Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
File:                     avc50Bd3BoQ35SESTux6ZtiYCW8.mft (raw, json)
Hash identifier:          p2yoeWvXjq7rKBvbynNzVfORdYDVR/7GQ3bh3IEvqaU=
Subject key identifier:   43:5C:14:82:EC:E8:9A:96:1A:FF:EC:BE:D7:95:FB:CA:0E:AB:33:AD
Authority key identifier: 6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F
Certificate issuer:       /CN=F36BA57FAF/serialNumber=6AF739D01777068437E521124EEC7A66D898096F
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
Manifest number:          02A1
Signing time:             Tue 28 Jul 2026 04:34:52 +0000
Manifest this update:     Tue 28 Jul 2026 04:34:51 +0000
Manifest next update:     Thu 30 Jul 2026 04:34:51 +0000
Files and hashes:         1: avc50Bd3BoQ35SESTux6ZtiYCW8.crl (hash: 0nfaeiCYUNHmokYw7xwSzQtKXtDXjhb8Us0YNmLg3z4=)
                          2: 9CBCEE06857C11EF9C88A445762E951A.roa (hash: LUsLFkZOS70t3FhGjAlxHf+8d7Gfxjit3yut3LdzsB0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA57FAF, serialNumber=6AF739D01777068437E521124EEC7A66D898096F
        Validity
            Not Before: Jul 28 04:34:51 2026 GMT
            Not After : Jul 30 04:34:51 2026 GMT
        Subject: CN=6a68316c-1cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:f9:38:d9:be:cc:34:02:df:72:e7:d4:7c:
                    07:3a:56:a3:75:64:cc:9b:79:5a:c9:e8:ad:a1:0b:
                    46:36:f0:25:fa:c0:33:ac:9d:99:26:3a:85:65:27:
                    d7:2e:bc:a6:f5:d2:30:64:bb:e6:45:7a:17:b9:9f:
                    1e:23:38:76:5a:e6:97:a4:ea:df:d0:07:f7:8b:32:
                    0f:21:3c:68:e7:1c:72:98:94:4d:f7:b9:8c:1a:f7:
                    95:b3:cf:a3:d4:25:d9:7b:44:d2:7d:2b:06:3c:40:
                    65:86:d1:d4:14:7c:a8:62:1e:a7:1c:d8:22:0e:aa:
                    4f:a5:f1:2a:03:18:ac:9e:75:07:69:83:65:c1:1b:
                    8f:1e:b3:7d:d5:1d:68:ea:ff:96:46:0e:0d:df:cd:
                    bb:40:46:45:b4:15:b0:0b:a8:aa:11:f1:1f:3c:95:
                    f9:d3:65:9a:d9:b8:84:4d:37:4f:4b:fe:63:b3:8b:
                    92:aa:0a:ef:fd:94:c1:4f:c9:b6:ac:1c:d8:63:80:
                    b8:8f:9b:f9:14:e6:5f:67:84:2d:b6:27:8a:fd:6f:
                    b6:14:7d:ec:9d:c1:ed:9d:8b:01:1e:07:df:2c:28:
                    2b:ae:f0:5c:15:0d:ff:87:53:3f:1a:38:74:d0:4b:
                    9d:da:e8:e6:94:d8:eb:cf:06:c3:fe:67:30:b7:db:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5C:14:82:EC:E8:9A:96:1A:FF:EC:BE:D7:95:FB:CA:0E:AB:33:AD
            X509v3 Authority Key Identifier:
                keyid:6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:9b:37:c2:c7:65:ac:24:9a:1c:05:ce:91:2f:84:db:05:
         30:ff:bf:f5:20:d8:81:55:23:9d:a7:b0:e2:34:5f:9a:95:ad:
         2a:ee:a4:19:81:a6:8b:21:f3:10:d2:3d:2c:6d:35:4c:9a:7d:
         ba:1e:da:be:11:26:19:d5:cc:c3:a9:68:d4:14:e5:85:5e:78:
         ef:df:d6:6e:79:aa:c3:b6:fe:ba:a5:89:10:5a:c7:bf:34:63:
         77:37:4d:ec:90:08:49:1c:a8:96:06:b1:f3:f3:93:f8:61:53:
         d1:50:ee:dd:dd:88:50:67:1c:cd:00:66:8f:fe:cf:b7:3f:ce:
         f6:13:6e:06:05:68:d3:63:43:fc:a5:af:e8:1c:5e:a9:c1:65:
         17:c6:fe:d6:5a:74:5c:1b:16:95:50:b5:db:03:55:ac:c8:c3:
         a0:67:61:ab:b0:e4:66:f8:7f:93:67:1b:15:5e:58:0e:18:d7:
         2c:f6:58:88:77:18:51:93:02:db:62:24:51:cd:c3:fb:28:bd:
         f1:2f:36:07:c6:7b:fb:46:fa:bb:dd:83:07:71:de:ce:72:13:
         03:37:a6:8b:a5:10:97:dc:7f:e9:ba:f4:b5:3e:c5:51:dc:aa:
         85:0b:74:d5:a4:62:62:8d:1b:12:6d:02:30:76:9b:55:ae:48:
         be:99:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:48 2026 by rpki-client