Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File:                     -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier:          BkXNZz6fCNe9WpcpExsm3jbmNjEuRMosGs2g6h4PSr0=
Subject key identifier:   1E:4E:BD:53:E2:16:70:37:67:2F:25:54:B5:A5:F5:D4:1F:5A:BE:9A
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer:       /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial:       08D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number:          08D5
Signing time:             Sat 13 Jun 2026 01:49:03 +0000
Manifest this update:     Sat 13 Jun 2026 01:49:02 +0000
Manifest next update:     Mon 15 Jun 2026 01:49:02 +0000
Files and hashes:         1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: DFmzUcMZ/WuVSjYxZ3LX59r72qFx4virsPsZAzXAWD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
        Validity
            Not Before: Jun 13 01:49:02 2026 GMT
            Not After : Jun 15 01:49:02 2026 GMT
        Subject: CN=6a2cb70f-6464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:77:04:df:85:d4:a9:10:2b:c2:16:b9:6a:
                    9c:ff:8b:e7:58:f0:61:04:a7:d9:1d:4b:66:d0:59:
                    6b:c6:7c:3d:8b:a1:40:46:7e:72:a1:be:a0:0d:ed:
                    b3:3a:5f:6b:c9:7c:92:81:ea:a5:89:37:dc:15:49:
                    a8:de:be:2b:62:bf:3f:40:1a:4d:f9:87:15:dd:7b:
                    52:03:4c:ce:f3:fc:02:ec:09:a2:18:03:12:18:34:
                    7c:1f:4e:44:a5:20:78:41:18:d7:2f:82:20:45:7d:
                    34:41:73:20:9a:9c:95:8c:47:fe:99:ed:52:9e:a3:
                    b4:cd:db:fe:26:6b:15:c7:1a:29:dd:49:73:5c:68:
                    e3:25:68:bc:c4:d1:b2:fb:17:2f:88:60:e2:e1:f9:
                    e0:2c:35:13:2b:3c:f8:35:d5:8c:ec:68:a7:94:f7:
                    7b:99:cc:e5:ff:ef:a5:02:3a:3d:3c:8e:61:cc:49:
                    24:6c:93:ff:1f:7d:f1:ee:93:cd:34:58:9b:9b:78:
                    4b:22:e2:8e:79:11:7e:a1:fd:c3:dd:25:e9:14:ac:
                    0e:ec:3c:27:49:b7:f9:35:de:0a:32:9a:45:02:7f:
                    bb:c3:d9:2a:4c:e2:02:d3:55:82:36:bc:26:d0:05:
                    39:08:73:fb:51:e4:2e:e7:96:18:91:7c:b4:f1:e1:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4E:BD:53:E2:16:70:37:67:2F:25:54:B5:A5:F5:D4:1F:5A:BE:9A
            X509v3 Authority Key Identifier:
                keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:9c:20:9d:78:c6:fa:12:21:9a:b7:fa:2b:5e:31:e1:5a:
         f9:51:40:8e:d8:a1:ed:24:a1:a9:16:99:10:a4:a3:a5:2b:cf:
         4f:f4:54:ca:dd:e7:4f:2a:c3:7c:6c:04:4f:d4:82:c2:14:2e:
         12:5e:47:9f:a6:26:f1:67:0f:78:e9:d1:f4:d9:95:3d:dc:7c:
         c2:bd:45:78:b8:cb:14:f3:a9:45:7e:6f:be:23:f3:c4:6b:01:
         b3:fb:71:2e:0d:42:fe:d3:1d:ba:2e:91:33:18:3d:2e:c8:95:
         3f:5a:b1:69:08:b7:7f:98:c5:13:da:39:3e:f7:23:55:37:73:
         9c:ea:b7:67:fe:4f:66:12:f5:e1:db:06:ac:06:f1:29:69:48:
         70:d8:b3:6d:20:5d:08:1b:02:96:29:d7:70:ab:b5:77:96:29:
         02:51:3e:0c:2e:94:75:01:db:2d:b2:62:b4:fd:a6:cd:b4:f8:
         91:71:87:f2:0e:b6:e6:ce:0b:eb:09:90:9c:37:30:a5:86:dd:
         66:de:fb:1c:f2:c2:f7:40:6f:87:b3:80:34:2c:3e:73:14:8c:
         17:c0:22:b6:3d:11:e8:b4:1a:c5:c9:0e:91:ff:67:af:0e:1d:
         8f:03:77:15:23:bb:c1:83:f5:95:16:dd:d6:16:d3:86:52:c0:
         77:69:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:32:47 2026 by rpki-client