Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
File:                     5OfkzwUGmYE4HGusKKJrtmmU0rc.mft (raw, json)
Hash identifier:          Xi/PRbmkDhWCC1K/fAIfmuIrNIrn4j2z9hvVVDDo9FU=
Subject key identifier:   AD:74:69:CF:4F:25:3A:BA:DE:73:5B:46:ED:0E:17:56:BE:E4:A1:4C
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
Manifest number:          F7
Signing time:             Tue 28 Jul 2026 05:18:25 +0000
Manifest this update:     Tue 28 Jul 2026 05:18:25 +0000
Manifest next update:     Thu 30 Jul 2026 05:18:24 +0000
Files and hashes:         1: 5OfkzwUGmYE4HGusKKJrtmmU0rc.crl (hash: EBtkD2uHSq6zuiP05/lXYKTKQARtWP8uvRLb2h+nBDU=)
                          2: F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (hash: dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=)
                          3: 2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (hash: lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=)
                          4: 1811E4B2D34C11F0A34F27AEDAE4EC9C.roa (hash: 5J5kKxxmT3AitlgzrzKNAptdmk4cbkC8tOUOxsnY+GM=)
                          5: AFCDD206D34D11F0ADCD4EB7DAE4EC9C.roa (hash: Wushw/sA+miTMHcjq5BUALTuvax/UDlZ5uswbKq6gbc=)
                          6: B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (hash: EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=)
                          7: 216C2206D34D11F081CE2AB4DAE4EC9C.roa (hash: wmcnwC3N1n68tZ025Jzu1Yi8vDKdizTOQUqWDI3JT4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Jul 28 05:18:25 2026 GMT
            Not After : Jul 30 05:18:24 2026 GMT
        Subject: CN=6a683ba1-edb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:51:2f:06:84:6c:d3:03:7e:a5:23:70:c0:
                    47:0d:55:4d:27:39:19:e9:82:56:32:71:61:52:cb:
                    49:c7:11:04:3b:e5:a4:fd:89:77:f6:2d:af:34:52:
                    76:bf:47:dd:76:f6:3e:1a:49:6f:ca:6e:4d:2b:1c:
                    a9:9f:8c:a1:27:90:59:5b:c8:a1:51:2c:be:48:f2:
                    a5:48:5a:60:7a:23:de:88:18:47:d0:8a:83:fe:24:
                    75:32:95:5b:16:04:ff:6e:d6:b9:4a:55:63:c0:1d:
                    2e:ed:56:a5:82:e4:14:59:b7:db:a9:1c:ca:83:b5:
                    a6:65:61:04:9d:bf:a7:7c:f0:60:05:73:15:4c:04:
                    27:f8:06:33:d4:47:cd:ff:12:7f:56:65:e6:8a:a2:
                    56:ef:88:dd:16:88:cd:c8:58:6a:2e:8f:57:45:4c:
                    c3:be:01:bd:93:ea:06:1a:35:14:bb:fb:0d:03:40:
                    66:62:8f:7c:36:0a:76:78:e4:7d:0b:c2:97:48:1f:
                    49:88:f6:ca:10:78:be:45:62:13:f6:d0:5e:92:74:
                    e8:af:4f:05:f3:8a:31:48:df:36:17:4f:8d:e0:c3:
                    a2:e2:7a:33:74:25:21:88:14:ac:37:e1:88:e0:aa:
