Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C98F/392EDA06C46511F0A4B40793DAE4EC9C/2bwgGTRf_LX8SOwduuLvS4SsX2s.mft
File:                     2bwgGTRf_LX8SOwduuLvS4SsX2s.mft (raw, json)
Hash identifier:          xRN9JdZnXGqPRtp+DfDkOS48ARUgsyNLczLakCA9eA4=
Subject key identifier:   7F:26:9E:82:D5:3E:DF:4E:80:D5:1B:D6:5A:FE:AC:CB:D6:15:D5:C0
Authority key identifier: D9:BC:20:19:34:5F:FC:B5:FC:48:EC:1D:BA:E2:EF:4B:84:AC:5F:6B
Certificate issuer:       /CN=F369C98FAF/serialNumber=D9BC2019345FFCB5FC48EC1DBAE2EF4B84AC5F6B
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2bwgGTRf_LX8SOwduuLvS4SsX2s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C98F/392EDA06C46511F0A4B40793DAE4EC9C/2bwgGTRf_LX8SOwduuLvS4SsX2s.mft
Manifest number:          0101
Signing time:             Tue 28 Jul 2026 05:16:35 +0000
Manifest this update:     Tue 28 Jul 2026 05:16:35 +0000
Manifest next update:     Thu 30 Jul 2026 05:16:35 +0000
Files and hashes:         1: 2bwgGTRf_LX8SOwduuLvS4SsX2s.crl (hash: hySyl6iYcRaWj/RrHHnGxRGk47rYHCEpRQXLLZ/4XH0=)
                          2: 056C469AC59B11F08A0A9895DAE4EC9C.roa (hash: CQdNprSTyUPAh7XugplActfG1547Z3zbkr53IIXyGYQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C98F/392EDA06C46511F0A4B40793DAE4EC9C/2bwgGTRf_LX8SOwduuLvS4SsX2s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C98F/392EDA06C46511F0A4B40793DAE4EC9C/2bwgGTRf_LX8SOwduuLvS4SsX2s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2bwgGTRf_LX8SOwduuLvS4SsX2s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C98FAF, serialNumber=D9BC2019345FFCB5FC48EC1DBAE2EF4B84AC5F6B
        Validity
            Not Before: Jul 28 05:16:35 2026 GMT
            Not After : Jul 30 05:16:35 2026 GMT
        Subject: CN=6a683b33-c8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:7f:08:5e:f4:27:99:49:7e:40:31:28:4d:
                    b3:59:b5:6e:bc:d7:1f:aa:56:35:ad:ff:f2:e0:42:
                    36:52:78:07:27:1c:60:31:e2:cf:ff:07:97:0b:bf:
                    b4:f3:35:18:e3:58:c1:e0:cc:c7:dc:7e:74:15:4a:
                    ba:14:e0:36:ff:ab:eb:dc:4c:b4:49:5b:59:25:8e:
                    e5:e6:8b:ad:e6:be:2a:18:91:c3:9e:25:4f:3e:69:
                    ae:6c:c3:0a:5f:c9:5b:42:1e:da:ea:1c:7b:46:3a:
                    b0:29:95:1e:fd:ff:98:de:b5:c0:5a:a5:89:70:e9:
                    b6:a2:5d:9f:15:32:82:49:eb:84:0d:ab:38:4a:86:
                    86:9c:28:a2:ed:80:31:7c:89:8b:ff:96:bc:0a:a8:
                    08:b5:62:7a:62:d8:1c:1d:24:b1:de:c3:bc:32:9c:
                    da:f6:d2:f5:55:93:f1:34:07:91:0f:80:f8:f7:bf:
                    f9:3a:d0:bc:96:d0:9d:5b:ff:97:72:f3:40:88:07:
                    45:57:67:75:0a:17:0a:a8:88:52:83:29:c1:d1:3a:
                    ab:09:e4:b9:70:c9:d4:e8:81:73:2e:3e:d5:42:f4:
                    0c:45:be:e8:aa:72:15:cf:33:70:29:3e:22:06:88:
                    85:ec:82:d5:29:29:28:3f:db:59:7c:3d:df:da:33:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:26:9E:82:D5:3E:DF:4E:80:D5:1B:D6:5A:FE:AC:CB:D6:15:D5:C0
            X509v3 Authority Key Identifier:
                keyid:D9:BC:20:19:34:5F:FC:B5:FC:48:EC:1D:BA:E2:EF:4B:84:AC:5F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C98F/392EDA06C46511F0A4B40793DAE4EC9C/2bwgGTRf_LX8SOwduuLvS4SsX2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2bwgGTRf_LX8SOwduuLvS4SsX2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C98F/392EDA06C46511F0A4B40793DAE4EC9C/2bwgGTRf_LX8SOwduuLvS4SsX2s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:0e:be:a8:88:f0:06:e8:ef:02:6f:e4:87:91:a8:e8:a9:
         ff:5a:3b:f2:9f:7b:bb:a0:39:6c:38:52:6b:c2:29:9f:1d:59:
         8c:11:44:e2:8a:b1:dd:e5:14:29:3e:da:7f:76:6d:cc:45:66:
         08:0a:a2:50:bb:6e:78:e1:72:16:03:3f:a5:37:c3:0c:dd:2b:
         2f:93:fc:4c:f8:bb:bd:8f:1b:2e:aa:55:c6:9d:bf:ae:4e:b4:
         dc:d5:97:14:36:49:f0:b3:58:e8:22:b3:e4:4e:64:7e:58:69:
         d2:7b:0a:6a:5d:82:55:6c:fb:4a:7d:5f:d1:cf:1d:70:e2:8e:
         68:9f:89:b5:5c:f0:a1:04:95:b6:e4:b5:f1:ed:7b:e5:4f:5c:
         b0:90:95:16:07:8f:ff:3b:03:5d:3d:16:bb:9e:7d:e1:1a:7c:
         3d:1a:71:64:0b:8c:40:1b:89:ac:04:60:1a:1b:ff:7b:58:c2:
         e3:02:34:59:75:79:61:50:c2:a9:ba:c3:95:b3:a8:ff:2b:7e:
         08:04:e9:bf:01:c9:6e:29:f7:b8:07:47:e0:f9:b8:de:be:81:
         91:7b:f9:d8:7b:06:54:ac:1b:33:82:1f:da:ff:d9:6f:f6:0e:
         97:a1:9b:0e:94:f3:b8:0d:6c:5d:cc:54:be:dc:cc:e6:2c:fe:
         eb:0b:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:24 2026 by rpki-client