Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
File:                     8CO5dwgZb_nyC8kofVbELKrlFA8.mft (raw, json)
Hash identifier:          jnnoweAMNAABnD7Y2KkrVpzpaBlGTFmKYkxkAhGteBg=
Subject key identifier:   CB:D2:0D:AC:6A:37:F2:29:B9:3B:E2:CB:3F:49:FA:90:77:CA:58:10
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Certificate issuer:       /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial:       040B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
Manifest number:          03FE
Signing time:             Tue 28 Jul 2026 03:50:58 +0000
Manifest this update:     Tue 28 Jul 2026 03:50:57 +0000
Manifest next update:     Thu 30 Jul 2026 03:50:57 +0000
Files and hashes:         1: 8CO5dwgZb_nyC8kofVbELKrlFA8.crl (hash: KItMtGHUoX9fKQou8LMkdHQHUBnik8DEdlfyKzcFz0g=)
                          2: E426B5CC979D11F096A760E0DAE4EC9C.roa (hash: Qu1bT2FOjPIO4pS4cjspkc4hPfnA5gSZp8GQU69NlgU=)
                          3: C59D974E977D11F0B8898995DAE4EC9C.roa (hash: 9sQYBw+BJR4l43uVbgekzScfJJnTJXulZoG2Q7RECiE=)
                          4: F7859C76D43511F08FA009DFDAE4EC9C.roa (hash: t58rkAW+tki8gdKysYBKMUhjxgpa2MMuVeZqcgJgAb4=)
                          5: B8CC164AD43511F08A5377DEDAE4EC9C.roa (hash: NBitB2nQFOfV9ys3SiMTOmjXMmCIcDc7sWeKdyJpeo8=)
                          6: 35870488D43611F08728FBE0DAE4EC9C.roa (hash: Rm/s93U7Kp3F1Riav5LiVCWaFcWiqPFSK5/3AkP+uUI=)
                          7: 0EF6C094979E11F0A1367EE0DAE4EC9C.roa (hash: rudQgiGZO9W2N58KhjAh5JgOESyQ2q7XBM+cgROdak8=)
                          8: DB8FF5EC8FCB11F0AB6B7CC3DAE4EC9C.roa (hash: MWBh8j3tbpFo+evponTu0mS8C9DNHC3IYuWTwyyHOBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AF, serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
        Validity
            Not Before: Jul 28 03:50:57 2026 GMT
            Not After : Jul 30 03:50:57 2026 GMT
        Subject: CN=6a682722-b5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ab:34:1f:63:a2:c1:0d:c7:31:fd:0e:17:4d:
                    a1:80:b0:e3:14:4c:c6:97:7c:51:64:5d:ac:70:a5:
                    ff:d3:fc:b3:7a:e9:77:8c:6b:a9:bf:c3:f6:1f:86:
                    f3:84:a5:79:05:f8:3c:7c:be:05:47:7b:f4:0b:fa:
                    22:ac:ef:6e:bd:6b:39:17:46:43:fe:69:61:b0:a8:
                    c2:60:b8:18:3c:bd:ec:3e:3d:ab:48:c7:48:5f:5e:
                    b7:47:83:8d:db:f7:eb:33:e1:de:40:0a:7e:83:9a:
                    9b:98:a7:18:2e:c8:95:27:67:07:c7:b5:b9:85:39:
                    8f:2f:5d:15:36:9b:7c:62:d6:e7:a4:e3:60:3e:e4:
                    3f:5f:02:1c:e5:93:99:df:fb:7e:90:e8:85:3e:88:
                    2c:7a:2f:ae:3e:8d:76:24:29:44:4e:3e:c2:5b:92:
                    3e:91:92:27:bb:fe:6d:2c:53:c4:01:28:95:0b:c7:
                    6c:ef:74:81:7c:f9:93:50:f8:bf:35:80:30:1c:dc:
                    49:fc:a2:8b:05:f0:8d:e4:19:ab:f5:1a:1c:08:a6:
