Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          iXBOde/c1+Kwwz4GaFvNxSZh2P+p6N6BQwW7PztG8nE=
Subject key identifier:   0F:D6:5E:9A:7B:7C:CD:5C:53:4D:49:63:D4:FD:5C:E1:23:92:80:63
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       02AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          02A6
Signing time:             Tue 28 Jul 2026 04:34:40 +0000
Manifest this update:     Tue 28 Jul 2026 04:34:39 +0000
Manifest next update:     Thu 30 Jul 2026 04:34:39 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: DcyqzG0Kz7nB48ASZ5oWODz/RtLqtc9nWN8ZQetPFys=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Jul 28 04:34:39 2026 GMT
            Not After : Jul 30 04:34:39 2026 GMT
        Subject: CN=6a683160-dc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:18:40:22:3f:e7:0a:fe:c6:91:85:c1:6e:
                    bc:15:30:36:af:1b:4e:bc:26:61:80:f7:a0:bb:91:
                    4f:91:96:64:7f:74:28:09:2d:d3:9a:88:29:12:74:
                    01:4b:97:7c:12:77:3c:12:ce:87:28:4d:48:10:d0:
                    17:71:56:2c:9d:a9:78:96:9a:ae:c3:b4:ca:ea:45:
                    c9:88:76:06:a5:c5:8e:3f:64:ea:fb:fc:c0:83:8b:
                    cf:c3:79:f4:78:93:e5:a6:db:6d:10:e8:cc:28:d5:
                    e4:5a:d2:ba:75:01:ce:af:bc:f2:02:21:d5:f5:37:
                    d2:03:ca:ec:5e:7d:e1:36:11:95:fe:72:a9:06:ed:
                    96:ed:33:d8:9b:dc:b4:51:4c:28:e0:54:74:5b:30:
                    d9:32:1c:c3:ec:0e:4a:4a:65:1a:3c:c6:7e:cf:f7:
                    c6:53:1f:d6:6a:4a:92:89:fe:d6:50:ec:4e:8d:bd:
                    3c:2a:11:c7:df:c2:08:c8:2a:ac:41:a5:6f:0d:97:
                    83:61:ba:4e:2f:31:75:23:37:b2:11:4b:61:b7:e2:
                    6c:9c:d0:00:c5:5a:e8:7d:85:d9:e7:79:04:e3:89:
                    fe:84:6e:f9:78:01:3d:2f:50:da:e6:1a:3d:89:e4:
                    5d:af:ea:2e:83:03:92:52:fb:7d:fd:7a:63:32:31:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:5E:9A:7B:7C:CD:5C:53:4D:49:63:D4:FD:5C:E1:23:92:80:63
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:07:40:d1:9e:6b:62:48:4f:a4:7e:08:69:b8:27:01:72:
         9c:c1:d0:18:b5:fa:c3:9a:9a:3e:c7:1e:e3:34:67:04:8b:50:
         4a:0b:2f:be:d1:56:a2:a9:d7:51:cc:7a:2b:d8:96:e6:13:17:
         8b:62:3e:c5:04:4e:75:2a:28:21:99:94:ec:ab:74:26:74:72:
         60:6b:3e:e8:6b:8b:64:af:12:39:48:16:af:2d:66:2a:d5:75:
         47:76:ae:65:86:a7:42:98:1c:93:b8:bf:28:42:dd:fb:47:76:
         c6:66:e3:11:e4:91:dd:d0:1a:ba:a4:a9:60:c6:07:f2:46:b1:
         00:68:23:51:32:25:ec:87:c4:e3:b3:82:12:aa:1f:95:29:43:
         73:1c:42:44:65:bd:97:83:90:5a:8c:f9:5f:82:e0:cf:5f:25:
         19:72:2c:a0:da:c5:f0:9c:51:29:24:58:58:93:40:be:e8:07:
         7c:ef:03:70:ad:24:50:be:ee:be:35:67:9f:e7:aa:3a:88:5b:
         a6:b3:86:9e:57:eb:d7:48:98:81:e3:99:5a:7f:69:7d:ac:62:
         f8:5a:42:2b:df:02:1a:2c:ee:df:c6:02:4f:ca:50:66:77:82:
         8a:81:64:10:66:a2:0f:90:86:f3:64:3e:7c:86:7c:d3:d0:cd:
         6e:b6:de:3e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzA2REZBRjExMC8GA1UEBRMoOEJGNDRBMzkxOUIwMURENTQ1QTUxMzdEQzk2RDg4
ODdDMTQ0OTRDNDAeFw0yNjA3MjgwNDM0MzlaFw0yNjA3MzAwNDM0MzlaMBgxFjAU
BgNVBAMTDTZhNjgzMTYwLWRjOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDk+RhAIj/nCv7GkYXBbrwVMDavG068JmGA96C7kU+RlmR/dCgJLdOaiCkS
dAFLl3wSdzwSzocoTUgQ0BdxViydqXiWmq7DtMrqRcmIdgalxY4/ZOr7/MCDi8/D
efR4k+Wm220Q6Mwo1eRa0rp1Ac6vvPICIdX1N9IDyuxefeE2EZX+cqkG7ZbtM9ib
3LRRTCjgVHRbMNkyHMPsDkpKZRo8xn7P98ZTH9ZqSpKJ/tZQ7E6NvTwqEcffwgjI
KqxBpW8Nl4Nhuk4vMXUjN7IRS2G34myc0ADFWuh9hdnneQTjif6Ebvl4AT0vUNrm
Gj2J5F2v6i6DA5JS+339emMyMYwRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUD9Ze
mnt8zVxTTUlj1P1c4SOSgGMwHwYDVR0jBBgwFoAUi/RKORmwHdVFpRN9yW2Ih8FE
lMQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwNkRGLzM2MDBCM0FBODU2ODExRUY4Qzg3NTY0Njc2MkU5NTFBL2lfUktP
Um13SGRWRnBSTjl5VzJJaDhGRWxNUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lfUktPUm13SGRWRnBSTjl5VzJJaDhGRWxNUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzA2REYvMzYwMEIzQUE4NTY4MTFFRjhDODc1NjQ2NzYy
RTk1MUEvaV9SS09SbXdIZFZGcFJOOXlXMkloOEZFbE1RLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkqAdA0Z5rYkhPpH4IabgnAXKcwdAY
tfrDmpo+xx7jNGcEi1BKCy++0VaiqddRzHor2JbmExeLYj7FBE51KighmZTsq3Qm
dHJgaz7oa4tkrxI5SBavLWYq1XVHdq5lhqdCmByTuL8oQt37R3bGZuMR5JHd0Bq6
pKlgxgfyRrEAaCNRMiXsh8Tjs4ISqh+VKUNzHEJEZb2Xg5BajPlfguDPXyUZciyg
2sXwnFEpJFhYk0C+6Ad87wNwrSRQvu6+NWef56o6iFums4aeV+vXSJiB45laf2l9
rGL4WkIr3wIaLO7fxgJPylBmd4KKgWQQZqIPkIbzZD58hnzT0M1utt4+
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:21 2026 by rpki-client