Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          FhHL/FhqSgOpy1me2Y4NmYKXOliq776BwncOlOaF80Q=
Subject key identifier:   57:1A:31:3F:0C:8C:72:9A:75:ED:E1:FE:F3:76:BF:69:65:64:7A:CF
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       0293
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          0292
Signing time:             Tue 28 Jul 2026 04:36:40 +0000
Manifest this update:     Tue 28 Jul 2026 04:36:39 +0000
Manifest next update:     Thu 30 Jul 2026 04:36:39 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: Df+Ytorq4i0o1AtLdveKvwZGV4fcycIv9mMhVd/zyew=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF, serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Jul 28 04:36:39 2026 GMT
            Not After : Jul 30 04:36:39 2026 GMT
        Subject: CN=6a6831d8-6343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:0d:52:83:74:73:7f:e5:6c:9c:cd:b7:26:
                    6c:9c:1a:d6:46:79:15:01:8c:f2:e5:0a:c9:b8:f8:
                    85:20:e4:88:91:cf:f6:ed:33:d2:bd:9a:6d:4b:9a:
                    0d:f0:54:8d:c3:db:2d:b9:02:c1:60:ab:ff:0a:93:
                    e8:49:72:bc:ed:b2:93:e2:41:34:de:b4:42:4a:9e:
                    6e:8b:d7:a6:54:87:52:10:5c:d7:fa:ae:b4:e3:06:
                    d8:2e:0a:27:5f:e9:66:fa:5c:5a:ab:97:0e:73:49:
                    3d:06:15:64:ae:06:e6:82:00:97:25:11:70:79:3f:
                    89:8a:1c:34:6c:6d:1c:fa:99:ea:5b:de:10:d8:4a:
                    71:c9:9e:8c:82:b9:8f:8b:39:1b:8a:1e:69:69:dc:
                    51:fe:a9:2a:be:52:c6:a3:9b:77:38:06:a8:e9:e5:
                    95:a7:7b:fc:fd:28:21:4e:8a:ea:66:98:d8:5d:c3:
                    35:d7:1d:cf:c3:f4:ca:6c:37:46:ce:32:29:8d:09:
                    8d:21:cc:bb:14:a7:9a:4a:7e:28:fb:5b:20:87:ed:
                    a6:ca:3c:0f:11:cc:f8:d0:fa:16:8d:13:f7:fb:ab:
                    65:f1:b4:16:cb:8a:d4:1e:c5:6a:a4:0a:dd:5f:d4:
                    54:f7:36:ce:e8:ba:30:6c:2d:a3:3b:34:cf:6c:ec:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:31:3F:0C:8C:72:9A:75:ED:E1:FE:F3:76:BF:69:65:64:7A:CF
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a2:be:68:9d:a5:bd:ea:ca:66:41:78:14:63:d8:38:6b:c2:
         cf:3f:c3:dd:e7:69:e4:98:9a:c6:34:15:e8:38:2a:49:d6:e4:
         02:75:23:1f:28:5a:6c:79:7e:4b:6a:b8:a8:3a:25:20:35:b0:
         25:fe:84:b2:d2:16:c0:fa:3a:81:af:43:c2:02:4f:76:ba:00:
         83:2a:17:02:e5:1e:1c:48:3e:79:07:44:96:ae:65:68:c2:c5:
         84:bc:68:c6:bf:7c:d5:c5:11:c5:ce:53:a1:d9:ba:98:c7:a9:
         e5:58:0b:36:e6:ef:b7:71:9c:c3:3d:ed:bb:c2:4f:18:95:ef:
         65:d1:db:d0:2f:2c:fd:63:cf:1f:ef:a7:db:24:47:15:27:c6:
         7f:3d:a6:af:56:e8:ad:3b:3f:47:c4:89:c0:3b:e6:f6:d7:f2:
         a1:2a:a8:a9:81:7a:1f:33:9a:77:22:c4:86:8c:8b:41:4a:d0:
         52:15:2b:85:b2:29:57:47:64:aa:55:1d:4b:8e:13:6d:8e:70:
         ac:9f:54:cb:3c:0b:45:0f:07:9f:9f:ea:1f:2d:ea:04:43:45:
         03:4c:e5:6e:5d:cd:bb:35:d9:de:da:86:39:dc:34:8a:fd:ee:
         ac:02:8a:8b:b5:0c:37:0c:84:c7:4d:6c:d9:05:5f:a9:5d:70:
         ed:1c:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:21:05 2026 by rpki-client