Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          60Myhk9/rPQctOxHI4tpORV6irY70DXTZJ8WkuCF3y0=
Subject key identifier:   84:C1:9A:32:DD:91:AD:BF:E6:E4:29:DC:6E:52:7D:CD:24:41:D7:91
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       078F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          0754
Signing time:             Sat 13 Jun 2026 02:26:38 +0000
Manifest this update:     Sat 13 Jun 2026 02:26:38 +0000
Manifest next update:     Mon 15 Jun 2026 02:26:38 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: DTfepjoPAdKBi+/Z2J+tMayVVdliDNNdDHJ+Xzv86B8=)
                          2: F073103AED8511F098246590DAE4EC9C.roa (hash: 7/OBPMvHgaBhBjcdfmAskDW47LM3Vtw//UfK9zD6ZTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Jun 13 02:26:38 2026 GMT
            Not After : Jun 15 02:26:38 2026 GMT
        Subject: CN=6a2cbfde-3eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:d5:98:75:60:fd:ea:d6:63:bb:9f:e5:28:
                    61:24:dd:aa:fd:5a:a4:47:2c:c3:9a:18:05:b9:c2:
                    70:06:2b:fe:20:62:10:44:4d:46:0e:4c:9d:2e:19:
                    3b:38:aa:5d:bc:db:17:fd:46:1d:d7:1f:2c:02:da:
                    c0:e7:48:7a:25:3d:e5:94:3e:39:36:90:3f:f1:00:
                    0f:3e:2a:87:a4:66:16:ce:a0:a9:fb:8d:33:25:c9:
                    eb:28:56:67:f8:99:99:d4:36:1c:5e:d1:ba:34:82:
                    72:74:69:e1:56:0a:80:54:a3:11:e2:9f:cf:92:90:
                    17:ab:e6:b6:36:15:de:37:74:23:d6:4c:8c:04:76:
                    76:9f:ae:b7:f6:cd:30:9c:2d:82:28:dc:0d:34:7c:
                    77:97:bc:6f:ea:ee:c5:65:55:e0:1b:71:a2:65:cb:
                    06:73:25:1d:45:8e:cd:f5:f9:69:cb:a5:e6:27:13:
                    34:3d:fc:e5:8b:6c:7c:7d:f4:40:75:93:b5:66:3c:
                    c1:d4:c3:d6:70:e8:bb:e6:19:51:5f:af:ef:04:17:
                    f0:26:91:72:07:31:f3:5d:12:b5:f4:5f:4d:b1:65:
                    8e:0b:d7:0f:86:7f:91:06:59:4a:b9:75:d3:03:52:
                    a6:84:f0:5a:a6:47:a9:22:25:94:04:38:cc:eb:f8:
                    19:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C1:9A:32:DD:91:AD:BF:E6:E4:29:DC:6E:52:7D:CD:24:41:D7:91
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:ab:7d:5b:d4:7a:2d:cd:72:4a:e6:1b:ff:93:4e:f4:f4:
         9e:fb:9e:a6:c1:50:85:26:44:d5:93:07:d1:fd:af:99:a7:63:
         5c:08:91:6b:ea:19:b5:62:e6:f8:c4:8a:be:8f:69:e3:70:d4:
         b4:b2:92:92:57:ce:37:4e:9c:5d:08:51:a6:c8:86:db:74:04:
         7c:d0:09:86:7e:92:e8:07:97:64:11:ce:f8:d4:c9:8d:14:be:
         55:c6:3e:8d:1e:2e:c0:8a:37:a0:e4:e6:62:44:d2:ce:ae:c6:
         28:7e:a0:51:16:94:97:4c:0d:2d:df:80:42:cd:93:d2:d2:6e:
         7b:44:c8:89:9c:55:22:13:89:27:26:c5:cb:e1:2a:3f:f3:24:
         69:93:34:ec:a0:2d:2f:a8:6e:8c:94:26:c5:cc:3e:4c:f1:1d:
         05:8a:41:f4:24:30:f7:d4:e6:e6:3f:b1:db:0c:35:30:5f:8f:
         de:f2:62:3a:aa:9b:ac:b6:d1:b4:53:70:26:fc:d0:62:3f:82:
         8e:94:fe:ff:00:80:f6:4d:5e:a9:4e:95:b1:ec:b7:5f:c2:0b:
         f5:64:6c:09:80:eb:c0:76:be:3f:21:68:52:27:8e:cd:af:3e:
         9a:34:92:42:ec:f8:9a:ad:5a:e4:28:cd:59:1e:b6:ab:3d:9e:
         1c:91:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:32:53 2026 by rpki-client