Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
File:                     CvRXhhBplSRPEehsGgUDMTN9DuE.mft (raw, json)
Hash identifier:          z8HwaGbNZOaLt4zCzgMbELfWj1rwon/fgFq6DOeUfno=
Subject key identifier:   F0:57:1E:9A:F7:3D:FC:EC:33:88:B9:37:02:60:8C:7F:AA:47:0B:70
Authority key identifier: 0A:F4:57:86:10:69:95:24:4F:11:E8:6C:1A:05:03:31:33:7D:0E:E1
Certificate issuer:       /CN=F3691A30AF/serialNumber=0AF45786106995244F11E86C1A050331337D0EE1
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
Manifest number:          1C
Signing time:             Tue 28 Jul 2026 05:45:19 +0000
Manifest this update:     Tue 28 Jul 2026 05:45:18 +0000
Manifest next update:     Thu 30 Jul 2026 05:45:18 +0000
Files and hashes:         1: CvRXhhBplSRPEehsGgUDMTN9DuE.crl (hash: /E3F0iKjpfbg9wz57XTvkvkoroICCgwzlou4FysKQqM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691A30AF, serialNumber=0AF45786106995244F11E86C1A050331337D0EE1
        Validity
            Not Before: Jul 28 05:45:18 2026 GMT
            Not After : Jul 30 05:45:18 2026 GMT
        Subject: CN=6a6841ef-2249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:5d:2d:ae:54:83:d0:a2:4a:f4:a4:26:d4:
                    9e:ef:0e:1e:e7:eb:c7:8f:04:3e:a5:4a:d4:86:df:
                    ce:64:2c:0f:3c:b9:77:c5:47:24:a7:9a:6b:c4:b5:
                    2a:f9:3e:aa:25:a6:a9:00:fd:e0:aa:22:fd:39:59:
                    71:82:19:c3:6d:87:60:6a:a8:0d:8a:3b:19:27:18:
                    12:95:7e:3b:da:1e:e4:af:bc:0c:b6:67:e7:e0:3a:
                    ca:33:fc:b1:36:33:53:28:29:8b:73:97:4d:6f:b2:
                    f0:c6:96:43:49:6c:96:f8:1a:f2:9c:0b:05:d3:1e:
                    4e:46:d8:5c:68:e7:b7:cf:7c:a2:08:26:21:04:ea:
                    ff:22:8f:0c:7e:68:2a:63:17:14:9f:8d:9b:db:e9:
                    d3:59:58:7d:5b:67:5d:53:4d:27:6a:64:67:42:98:
                    23:27:87:4a:2f:d5:aa:c2:ec:ec:33:c7:e3:ae:92:
                    44:05:51:1c:c3:e1:a7:71:e7:0c:29:8c:99:62:f2:
                    85:0a:6b:83:68:36:20:ce:d5:d0:4e:96:c2:f6:c2:
                    de:4b:24:a8:a0:81:7f:b7:8e:21:f5:99:a9:3c:93:
                    06:88:3f:98:c1:9f:76:1e:74:39:9d:43:f1:08:a0:
                    db:65:b0:c4:0f:f7:8d:70:84:84:93:79:d8:ae:80:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:57:1E:9A:F7:3D:FC:EC:33:88:B9:37:02:60:8C:7F:AA:47:0B:70
            X509v3 Authority Key Identifier:
                keyid:0A:F4:57:86:10:69:95:24:4F:11:E8:6C:1A:05:03:31:33:7D:0E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:20:a9:72:3e:3e:80:f8:78:48:d6:f3:02:1c:68:5c:f2:dc:
         a4:b8:63:fa:0b:1c:aa:c3:45:62:48:e3:a4:ef:bb:41:f2:05:
         e2:26:09:0c:32:22:1f:72:64:83:75:e7:36:f9:3e:18:ce:d5:
         3e:06:d2:66:01:ef:10:a9:4f:e3:49:a8:0c:6c:c2:91:08:35:
         9f:14:66:69:2a:82:71:57:4b:21:af:03:c7:f5:76:5b:0c:b0:
         36:5c:e2:64:7e:50:eb:49:0a:20:10:8f:0d:04:e2:c5:ab:be:
         61:2a:06:b6:3d:c6:80:ad:49:a4:49:44:7d:fd:3d:43:df:56:
         84:87:63:24:02:bd:76:dc:61:ca:cd:c7:7a:1d:0f:50:9c:a1:
         d3:23:13:64:b6:14:97:25:42:4c:06:09:f5:16:a9:33:df:b8:
         de:28:ca:e4:15:76:30:56:e8:79:39:6b:94:06:a4:4f:6e:b3:
         8c:a2:d5:8b:98:c0:20:9c:c6:75:da:cb:09:48:4b:05:b4:ed:
         3e:ad:aa:14:92:5c:6f:b2:f6:7e:46:74:53:45:e6:ac:3d:77:
         ba:77:78:74:04:28:f3:1a:30:49:ee:6c:01:e2:22:b2:68:92:
         f1:6b:33:22:50:c0:4a:51:e0:44:d0:14:5d:ee:7b:54:51:07:
         c6:09:3b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:19:16 2026 by rpki-client