Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          91Iuq8NoOCyr3DoxwUsbXNanmVC4bulceeVo/0E0des=
Subject key identifier:   65:62:96:3A:C1:71:F2:82:CC:C5:B0:98:C9:46:3F:98:26:B4:49:AE
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       035C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          0356
Signing time:             Tue 28 Jul 2026 04:09:51 +0000
Manifest this update:     Tue 28 Jul 2026 04:09:50 +0000
Manifest next update:     Thu 30 Jul 2026 04:09:50 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: OtA3UWKqZjZpdd/HQIuulh0YDTOV3m0t93kPD5vrfMY=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Jul 28 04:09:50 2026 GMT
            Not After : Jul 30 04:09:50 2026 GMT
        Subject: CN=6a682b8f-77e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:ed:6e:02:00:89:e6:e2:d2:ac:63:38:23:
                    d6:1c:87:94:0a:5e:e1:1b:65:f0:2e:16:21:ed:74:
                    ed:3a:6d:f0:aa:ce:07:40:50:f0:ed:cc:1a:e0:55:
                    5c:c8:c7:6a:e0:f9:29:16:ed:1f:39:60:c1:ef:08:
                    df:7a:14:2e:6a:79:26:06:62:2d:23:ee:02:09:06:
                    b6:9c:83:f1:2e:9d:83:cc:d8:13:ad:cc:02:1c:17:
                    df:8b:1a:25:6f:87:90:9f:90:77:1e:2d:ca:21:cf:
                    d3:80:f1:7f:f0:27:f8:f8:16:d9:f5:ce:7a:c6:9a:
                    e3:7d:25:0e:28:fd:b7:84:d9:f8:f6:f6:d6:a5:c0:
                    fb:37:70:18:8b:41:97:14:c0:62:c2:18:ed:6c:1c:
                    f2:6f:76:6d:25:74:db:c1:d6:18:99:52:bb:6e:23:
                    d1:c2:31:c9:ad:76:cc:bd:f7:ea:fb:ad:45:e5:ee:
                    08:3f:47:88:b6:2a:ec:4a:4a:cb:16:ea:7c:a5:b7:
                    0f:f6:9e:d3:a8:d1:70:95:d9:9b:54:ce:7c:9e:ac:
                    2e:34:65:c2:df:57:42:39:e3:7b:86:de:af:c8:5d:
                    36:50:f5:90:ee:05:b4:01:a7:1e:0c:40:76:79:d6:
                    c5:5b:86:86:5a:73:a1:33:f6:f6:4f:4b:94:33:d7:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:62:96:3A:C1:71:F2:82:CC:C5:B0:98:C9:46:3F:98:26:B4:49:AE
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:bd:ab:46:36:5e:cc:1a:a8:ae:59:c7:4e:ed:6a:c7:f0:cb:
         f5:87:fe:d8:88:25:9b:78:37:04:bb:4c:0b:cd:9a:f7:97:9f:
         a9:b8:87:9d:61:59:8e:6f:41:7b:a9:b9:b0:92:bc:99:06:a0:
         7e:f0:74:68:a8:eb:70:3e:d3:ee:09:b3:c0:df:e1:72:3c:f4:
         f0:9b:13:49:51:3b:08:30:18:6a:e8:ab:4b:67:da:2a:77:f0:
         17:b0:76:82:09:f6:ff:63:ba:60:7d:4d:a8:07:d8:9e:d3:18:
         f2:ef:cb:f0:bc:4c:4d:a3:8e:1a:49:df:02:8b:06:56:83:40:
         ef:6c:53:74:01:46:8a:3c:e4:ed:e2:30:e0:6b:02:ee:fa:12:
         d6:29:87:6c:f9:b0:51:c0:5a:dd:1d:2b:43:b3:07:c7:bf:e5:
         f7:e4:4d:7d:96:0e:68:f5:f9:4e:90:b6:ab:80:27:c3:59:1c:
         8e:aa:66:08:fb:dc:44:26:5c:c4:0d:b4:09:15:3e:a6:54:95:
         1a:35:b8:81:2a:b7:84:83:62:38:e0:60:34:e7:91:fd:c6:ab:
         e5:6a:59:36:74:77:03:66:1e:ac:a6:6f:b3:ca:3f:2b:bd:ba:
         48:82:4a:f8:45:af:85:31:4b:9e:e9:61:2c:9b:77:9f:f5:bd:
         19:0f:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:05 2026 by rpki-client