Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
File:                     bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft (raw, json)
Hash identifier:          vyQh6m5CCv8+7M4jwTDdqZ4h31tHnxIAgbnR1k0H+1k=
Subject key identifier:   D9:B7:CA:28:B9:78:C7:0F:8A:27:45:BC:52:FF:42:2C:77:D5:4F:71
Authority key identifier: 6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Certificate issuer:       /CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Certificate serial:       0824
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
Manifest number:          0823
Signing time:             Tue 28 Jul 2026 01:59:53 +0000
Manifest this update:     Tue 28 Jul 2026 01:59:52 +0000
Manifest next update:     Thu 30 Jul 2026 01:59:52 +0000
Files and hashes:         1: bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl (hash: mCmRB+YpQpkciv/pyQS/nvgyRVo1evzc+sV8DlZbGUw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B918AF, serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
        Validity
            Not Before: Jul 28 01:59:52 2026 GMT
            Not After : Jul 30 01:59:52 2026 GMT
        Subject: CN=6a680d18-a502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:ff:c3:6d:5f:99:cc:ec:3a:81:d5:8e:13:
                    77:0d:38:74:f5:c4:25:4b:ac:b0:51:e0:b9:a6:74:
                    03:d5:10:5f:24:53:e1:82:06:53:b3:92:7b:1b:02:
                    f3:97:2d:ce:01:80:97:fb:da:1b:77:ef:ff:fd:4a:
                    67:be:f0:47:2b:5c:bc:90:34:40:52:5d:5d:39:c6:
                    e5:11:c7:d3:a8:2c:7c:f5:95:e2:fb:1c:d5:d1:26:
                    fc:d6:56:71:b7:8e:73:ad:18:98:81:49:ba:87:36:
                    56:58:34:79:0c:9a:72:80:5e:72:aa:bb:88:71:3f:
                    c1:c2:c0:a5:2b:c0:0d:98:79:2c:9d:cb:3d:d0:e6:
                    af:a4:63:ff:75:c3:85:d1:bc:81:be:80:01:9f:9c:
                    0f:cb:b2:48:9d:0d:81:5e:c1:3a:83:9b:f8:bf:76:
                    22:ab:d6:d8:81:27:1c:70:f2:99:e7:01:d0:57:f1:
                    6f:3a:ce:c6:d1:4a:e5:f1:c6:21:b2:73:32:2f:56:
                    13:d0:de:20:6d:78:47:3a:50:40:72:de:93:eb:37:
                    10:81:b1:2a:3f:83:00:13:be:7b:8e:1b:66:16:91:
                    59:5a:83:a1:6f:32:65:69:f8:cd:0f:3b:db:22:c7:
                    a6:12:24:6f:da:c1:01:ed:a5:84:88:7b:f2:04:f1:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B7:CA:28:B9:78:C7:0F:8A:27:45:BC:52:FF:42:2C:77:D5:4F:71
            X509v3 Authority Key Identifier:
                keyid:6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:80:fc:21:81:08:4c:67:b2:cf:0d:57:14:48:66:c5:ee:0f:
         4a:f5:36:62:29:9a:d8:0a:28:70:44:68:ac:64:b3:5c:7c:92:
         21:a7:f4:18:5c:0d:c7:d2:c3:a8:e8:93:ae:85:fd:38:94:27:
         41:82:5d:a7:1e:40:38:cd:d3:f3:d1:9e:f0:38:df:b0:a7:96:
         9c:53:f4:9d:c5:15:a7:3c:58:b1:2b:c2:75:12:2f:16:9c:ad:
         52:04:97:4c:05:40:f0:63:a0:7b:cc:80:69:fb:20:41:cd:0f:
         70:f3:07:2e:f4:0b:80:f1:ff:2b:7f:51:1f:e6:13:9c:9c:45:
         53:dc:f8:b5:50:1d:d7:c7:bf:1c:ed:51:43:e7:22:e0:d7:4b:
         bc:83:b1:40:ec:c7:68:2e:b4:a0:88:90:c2:34:9a:bd:d7:a4:
         ca:49:2d:f1:f7:eb:60:21:d9:48:ff:5c:19:8c:ae:53:67:77:
         48:68:9c:d6:b9:51:3c:a4:ce:d4:8e:72:f2:ee:86:b1:a1:3e:
         c4:d8:25:b4:61:16:07:13:b5:f6:50:a0:55:0e:43:6b:49:f2:
         87:70:58:74:4a:92:3b:1a:fc:20:5e:ba:19:f9:64:98:28:b7:
         c8:cb:f4:90:ef:e8:6e:81:ac:13:12:7e:3c:c7:09:e2:e2:8c:
         52:ec:8a:4e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUI5MThBRjExMC8GA1UEBRMoNkNGNkRFNTE1OUM3RDE4RjMzRTA4MUI2NkY1Mjk2
OEJCMTg2MzgwQTAeFw0yNjA3MjgwMTU5NTJaFw0yNjA3MzAwMTU5NTJaMBgxFjAU
BgNVBAMTDTZhNjgwZDE4LWE1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC19//DbV+ZzOw6gdWOE3cNOHT1xCVLrLBR4LmmdAPVEF8kU+GCBlOzknsb
AvOXLc4BgJf72ht37//9Sme+8EcrXLyQNEBSXV05xuURx9OoLHz1leL7HNXRJvzW
VnG3jnOtGJiBSbqHNlZYNHkMmnKAXnKqu4hxP8HCwKUrwA2YeSydyz3Q5q+kY/91
w4XRvIG+gAGfnA/LskidDYFewTqDm/i/diKr1tiBJxxw8pnnAdBX8W86zsbRSuXx
xiGyczIvVhPQ3iBteEc6UEBy3pPrNxCBsSo/gwATvnuOG2YWkVlag6FvMmVp+M0P
O9six6YSJG/awQHtpYSIe/IE8XeNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2bfK
KLl4xw+KJ0W8Uv9CLHfVT3EwHwYDVR0jBBgwFoAUbPbeUVnH0Y8z4IG2b1KWi7GG
OAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCOTE4L0FFNkY2QTQ2NEI0OTExRUI4RDY2NTM4NEY4QUVBMjI4L2JQYmVV
Vm5IMFk4ejRJRzJiMUtXaTdHR09Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2JQYmVVVm5IMFk4ejRJRzJiMUtXaTdHR09Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUI5MTgvQUU2RjZBNDY0QjQ5MTFFQjhENjY1Mzg0RjhB
RUEyMjgvYlBiZVVWbkgwWTh6NElHMmIxS1dpN0dHT0FvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAgPwhgQhMZ7LPDVcUSGbF7g9K9TZi
KZrYCihwRGisZLNcfJIhp/QYXA3H0sOo6JOuhf04lCdBgl2nHkA4zdPz0Z7wON+w
p5acU/SdxRWnPFixK8J1Ei8WnK1SBJdMBUDwY6B7zIBp+yBBzQ9w8wcu9AuA8f8r
f1Ef5hOcnEVT3Pi1UB3Xx78c7VFD5yLg10u8g7FA7MdoLrSgiJDCNJq916TKSS3x
9+tgIdlI/1wZjK5TZ3dIaJzWuVE8pM7UjnLy7oaxoT7E2CW0YRYHE7X2UKBVDkNr
SfKHcFh0SpI7GvwgXroZ+WSYKLfIy/SQ7+hugawTEn48xwni4oxS7IpO
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:56 2026 by rpki-client