Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
File:                     _lkJnrBGBmU3CfmlmpxGdQcb7L0.mft (raw, json)
Hash identifier:          kGAjj1rvbVM7PmMMIg6jeLOLsVL9bwrh/V6QyZfVg5U=
Subject key identifier:   0A:1D:30:63:97:A9:06:7C:90:AF:8F:46:F0:29:94:F1:EC:FD:2A:06
Authority key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD
Certificate issuer:       /CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
Certificate serial:       044B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
Manifest number:          044A
Signing time:             Tue 28 Jul 2026 03:41:35 +0000
Manifest this update:     Tue 28 Jul 2026 03:41:34 +0000
Manifest next update:     Thu 30 Jul 2026 03:41:34 +0000
Files and hashes:         1: _lkJnrBGBmU3CfmlmpxGdQcb7L0.crl (hash: DUqo5jcnYlncELUIKOrCVf+3uBQ299GFgJy3KVYw3wo=)
                          2: A6CB045440CD11EEA84BD2644AD9E6FC.roa (hash: k2NQBaUwb1pqhxKitutyFUj84i7cH4npO1gBOUjSKLM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A141DAF, serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
        Validity
            Not Before: Jul 28 03:41:34 2026 GMT
            Not After : Jul 30 03:41:34 2026 GMT
        Subject: CN=6a6824ef-29e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:68:db:af:34:a5:d2:8a:b3:d5:10:75:23:
                    04:b6:2e:04:c7:18:30:1b:11:dd:90:a1:ee:36:cd:
                    85:5d:f9:21:26:ae:49:33:cd:04:2d:51:c8:f7:b9:
                    83:73:bf:9d:f6:6f:79:50:b5:37:72:52:95:7d:56:
                    5b:32:d5:8e:11:ce:e7:c4:8a:7e:26:da:3f:18:d9:
                    96:e4:0c:88:54:a1:ca:04:e8:ac:43:04:ed:6b:79:
                    f3:12:82:c4:44:f1:af:fb:46:53:13:7f:73:37:a4:
                    8b:6f:76:08:52:0b:ec:c7:ae:fc:5f:4a:10:6a:eb:
                    a8:19:78:50:2a:45:0b:aa:e5:d7:d7:85:fe:e7:d5:
                    00:2a:64:5d:67:1d:00:c6:71:77:dd:0c:62:1e:99:
                    7b:2f:80:34:54:32:f8:91:d0:a9:6e:4a:a9:22:a2:
                    f9:11:a4:9f:eb:c5:e7:56:ff:03:b3:8e:08:f2:3f:
                    99:a7:ad:2b:ef:15:50:f3:75:4c:d0:50:48:3f:85:
                    1f:1d:f2:69:d0:c3:ea:75:4c:82:d6:7c:01:f8:05:
                    c2:27:7f:81:85:c0:36:43:e3:3a:0c:c2:7e:68:09:
                    a7:83:f9:63:f8:58:25:a3:aa:22:e5:96:96:1e:26:
                    79:b3:27:95:8e:74:51:38:63:30:76:9b:28:ce:dd:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1D:30:63:97:A9:06:7C:90:AF:8F:46:F0:29:94:F1:EC:FD:2A:06
            X509v3 Authority Key Identifier:
                keyid:FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:20:53:40:84:d3:26:63:5d:2a:ab:ba:30:96:79:96:3b:6d:
         c8:5b:1d:49:53:ea:9a:f5:c2:7e:78:4d:6b:44:3a:7a:50:c1:
         1c:c5:2b:24:3e:8f:a1:86:76:95:82:d1:4a:2a:8b:4e:9c:9f:
         d6:7c:5b:81:c3:f4:6d:fb:af:98:c1:46:73:e4:eb:c7:11:48:
         ae:c6:2e:a7:3a:27:08:d9:e4:d2:92:c8:83:07:50:ee:b0:06:
         2e:29:2c:07:5d:ba:98:27:15:f4:cc:7f:df:7d:80:00:63:72:
         b5:cf:3a:e8:6d:a1:57:64:cd:d9:40:7c:88:25:c5:45:76:b9:
         f0:cb:9f:f5:5e:5d:27:80:4e:79:5a:c4:a0:8d:03:de:d5:20:
         1f:bc:d4:dd:83:ba:26:99:0d:e0:2c:a9:dc:e9:13:1f:ba:74:
         c4:60:ae:7d:fa:66:08:0c:ff:f0:cb:01:98:39:fb:dd:cb:e9:
         8a:2a:60:4f:b5:80:74:e3:76:54:4d:61:a6:02:a2:a2:66:c3:
         e5:ae:4e:2a:96:3b:4e:72:53:d2:fa:06:d3:93:c6:73:ad:12:
         ba:68:56:67:08:a4:92:a2:39:6d:88:c9:0b:fc:81:08:9b:f8:
         84:b8:22:a4:2f:25:87:e4:78:65:de:f0:0f:5f:f3:6a:c3:8f:
         ab:f2:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:10 2026 by rpki-client