Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
File:                     qTyToDhGqGjBZRyD_VmonbSAVE4.mft (raw, json)
Hash identifier:          Zrs4a7n5FZryObQTkS3XKVNymuQ79kXDFZGZZK0khrw=
Subject key identifier:   60:9C:04:2D:5C:D2:5C:F8:72:BA:4F:15:A4:14:E8:4B:3B:85:51:35
Authority key identifier: A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E
Certificate issuer:       /CN=F36A2CA0AF/serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
Certificate serial:       08F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
Manifest number:          08F5
Signing time:             Tue 28 Jul 2026 01:50:44 +0000
Manifest this update:     Tue 28 Jul 2026 01:50:43 +0000
Manifest next update:     Thu 30 Jul 2026 01:50:43 +0000
Files and hashes:         1: qTyToDhGqGjBZRyD_VmonbSAVE4.crl (hash: qD8D/bSxgPD8zz6hxUbxOn6oSevH+ayAeHKs5tmIFQg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CA0AF, serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
        Validity
            Not Before: Jul 28 01:50:43 2026 GMT
            Not After : Jul 30 01:50:43 2026 GMT
        Subject: CN=6a680af4-0d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:66:1f:37:f5:b8:ea:5b:23:6d:4e:98:6d:
                    a2:2c:f8:8e:7d:f1:e9:cd:05:7a:fb:79:5b:35:8a:
                    31:38:2a:a4:25:f7:ca:2e:e6:bc:b2:46:bb:16:99:
                    cc:b8:cf:f2:b9:6c:8b:fc:62:94:24:5c:d6:74:f8:
                    5d:c6:a5:2c:7d:7f:66:cf:7f:e3:a0:9a:6c:51:03:
                    96:a3:59:f5:42:05:89:5a:d4:3e:a0:64:87:df:07:
                    85:72:77:83:fd:ac:0a:15:cc:da:aa:ae:42:28:99:
                    cd:fd:79:4e:a3:6b:2f:84:51:d0:4b:4f:ea:24:b2:
                    1f:12:ea:9f:5b:97:e0:07:e3:9c:ba:cf:a9:f3:b1:
                    c3:f2:b7:07:8e:42:d1:14:ab:a7:3f:b4:0e:b5:f6:
                    01:9a:aa:12:35:82:6a:15:9a:16:78:bd:38:02:36:
                    41:7e:73:3a:47:d1:48:8e:7c:67:ea:40:b9:ae:1f:
                    2d:2c:af:ec:1c:c6:b4:1c:10:2b:62:23:12:f1:f9:
                    f4:3d:f9:1c:80:02:34:b8:d4:d9:9f:ee:5b:0f:bd:
                    a2:a9:7a:f2:59:14:ae:76:38:5c:5d:57:c2:9b:e1:
                    8e:68:3a:7d:5e:21:c6:52:e4:bf:11:8a:3b:3d:ed:
                    92:68:19:34:01:08:53:ed:78:cf:5b:12:af:65:fe:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9C:04:2D:5C:D2:5C:F8:72:BA:4F:15:A4:14:E8:4B:3B:85:51:35
            X509v3 Authority Key Identifier:
                keyid:A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:00:b3:1d:42:ae:b1:62:f1:06:4c:c6:d1:a5:9e:08:56:f9:
         f5:d2:b1:38:c0:c7:fc:9b:ba:c3:37:c4:3c:1f:1f:a7:06:81:
         fb:74:70:3d:bd:51:be:d5:df:30:b6:c0:05:68:b6:15:61:d6:
         3d:4d:30:c9:53:1c:11:99:ed:aa:c3:ca:b1:37:e1:fc:68:20:
         a7:82:19:1d:a0:85:42:53:2a:ab:b7:c0:35:1b:f5:2e:96:79:
         52:c4:04:e5:b4:b0:6c:d7:b8:b1:3a:46:99:1a:01:fb:97:1d:
         a6:e8:a0:00:0d:c8:ac:cb:40:54:27:a5:03:6e:c4:02:47:1d:
         3c:a2:36:61:5b:7c:6a:0e:b4:23:de:b0:c8:6a:da:6c:0f:45:
         51:7f:06:2b:07:a0:51:d5:e1:15:e9:09:c0:0a:e5:b4:a8:84:
         a5:04:67:f2:81:fa:a0:77:7f:b9:67:af:be:33:e5:ab:00:74:
         fb:bb:18:db:e0:b5:1b:0e:72:58:33:62:e9:7b:18:30:cf:21:
         10:ad:ea:10:14:c3:69:e7:05:f2:1c:f3:3e:1c:5f:25:8f:c4:
         71:64:fa:9f:14:19:ab:d9:3d:0a:b2:24:73:f4:26:5d:3c:ae:
         0c:bc:51:ee:24:67:a4:eb:fb:b1:d5:e0:9f:c2:31:19:4b:a5:
         73:c8:a0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:49 2026 by rpki-client