Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
File:                     BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft (raw, json)
Hash identifier:          XxFO/bw8xM4gMtPAcdTyNggjWXmap5v/bEwFnKLeE9s=
Subject key identifier:   41:F1:B7:A6:17:2B:3C:4E:70:50:01:FD:E9:AA:CC:8A:B3:A2:E7:F3
Authority key identifier: 04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5
Certificate issuer:       /CN=F36C72A2AF/serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
Certificate serial:       DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
Manifest number:          DC
Signing time:             Tue 28 Jul 2026 05:20:38 +0000
Manifest this update:     Tue 28 Jul 2026 05:20:38 +0000
Manifest next update:     Thu 30 Jul 2026 05:20:38 +0000
Files and hashes:         1: BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl (hash: yYzCBRg05aPlzjUwZ8ttwb58EURK7kxaQm+om3VlbMQ=)
                          2: 8EAA7E36DFD611F0BA2968D3DAE4EC9C.roa (hash: mhjtBp/gVSpcPcvCT9mQUfotVZ3SIRjPfe6SWCs+5dE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C72A2AF, serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
        Validity
            Not Before: Jul 28 05:20:38 2026 GMT
            Not After : Jul 30 05:20:38 2026 GMT
        Subject: CN=6a683c26-8da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:7a:bc:d3:1b:fb:5f:f2:31:ea:42:d5:76:
                    02:18:81:c7:f9:12:e2:c4:ed:40:61:0b:d4:e5:c0:
                    c8:89:d0:02:9b:d5:2c:7a:4c:76:43:d7:3f:4b:91:
                    6c:6c:73:cd:62:9a:07:86:43:c3:66:0d:4f:d1:5c:
                    f6:0a:80:c0:e0:fe:93:00:73:e2:e3:2e:19:cf:4d:
                    ba:03:6c:9d:6d:eb:77:14:5c:1b:f4:00:03:bd:a0:
                    6f:2c:19:99:2c:06:6e:d5:15:81:0d:04:bf:37:8c:
                    7e:7a:0a:77:d5:d2:9e:18:81:aa:2f:5d:71:df:f5:
                    40:ba:2b:87:f4:34:68:e0:11:ec:2d:84:37:cd:3e:
                    e2:9d:92:29:b5:3b:93:d5:47:0b:be:33:a9:9c:ad:
                    36:fe:6a:3e:28:4b:c0:85:0f:52:d2:e1:16:87:7a:
                    e0:06:8b:65:62:0c:5f:1d:4d:a6:7e:ad:47:ec:77:
                    2b:b0:ec:76:a5:18:94:4b:d3:ba:bd:48:8e:4c:ad:
                    bd:e7:e2:25:5f:56:e5:41:f6:8b:80:8e:d5:bc:77:
                    e3:dd:77:5f:64:88:8d:ea:15:9d:bd:ba:e2:a2:cf:
                    55:a2:cd:eb:7d:9b:96:e7:33:19:12:ba:aa:b1:b3:
                    fd:d8:4e:62:2e:0d:d6:98:4d:7d:75:63:f0:84:1d:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F1:B7:A6:17:2B:3C:4E:70:50:01:FD:E9:AA:CC:8A:B3:A2:E7:F3
            X509v3 Authority Key Identifier:
