Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
File:                     EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft (raw, json)
Hash identifier:          dXK+l+au8RaBII005GRVUN1I2zkMZ4eM932gFHpDi2Q=
Subject key identifier:   8A:5D:31:DB:6A:93:34:51:30:6C:22:93:DC:42:01:8C:24:C4:9C:6F
Authority key identifier: 11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC
Certificate issuer:       /CN=F3696A10AF/serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
Certificate serial:       D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
Manifest number:          D3
Signing time:             Fri 12 Jun 2026 05:15:41 +0000
Manifest this update:     Fri 12 Jun 2026 05:15:40 +0000
Manifest next update:     Sun 14 Jun 2026 05:15:40 +0000
Files and hashes:         1: EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl (hash: AvQh913aIggtemBSq49Nv8C9A8+GuWFHerDM1gBVslE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696A10AF, serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
        Validity
            Not Before: Jun 12 05:15:40 2026 GMT
            Not After : Jun 14 05:15:40 2026 GMT
        Subject: CN=6a2b95fc-4222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:c5:a4:46:18:94:1f:18:04:ad:3a:1a:77:
                    c9:ff:7f:3f:c5:7d:ca:0d:2e:25:a4:b5:02:ea:30:
                    9c:a2:2e:a2:c6:ff:66:77:c0:25:75:57:97:8b:28:
                    5a:64:f5:be:a9:7b:2d:d3:93:a2:51:f9:16:96:95:
                    c0:60:8b:17:d0:07:c2:b5:07:e7:6e:f7:dd:98:63:
                    02:6e:7c:72:61:e7:31:21:0e:eb:46:a1:a5:c2:1e:
                    32:55:b9:18:69:fe:42:2f:66:de:6b:6c:3f:32:c0:
                    32:ba:77:b8:e1:01:f7:4e:70:90:fc:57:13:5e:10:
                    22:81:dd:b8:3b:10:13:00:44:e0:bd:54:a9:2c:88:
                    ca:3d:94:ea:6e:1d:32:0a:b1:77:90:34:9f:c0:53:
                    1d:c6:f9:8d:68:60:3a:02:57:de:bc:3d:2a:b4:3a:
                    77:f2:40:a0:40:90:8a:d9:29:47:b6:2e:b0:35:ff:
                    95:e5:12:75:cf:53:b5:8a:29:a6:44:c1:2c:d3:58:
                    ef:e0:85:80:b0:76:26:97:30:09:d9:c4:9b:81:53:
                    89:86:12:7e:95:8b:99:07:28:d5:da:d7:01:0e:72:
                    64:87:7c:d4:72:c8:81:cd:36:ed:c3:80:ea:62:2f:
                    79:38:7f:9d:a3:b6:ce:cd:23:95:f1:f8:ee:5d:f0:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5D:31:DB:6A:93:34:51:30:6C:22:93:DC:42:01:8C:24:C4:9C:6F
            X509v3 Authority Key Identifier:
                keyid:11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:21:9d:4a:62:d3:90:f9:87:34:a5:86:91:37:e1:47:28:
         ca:68:b2:62:81:50:ed:16:5b:6e:61:7f:90:25:d8:9e:0f:39:
         b5:28:ee:a0:ea:87:54:0d:c3:77:ba:64:06:86:cc:de:60:82:
         16:8e:38:7a:c1:1f:d4:4b:0a:7e:ea:98:a7:5a:69:69:de:b9:
         a0:20:53:8a:64:15:df:e9:39:51:41:9e:51:50:b2:f4:3f:ba:
         73:f5:78:77:2e:18:2f:a3:3c:4a:60:27:96:c2:df:be:42:63:
         09:f8:85:82:d1:f0:05:06:00:1d:3d:d2:8f:d5:c8:b6:dc:ea:
         f1:2b:0e:bc:0c:c1:e7:c6:2a:61:02:96:f3:80:cb:24:b4:f9:
         97:8e:c7:b7:47:67:87:1b:c6:26:51:2a:55:a0:e6:68:35:3f:
         c5:f4:3f:86:e8:8d:52:99:1e:f0:eb:31:32:8b:54:18:a8:64:
         50:9b:d4:05:3a:31:d2:20:52:90:5e:8f:02:0e:ce:39:f3:54:
         74:57:7c:62:c7:4f:43:1b:73:8e:6d:d0:88:b3:24:48:3d:72:
         ad:83:5d:6d:61:7f:ac:cd:cc:17:19:f5:2a:00:c6:81:20:e9:
         03:47:db:53:e5:53:d7:4b:49:6d:e4:69:39:d7:d2:47:08:0d:
         8d:e3:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:32:20 2026 by rpki-client