Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File:                     ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier:          AtGsf/ikEeaPr1Cx2QHK4YczPgD+bNAAcNvaSW3Aqbs=
Subject key identifier:   FB:65:14:97:D9:82:6F:76:E5:AC:54:23:70:69:F2:AF:03:E3:BD:C7
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer:       /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial:       0700
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number:          0700
Signing time:             Sat 09 Aug 2025 02:05:20 +0000
Manifest this update:     Sat 09 Aug 2025 02:05:19 +0000
Manifest next update:     Mon 11 Aug 2025 02:05:19 +0000
Files and hashes:         1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: W2ObXXn2b92C99UBm+E05kTXbRvvXZuo8YCM8CoGvPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
        Validity
            Not Before: Aug  9 02:05:19 2025 GMT
            Not After : Aug 11 02:05:19 2025 GMT
        Subject: CN=6896acdf-7484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:5b:fe:13:ee:a0:b4:41:e4:6a:9d:85:cc:
                    52:03:30:94:6f:98:b0:c1:c6:17:f4:de:f5:d2:5c:
                    e0:69:a0:72:e0:11:d2:c4:8d:51:f9:20:cd:c6:bd:
                    32:f5:93:81:90:5d:02:0f:8f:d0:c4:96:4a:f5:68:
                    f9:78:13:17:08:82:07:37:e8:58:55:50:07:b5:8b:
                    35:31:0e:db:46:d2:59:d2:10:1e:73:09:f8:89:11:
                    dc:54:78:cf:c9:c3:67:b8:05:15:ff:08:8f:f6:85:
                    6d:81:9c:f9:ca:b2:24:91:74:d4:b1:e4:bf:aa:98:
                    57:dd:10:1f:d0:4d:18:4b:b1:22:62:0f:16:dc:c9:
                    c7:6e:06:e9:98:9e:36:bf:d7:cc:3f:11:15:84:d4:
                    9f:3e:8f:53:07:cb:99:db:46:03:ca:04:87:01:eb:
                    e6:55:fc:e5:fe:e9:1f:02:3a:50:ba:06:d9:1d:c3:
                    37:37:5c:a9:84:e7:01:ee:3d:20:47:22:c3:2e:c1:
                    0a:de:3d:e5:cc:fe:45:d9:80:f7:f9:f8:ee:54:aa:
                    91:eb:0e:5b:ab:b5:24:0d:49:49:d3:5d:6f:7b:f2:
                    27:58:16:49:2d:0d:e0:ea:8f:b3:9b:dd:43:33:ee:
                    61:bb:6a:7b:8a:51:2d:80:db:45:26:02:28:d9:c5:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:65:14:97:D9:82:6F:76:E5:AC:54:23:70:69:F2:AF:03:E3:BD:C7
            X509v3 Authority Key Identifier:
                keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:2f:c9:d9:f9:5b:83:c9:d3:86:cf:57:f0:5e:74:06:ec:
         00:85:02:8c:17:57:07:f4:e4:f4:6f:66:10:12:ee:f5:c8:0f:
         38:2d:91:ea:47:78:27:f1:1a:96:5d:8e:53:c4:2f:7b:a0:16:
         bb:4e:72:03:4e:3f:7b:0f:30:d5:14:3b:a4:b9:cb:46:11:76:
         fe:30:ce:99:4a:9d:9a:7c:c6:f2:84:9e:53:63:f0:1b:5e:2f:
         1b:0b:d0:ad:f2:7c:22:07:99:76:e0:d6:81:95:37:e0:7b:4d:
         b4:08:42:49:39:5f:05:62:5d:38:d8:54:cd:63:f8:57:42:ca:
         36:01:71:2c:48:e8:55:d8:8e:ca:dd:ba:e1:3a:5a:46:0a:3d:
         85:35:83:c0:87:7d:b4:22:1e:43:42:d7:22:cd:e0:3c:c5:ff:
         53:54:6c:f2:eb:d5:9e:4d:e8:8b:10:bd:3f:ae:c5:28:68:34:
         06:38:05:b8:8e:89:54:61:7c:5b:34:df:21:c1:4a:e5:0c:3c:
         8b:38:e1:ee:c0:47:86:40:7b:90:a4:ab:62:1d:65:56:11:51:
         7f:9d:c9:f5:94:84:4e:6a:45:8a:7e:12:25:7b:2c:69:af:87:
         be:2c:3e:44:5b:6a:2d:92:fa:c6:e3:c0:f0:68:c4:30:3c:6b:
         e9:9c:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:14 2025 by rpki-client