Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
File:                     wuBZxqiBjrGd_aowkraqE5_oOPY.mft (raw, json)
Hash identifier:          3WzQDE0APEXVQ1hOuIzxNJJC62Bh7EZUvE6CetAlAY0=
Subject key identifier:   59:AE:87:C7:14:4E:45:00:A9:B8:B0:63:97:E3:86:5A:7E:C5:5F:4A
Authority key identifier: C2:E0:59:C6:A8:81:8E:B1:9D:FD:AA:30:92:B6:AA:13:9F:E8:38:F6
Certificate issuer:       /CN=F36CFBB0AF/serialNumber=C2E059C6A8818EB19DFDAA3092B6AA139FE838F6
Certificate serial:       0236
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
Manifest number:          0236
Signing time:             Tue 28 Jul 2026 04:45:19 +0000
Manifest this update:     Tue 28 Jul 2026 04:45:18 +0000
Manifest next update:     Thu 30 Jul 2026 04:45:18 +0000
Files and hashes:         1: wuBZxqiBjrGd_aowkraqE5_oOPY.crl (hash: wS1A+opDfItfomvLkpLCq0k3geYhBgEnifyY0mXtqLw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AF, serialNumber=C2E059C6A8818EB19DFDAA3092B6AA139FE838F6
        Validity
            Not Before: Jul 28 04:45:18 2026 GMT
            Not After : Jul 30 04:45:18 2026 GMT
        Subject: CN=6a6833de-b3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:ee:6f:30:28:9a:c1:90:32:61:d8:4c:87:
                    50:fd:94:bb:76:c3:b7:68:69:30:cc:c7:3a:52:66:
                    e3:c3:26:67:e9:2d:9b:59:9f:30:59:76:70:19:60:
                    51:3c:b4:0c:bb:47:b9:96:54:01:0e:5b:1c:9b:38:
                    d6:45:2b:29:1a:dd:3a:7a:27:7d:7f:69:c7:04:f0:
                    17:f7:dd:f6:9d:1c:db:4b:c6:fd:cf:88:a5:1d:c5:
                    58:37:74:95:49:51:88:2c:17:72:0d:54:d2:6f:21:
                    69:8c:a4:e1:18:17:f0:16:ac:4b:16:be:09:a4:ac:
                    ce:6d:80:c9:15:10:5b:2c:ce:d5:e1:e6:57:0a:a1:
                    c1:1c:a0:54:8a:d5:76:37:a7:91:e3:b3:26:e0:c5:
                    17:31:aa:f5:44:fb:6c:cb:7f:6c:ef:77:6d:91:d7:
                    30:62:b1:a9:b7:58:6a:84:f1:04:31:b0:95:80:14:
                    c5:a9:d7:9e:cb:5a:51:d7:35:3e:b9:ef:06:bf:35:
                    a8:9f:c5:d0:39:c2:1d:58:71:ca:81:08:8d:97:b0:
                    3f:a8:2d:79:fc:f4:42:0f:da:cd:04:91:7a:ff:f2:
                    56:eb:fd:9d:d9:84:01:5b:1a:c1:e9:73:c4:e4:85:
                    7b:db:61:8a:76:cd:da:36:ea:90:b0:c2:b6:05:47:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:87:C7:14:4E:45:00:A9:B8:B0:63:97:E3:86:5A:7E:C5:5F:4A
            X509v3 Authority Key Identifier:
                keyid:C2:E0:59:C6:A8:81:8E:B1:9D:FD:AA:30:92:B6:AA:13:9F:E8:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:ac:00:5e:8c:f1:8a:2e:bc:e6:ea:81:dc:b6:7a:d4:a7:
         63:b4:f8:7b:f0:58:e3:7d:7b:38:06:da:37:f0:06:f0:9e:11:
         ac:ca:14:24:eb:c1:ec:cd:f5:ec:5d:9f:18:19:1a:41:2b:e3:
         1c:1b:d6:d6:89:c5:e8:cc:70:ce:8f:20:c4:96:da:61:cf:61:
         ee:78:20:9d:56:56:b8:84:6d:d9:db:57:38:a4:b0:5b:68:3c:
         25:86:63:28:bf:43:b2:24:42:55:9c:91:91:da:e8:4b:52:05:
         f0:ac:84:c6:8a:8d:f8:4e:5f:2f:5b:ef:01:b6:24:b1:b3:2f:
         cd:76:6c:ee:66:be:fb:a4:f5:77:fb:8c:07:ab:aa:5f:e2:8c:
         6d:4c:ae:fb:48:45:84:42:69:09:41:d2:20:f6:8b:a9:d2:f4:
         d3:22:42:9f:7d:8c:44:6f:58:29:c2:c3:c1:d4:1a:2f:92:f5:
         bc:9d:98:1e:d4:8e:4a:e5:3b:2a:17:84:b2:57:46:2a:2e:8b:
         c9:b5:df:3a:cd:eb:c5:a3:91:f7:1f:0a:b3:d1:a9:7c:91:be:
         0e:f0:5c:da:f3:fe:7e:d5:e3:20:44:86:14:ac:f8:9d:2a:af:
         6d:35:28:e1:e1:21:98:96:93:f6:d0:0f:cc:c6:07:1e:0d:86:
         12:02:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:04 2026 by rpki-client