Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          DZLX35+Yy0Jwfd7qrJW67aUd3P+ZtXSg0IE1g2hZcK8=
Subject key identifier:   10:92:29:04:16:A2:CB:97:0C:C9:BF:8A:46:FF:CF:79:F0:BE:83:F3
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       02F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          02F3
Signing time:             Tue 28 Jul 2026 04:21:57 +0000
Manifest this update:     Tue 28 Jul 2026 04:21:56 +0000
Manifest next update:     Thu 30 Jul 2026 04:21:56 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: WfoxC/NP/FvO24XzNpg9HZiFXMvCTFN30iNyA5fCuP4=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Jul 28 04:21:56 2026 GMT
            Not After : Jul 30 04:21:56 2026 GMT
        Subject: CN=6a682e65-2b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:14:e4:02:70:34:23:1d:3d:86:8a:7d:f1:
                    4a:c4:8e:6d:61:03:bd:a1:b6:f4:e1:37:cd:0e:be:
                    94:93:6f:40:12:63:59:23:9b:5a:07:5f:83:41:6b:
                    23:0c:37:8f:fb:0a:b8:b6:8b:28:20:38:31:68:6e:
                    2e:0f:e6:0f:14:34:01:db:3d:02:4b:c9:d1:63:0e:
                    4a:84:c8:59:dc:35:1f:04:fe:86:9e:b0:69:2a:d4:
                    e7:bb:c4:77:4b:2c:58:16:31:04:14:08:aa:1f:66:
                    b3:86:b7:66:7f:bc:f0:29:d9:15:a6:f9:e3:c1:77:
                    ff:5c:c9:fc:a8:4e:42:0e:fe:fa:1b:a4:f6:12:59:
                    77:d2:40:d9:70:9a:e2:49:80:a4:42:35:c0:c9:1a:
                    c0:71:ba:6a:49:99:db:64:33:d5:17:d5:80:ed:ab:
                    c0:ce:7b:b1:c8:9b:bd:97:0a:78:f6:70:7c:62:01:
                    dd:34:47:4a:55:02:e9:47:54:11:23:2f:9b:49:19:
                    a8:87:2e:5e:97:bc:3d:a7:f6:8a:df:1c:02:73:ad:
                    38:08:c4:a5:97:81:18:37:a9:31:7b:ca:2c:f6:6b:
                    f7:a5:f3:b2:ed:85:49:e4:3e:f4:74:af:0e:a9:f6:
                    fe:c5:9f:85:e8:f4:4c:a1:de:d3:ed:cd:82:33:8d:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:92:29:04:16:A2:CB:97:0C:C9:BF:8A:46:FF:CF:79:F0:BE:83:F3
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:7d:57:f0:45:cb:b3:37:a9:c0:e6:e5:7e:e8:03:b1:15:
         c8:e5:39:52:25:1d:3f:13:98:ae:74:78:b1:18:7d:5b:31:87:
         30:76:df:de:e1:3f:95:46:e5:3a:7d:e9:dd:ed:21:89:9e:2b:
         5e:96:11:a6:02:6c:0e:88:43:30:b7:b9:70:84:f1:dc:57:4a:
         69:97:97:91:8f:44:da:25:6b:af:1d:d7:f1:89:50:c1:4e:a2:
         df:ef:19:ff:9f:6a:40:2c:d6:22:c8:04:dd:01:dd:2c:d5:26:
         9a:da:e1:7a:34:e5:d8:d2:51:7c:9a:d7:ce:ac:b8:c8:c8:62:
         63:e8:e3:19:79:51:18:e9:be:39:5f:41:65:82:f0:c2:fa:c6:
         57:cf:f9:3e:63:84:92:76:22:22:92:a3:3b:06:a1:77:34:c1:
         91:55:24:97:19:a5:7c:1f:4a:de:aa:69:58:c3:0e:03:50:11:
         db:a3:bc:6e:32:b0:9b:db:ad:06:fe:66:dc:d7:52:8f:3e:89:
         a1:78:8c:72:35:db:e5:df:e7:b6:f7:92:45:9c:c9:ba:66:06:
         6c:7a:85:b4:82:dd:cb:b4:ed:1d:1c:01:7e:c1:ec:de:f1:1f:
         61:30:73:cc:07:c8:41:54:89:9d:09:60:e3:a4:51:bc:a0:92:
         bf:46:d5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:39 2026 by rpki-client