                    6a:2f:5d:48:b3:40:3c:26:0a:5a:82:87:f3:67:85:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:69:CF:4F:25:3A:BA:DE:73:5B:46:ED:0E:17:56:BE:E4:A1:4C
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a7:d7:c9:ff:cd:8d:1e:c6:dd:d8:15:7a:7b:ed:f0:0c:52:
         d2:a8:32:5e:0e:d0:c0:1b:ad:3a:52:cc:55:58:a5:b6:8a:79:
         4b:ca:a0:b5:c5:10:f3:de:2e:ea:fb:fd:56:1e:30:04:35:00:
         4d:53:61:32:75:f9:18:b3:b6:00:9b:dc:6c:f2:22:d5:40:23:
         a0:00:12:50:ce:e3:3b:3e:0b:05:3f:f8:ac:5f:74:94:6c:ce:
         3b:b7:e8:86:be:6a:8d:de:cb:e5:39:a5:a8:31:3c:b2:ca:8c:
         1e:b4:d7:a0:5d:79:57:2a:6c:ce:ca:b2:d6:51:74:88:cf:9d:
         66:30:05:a9:36:a3:74:4c:96:39:82:f2:94:8d:ac:26:cd:19:
         c0:df:21:09:e4:d3:a4:2f:d0:39:47:d8:36:40:66:fa:8b:95:
         cb:37:c4:be:15:3e:d7:d7:5a:0a:20:fe:85:6d:b1:7a:d8:86:
         56:29:ad:98:50:2b:9a:50:4c:c7:54:95:ae:fc:31:67:cd:bb:
         40:bf:ba:ea:53:93:2b:15:88:08:1d:1a:c4:52:39:24:9d:10:
         61:58:2a:17:88:d4:9e:e0:df:e2:78:06:e7:74:2f:6c:f8:e9:
         94:fa:0a:d6:94:ed:e4:bb:fb:c5:ff:3f:96:0e:9f:42:fd:64:
         65:e6:3f:e3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTZFQTBBRjExMC8GA1UEBRMoRTRFN0U0Q0YwNTA2OTk4MTM4MUM2QkFDMjhBMjZC
QjY2OTk0RDJCNzAeFw0yNjA3MjgwNTE4MjVaFw0yNjA3MzAwNTE4MjRaMBgxFjAU
BgNVBAMTDTZhNjgzYmExLWVkYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDc61EvBoRs0wN+pSNwwEcNVU0nORnpglYycWFSy0nHEQQ75aT9iXf2La80
Una/R9129j4aSW/Kbk0rHKmfjKEnkFlbyKFRLL5I8qVIWmB6I96IGEfQioP+JHUy
lVsWBP9u1rlKVWPAHS7tVqWC5BRZt9upHMqDtaZlYQSdv6d88GAFcxVMBCf4BjPU
R83/En9WZeaKolbviN0WiM3IWGouj1dFTMO+Ab2T6gYaNRS7+w0DQGZij3w2CnZ4
5H0LwpdIH0mI9soQeL5FYhP20F6SdOivTwXzijFI3zYXT43gw6LiejN0JSGIFKw3
4YjgqmovXUizQDwmClqCh/NnhVZbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrXRp
z08lOrrec1tG7Q4XVr7koUwwHwYDVR0jBBgwFoAU5OfkzwUGmYE4HGusKKJrtmmU
0rcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE2RUEwLzU5QzU1OERFRDBGNTExRjBBRTIwNDc4NURBRTRFQzlDLzVPZmt6
d1VHbVlFNEhHdXNLS0pydG1tVTByYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVPZmt6d1VHbVlFNEhHdXNLS0pydG1tVTByYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTZFQTAvNTlDNTU4REVEMEY1MTFGMEFFMjA0Nzg1REFF
NEVDOUMvNU9ma3p3VUdtWUU0SEd1c0tLSnJ0bW1VMHJjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAop9fJ/82NHsbd2BV6e+3wDFLSqDJe
DtDAG606UsxVWKW2inlLyqC1xRDz3i7q+/1WHjAENQBNU2EydfkYs7YAm9xs8iLV
QCOgABJQzuM7PgsFP/isX3SUbM47t+iGvmqN3svlOaWoMTyyyowetNegXXlXKmzO
yrLWUXSIz51mMAWpNqN0TJY5gvKUjawmzRnA3yEJ5NOkL9A5R9g2QGb6i5XLN8S+
FT7X11oKIP6FbbF62IZWKa2YUCuaUEzHVJWu/DFnzbtAv7rqU5MrFYgIHRrEUjkk
nRBhWCoXiNSe4N/ieAbndC9s+OmU+grWlO3ku/vF/z+WDp9C/WRl5j/j
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:37 2026 by rpki-client