Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          BA+1TTYO0K5S9QOB/lSRvJR3wI+OWfk9Z3zFcYcVGAE=
Subject key identifier:   B8:9D:60:08:D9:D1:86:1D:55:56:17:FC:D4:6D:E4:DD:CA:82:B2:46
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       0FD1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          0FD1
Signing time:             Tue 28 Jul 2026 00:57:32 +0000
Manifest this update:     Tue 28 Jul 2026 00:57:31 +0000
Manifest next update:     Thu 30 Jul 2026 00:57:31 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: wKpEWtHBXBwEs5sLGSqWdlquopXjxvfvzXCcGOkywoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4049 (0xfd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Jul 28 00:57:31 2026 GMT
            Not After : Jul 30 00:57:31 2026 GMT
        Subject: CN=6a67fe7c-e625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:31:1b:21:81:10:7a:3d:29:24:03:ce:2e:70:
                    26:63:dc:dd:de:4b:92:0c:7e:2f:41:e9:73:ae:f5:
                    09:a5:2d:09:b9:ea:48:02:e4:54:1a:2d:f4:14:1f:
                    1e:fd:54:59:ee:0c:fa:9d:c2:99:f5:c7:61:c4:7d:
                    a1:8f:fc:66:bb:c3:85:9d:62:f2:f8:4b:15:91:2a:
                    6c:49:54:11:50:e0:c5:9d:27:83:c3:20:8b:52:f1:
                    d0:07:59:fe:22:da:22:f6:5f:cb:46:d0:92:10:b6:
                    38:34:ce:5d:d9:69:f1:75:6f:bb:d1:bf:44:23:77:
                    e6:82:b4:a8:78:9a:33:76:ac:52:83:6b:41:1f:26:
                    6f:b9:24:b4:e8:61:39:29:f3:60:9c:e2:b3:af:c6:
                    db:11:f6:f0:38:c4:db:b6:91:a1:cf:de:40:c7:13:
                    69:03:b4:7f:a5:06:24:dc:37:b1:53:11:c9:fa:f6:
                    73:d2:94:84:c9:18:5d:87:1b:9a:32:de:25:24:c5:
                    80:bb:cb:3b:97:f3:65:a9:f2:5b:34:9a:04:ac:64:
                    92:2b:ac:84:83:09:c4:9d:60:c5:53:68:72:e4:08:
                    10:7a:37:9b:50:e2:ce:e9:3f:3f:9a:04:06:98:a1:
                    ea:51:7b:cb:6f:8d:8e:54:c3:d0:82:eb:bd:be:c3:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9D:60:08:D9:D1:86:1D:55:56:17:FC:D4:6D:E4:DD:CA:82:B2:46
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:57:e0:17:b6:63:76:23:c3:2f:31:63:b0:25:37:3e:ce:25:
         d0:9e:9b:94:e1:3b:28:91:e5:b3:d0:0f:4b:65:eb:d7:ac:aa:
         97:c9:97:1f:1c:f1:5e:c5:be:a7:37:0f:77:10:b4:68:00:0c:
         5f:d8:fa:ac:56:f6:a4:01:01:54:75:c2:39:8b:7b:6e:23:7a:
         4c:f8:f0:9f:86:e7:5b:f3:21:0e:54:70:1c:dc:ae:4f:a0:c0:
         72:ea:9c:85:c0:7a:8a:8e:cc:e3:d8:db:f4:4c:11:fc:38:e7:
         bc:db:9d:ad:2a:66:a0:88:06:a6:d4:12:91:e6:21:20:45:4d:
         c9:dc:44:5b:92:be:bc:d1:4a:f7:d6:a7:3f:6d:00:87:12:2d:
         bd:79:44:98:a9:06:96:01:26:f8:70:35:71:be:3b:88:e2:37:
         8f:de:bb:ee:4d:cf:79:38:58:f7:bf:44:ad:36:ca:75:dd:87:
         90:14:22:5c:7b:86:15:6c:42:c4:6b:f2:fa:16:62:2e:c4:50:
         c3:43:ab:5c:98:06:ba:3e:55:66:3f:9c:23:8e:32:27:b1:85:
         23:11:30:61:d3:e9:65:25:d7:3f:52:b6:c8:20:61:d6:91:c3:
         73:b0:e6:cc:4e:1a:95:17:e4:38:1c:2b:e5:1e:8b:c6:86:75:
         74:e1:95:42
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD9EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FGMzdBRjExMC8GA1UEBRMoOEE2OUUzMTM5QkQ3RUZDMDgwQTQyRTE2MDQ4MzM5
OEZBNkM3NUJCNjAeFw0yNjA3MjgwMDU3MzFaFw0yNjA3MzAwMDU3MzFaMBgxFjAU
BgNVBAMTDTZhNjdmZTdjLWU2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtMRshgRB6PSkkA84ucCZj3N3eS5IMfi9B6XOu9QmlLQm56kgC5FQaLfQU
Hx79VFnuDPqdwpn1x2HEfaGP/Ga7w4WdYvL4SxWRKmxJVBFQ4MWdJ4PDIItS8dAH
Wf4i2iL2X8tG0JIQtjg0zl3ZafF1b7vRv0Qjd+aCtKh4mjN2rFKDa0EfJm+5JLTo
YTkp82Cc4rOvxtsR9vA4xNu2kaHP3kDHE2kDtH+lBiTcN7FTEcn69nPSlITJGF2H
G5oy3iUkxYC7yzuX82Wp8ls0mgSsZJIrrISDCcSdYMVTaHLkCBB6N5tQ4s7pPz+a
BAaYoepRe8tvjY5Uw9CC672+w3JFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuJ1g
CNnRhh1VVhf81G3k3cqCskYwHwYDVR0jBBgwFoAUimnjE5vX78CApC4WBIM5j6bH
W7YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRjM3LzQyNkEwQUQ2NTg2RjExRTVBMzI3NjIzMUY4QUVBMjI4L2ltbmpF
NXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ltbmpFNXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FGMzcvNDI2QTBBRDY1ODZGMTFFNUEzMjc2MjMxRjhB
RUEyMjgvaW1uakU1dlg3OENBcEM0V0JJTTVqNmJIVzdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4V+AXtmN2I8MvMWOwJTc+ziXQnpuU
4TsokeWz0A9LZevXrKqXyZcfHPFexb6nNw93ELRoAAxf2PqsVvakAQFUdcI5i3tu
I3pM+PCfhudb8yEOVHAc3K5PoMBy6pyFwHqKjszj2Nv0TBH8OOe8252tKmagiAam
1BKR5iEgRU3J3ERbkr680Ur31qc/bQCHEi29eUSYqQaWASb4cDVxvjuI4jeP3rvu
Tc95OFj3v0StNsp13YeQFCJce4YVbELEa/L6FmIuxFDDQ6tcmAa6PlVmP5wjjjIn
sYUjETBh0+llJdc/UrbIIGHWkcNzsObMThqVF+Q4HCvlHovGhnV04ZVC
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:15 2026 by rpki-client