                keyid:04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:7f:90:a2:93:6f:46:f5:f3:c7:c8:be:39:ac:9b:98:2a:
         49:8b:dc:b8:1c:d1:86:7c:63:4f:bb:bf:05:51:ba:d2:bf:89:
         a5:9f:31:4d:ba:db:81:83:e0:a0:1d:50:88:15:e2:78:50:6f:
         fd:f7:16:f6:8c:d1:2d:0e:76:1f:3f:c2:24:78:7a:59:df:1f:
         cb:48:04:7c:06:12:b7:36:5e:4d:2b:71:7d:ed:57:c9:c5:80:
         03:9f:2f:a4:8d:a1:d1:89:e0:6d:08:71:92:67:84:d5:a2:fa:
         4e:d1:b4:75:71:18:77:8b:28:0c:bb:62:ac:f8:69:fc:e8:d6:
         bc:b3:b0:de:92:dc:9a:73:c4:b4:3a:0e:98:e7:2d:97:e1:b1:
         28:ce:16:04:34:b9:3e:f7:78:14:a1:aa:c0:ba:82:c5:cc:37:
         f8:3d:ba:05:ac:46:2b:10:2b:ae:1f:bc:68:a4:44:3e:92:54:
         3f:14:bb:a0:e0:6c:c6:6e:d9:5e:d3:aa:17:47:ec:24:54:2c:
         7c:b9:e5:28:42:b3:0b:48:63:85:15:e2:53:a2:bf:2c:6f:38:
         21:9a:ab:9d:c7:a2:d3:ad:0e:b1:3b:c1:77:22:cb:02:2d:72:
         2a:11:ef:14:01:e3:6b:72:eb:33:7b:78:60:46:4a:68:d2:41:
         41:cb:5a:91
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzcyQTJBRjExMC8GA1UEBRMoMDQ1QjUyNTA0M0NCNDNFRUFCREE3RjI0NjM3RjQw
NDA4OTE5QjZGNTAeFw0yNjA3MjgwNTIwMzhaFw0yNjA3MzAwNTIwMzhaMBgxFjAU
BgNVBAMTDTZhNjgzYzI2LThkYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCU2Xq80xv7X/Ix6kLVdgIYgcf5EuLE7UBhC9TlwMiJ0AKb1Sx6THZD1z9L
kWxsc81imgeGQ8NmDU/RXPYKgMDg/pMAc+LjLhnPTboDbJ1t63cUXBv0AAO9oG8s
GZksBm7VFYENBL83jH56CnfV0p4YgaovXXHf9UC6K4f0NGjgEewthDfNPuKdkim1
O5PVRwu+M6mcrTb+aj4oS8CFD1LS4RaHeuAGi2ViDF8dTaZ+rUfsdyuw7HalGJRL
07q9SI5Mrb3n4iVfVuVB9ouAjtW8d+Pdd19kiI3qFZ29uuKiz1Wizet9m5bnMxkS
uqqxs/3YTmIuDdaYTX11Y/CEHcS/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQfG3
phcrPE5wUAH96arMirOi5/MwHwYDVR0jBBgwFoAUBFtSUEPLQ+6r2n8kY39AQIkZ
tvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM3MkEyL0JBMEMwMjNBREZENTExRjBBN0I5MENDRURBRTRFQzlDL0JGdFNV
RVBMUS02cjJuOGtZMzlBUUlrWnR2VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JGdFNVRVBMUS02cjJuOGtZMzlBUUlrWnR2VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzcyQTIvQkEwQzAyM0FERkQ1MTFGMEE3QjkwQ0NFREFF
NEVDOUMvQkZ0U1VFUExRLTZyMm44a1kzOUFRSWtadHZVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4sX+QopNvRvXzx8i+OaybmCpJi9y4
HNGGfGNPu78FUbrSv4mlnzFNutuBg+CgHVCIFeJ4UG/99xb2jNEtDnYfP8IkeHpZ
3x/LSAR8BhK3Nl5NK3F97VfJxYADny+kjaHRieBtCHGSZ4TVovpO0bR1cRh3iygM
u2Ks+Gn86Na8s7Dektyac8S0Og6Y5y2X4bEozhYENLk+93gUoarAuoLFzDf4PboF
rEYrECuuH7xopEQ+klQ/FLug4GzGbtle06oXR+wkVCx8ueUoQrMLSGOFFeJTor8s
bzghmqudx6LTrQ6xO8F3IssCLXIqEe8UAeNrcusze3hgRkpo0kFBy1qR
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:04 2026 by rpki-client