:af:64:53:3c:3e:3b:
                    30:2a:c6:c3:2f:93:ab:10:e3:24:b0:63:66:66:55:
                    ef:05:4d:46:85:28:41:43:4b:38:87:49:40:a4:ff:
                    86:22:3f:70:6a:6e:2d:c8:5e:0d:8a:20:1c:56:fb:
                    2d:83:74:9b:13:48:29:53:4a:8a:1b:bb:92:85:a3:
                    54:c1:c3:1d:79:78:4f:8a:72:05:83:10:05:1e:7d:
                    5c:76:bf:4a:26:5a:29:fd:fa:9e:e8:8d:84:9b:47:
                    78:25:79:b2:9a:0f:19:bf:f1:49:04:21:2c:63:b4:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5A:C2:56:1D:DC:07:87:D4:A0:34:69:9E:D1:4A:34:7A:1C:B7:31
            X509v3 Authority Key Identifier:
                keyid:45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:51:fe:cb:e9:d7:93:b7:34:bf:0d:e0:00:2a:87:01:f7:
         fd:ba:0e:fb:26:25:54:c5:95:1f:9a:3d:a3:80:8e:07:ee:db:
         e1:a5:98:97:55:ec:71:c5:fe:ac:7b:16:1f:ed:bc:22:43:d5:
         d7:5e:90:99:b8:4f:01:5c:18:74:ae:e3:6d:5f:27:78:99:f5:
         26:51:a2:65:86:5d:1b:b4:3a:e6:f2:87:d9:24:fd:32:46:c6:
         78:3e:19:60:58:62:d9:3d:16:99:b4:1a:c9:e0:77:36:f1:85:
         6f:0d:14:a7:b1:3a:66:a4:b2:ce:39:ed:c2:9d:0b:64:dc:45:
         57:a5:79:84:89:99:f2:24:36:6c:29:4c:41:78:5c:53:8e:03:
         6f:3b:15:a0:89:a2:7e:99:60:b6:06:e5:eb:a5:85:7e:15:bd:
         1e:c4:40:ef:16:9d:11:b4:d0:00:8d:fe:86:46:23:cc:f7:a0:
         57:9b:6f:45:28:f1:c4:0b:6b:7b:1a:07:9a:ae:58:a5:66:29:
         12:8e:0f:87:66:94:c0:fd:44:8a:e2:82:cc:a5:cf:67:ef:b9:
         0a:85:5e:73:1e:c2:4f:ca:99:be:66:d7:d7:62:21:f3:09:04:
         be:f8:0a:f7:4a:2b:b0:cd:dd:ea:62:c4:14:63:bb:79:38:cd:
         64:68:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:42:43 2026 by rpki-client