                    88:03:5d:69:60:05:32:e7:6a:99:2c:29:9e:3d:2c:
                    d2:55:7e:e6:45:71:a6:f5:cf:9a:19:81:93:3b:62:
                    ab:67:9d:53:bd:c0:05:f8:d2:38:6d:15:28:3a:97:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D2:0D:AC:6A:37:F2:29:B9:3B:E2:CB:3F:49:FA:90:77:CA:58:10
            X509v3 Authority Key Identifier:
                keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:b3:cf:f8:8b:a7:28:7d:55:c9:a3:3d:27:c3:c0:bb:5d:
         61:59:7b:df:b0:89:aa:03:46:12:18:68:9a:19:40:db:cc:d8:
         2e:a8:25:06:77:1c:60:dd:fe:6a:42:98:66:cc:e5:6c:ec:b4:
         76:25:5b:d2:0d:2c:23:58:8a:e0:32:6c:0a:e8:e4:25:aa:66:
         e7:4b:ef:99:1a:f4:74:d9:ea:d8:09:c3:15:55:6b:dd:8f:af:
         5e:82:78:2f:f5:43:72:92:d6:12:bd:e0:21:fe:74:87:6c:8e:
         c2:f3:5b:a2:17:9e:9e:be:93:db:bf:12:0e:d6:54:9f:c1:8b:
         72:a0:62:15:68:c3:73:26:4e:c2:96:aa:4c:19:12:9a:97:dd:
         29:fe:8b:78:0b:d2:c7:07:43:84:e8:b4:96:c4:45:a2:ba:6d:
         70:28:7d:b7:d2:81:ed:c9:9c:25:92:c9:d7:f6:33:ef:ec:f7:
         fc:44:ce:11:1e:8e:bb:9c:99:05:f6:13:28:6f:2a:80:5d:08:
         59:1a:eb:0a:da:17:a3:45:76:74:d4:73:02:d2:02:1c:39:00:
         79:8c:02:c1:bd:61:b9:a7:c9:61:3e:49:2f:da:87:dd:9c:85:
         e4:01:b9:28:24:45:79:84:8b:70:83:cc:3d:a7:0d:b5:36:3d:
         bd:b4:6d:d9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzExRTRBRjExMC8GA1UEBRMoRjAyM0I5NzcwODE5NkZGOUYyMEJDOTI4N0Q1NkM0
MkNBQUU1MTQwRjAeFw0yNjA3MjgwMzUwNTdaFw0yNjA3MzAwMzUwNTdaMBgxFjAU
BgNVBAMTDTZhNjgyNzIyLWI1ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgqzQfY6LBDccx/Q4XTaGAsOMUTMaXfFFkXaxwpf/T/LN66XeMa6m/w/Yf
hvOEpXkF+Dx8vgVHe/QL+iKs7269azkXRkP+aWGwqMJguBg8vew+PatIx0hfXrdH
g43b9+sz4d5ACn6DmpuYpxguyJUnZwfHtbmFOY8vXRU2m3xi1uek42A+5D9fAhzl
k5nf+36Q6IU+iCx6L64+jXYkKUROPsJbkj6Rkie7/m0sU8QBKJULx2zvdIF8+ZNQ
+L81gDAc3En8oosF8I3kGav1GhwIpogDXWlgBTLnapksKZ49LNJVfuZFcab1z5oZ
gZM7YqtnnVO9wAX40jhtFSg6l83DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUy9IN
rGo38im5O+LLP0n6kHfKWBAwHwYDVR0jBBgwFoAU8CO5dwgZb/nyC8kofVbELKrl
FA8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxMUU0LzEzREREMzg4ODNBRDExRUVBMEE4MUIzMjRBRDlFNkZDLzhDTzVk
d2daYl9ueUM4a29mVmJFTEtybEZBOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhDTzVkd2daYl9ueUM4a29mVmJFTEtybEZBOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzExRTQvMTNEREQzODg4M0FEMTFFRUEwQTgxQjMyNEFE
OUU2RkMvOENPNWR3Z1piX255Qzhrb2ZWYkVMS3JsRkE4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAq67PP+IunKH1VyaM9J8PAu11hWXvf
sImqA0YSGGiaGUDbzNguqCUGdxxg3f5qQphmzOVs7LR2JVvSDSwjWIrgMmwK6OQl
qmbnS++ZGvR02erYCcMVVWvdj69egngv9UNyktYSveAh/nSHbI7C81uiF56evpPb
vxIO1lSfwYtyoGIVaMNzJk7ClqpMGRKal90p/ot4C9LHB0OE6LSWxEWium1wKH23
0oHtyZwlksnX9jPv7Pf8RM4RHo67nJkF9hMobyqAXQhZGusK2hejRXZ01HMC0gIc
OQB5jALBvWG5p8lhPkkv2ofdnIXkAbkoJEV5hItwg8w9pw21Nj29tG3Z
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:29 2026 by rpki-client