Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File:                     tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier:          xP0PwUHbCXY7wDo7qTbEr0Qh4zi/XaYAQ6W/0ommD5s=
Subject key identifier:   6F:70:07:52:35:8B:E2:F7:5E:FF:9A:D1:1E:2D:0C:B5:2C:2B:53:1A
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer:       /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial:       02CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number:          02CB
Signing time:             Fri 12 Jun 2026 04:17:20 +0000
Manifest this update:     Fri 12 Jun 2026 04:17:19 +0000
Manifest next update:     Sun 14 Jun 2026 04:17:19 +0000
Files and hashes:         1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: CgShvcZi4uOWElhVYxQORdznehOgLsgEeqmJRn2a9mg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 04:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D26A1AF, serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
        Validity
            Not Before: Jun 12 04:17:19 2026 GMT
            Not After : Jun 14 04:17:19 2026 GMT
        Subject: CN=6a2b8850-da37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:43:1f:5f:db:2f:57:1a:87:e5:3a:ea:99:
                    16:d0:81:f6:dc:cb:e2:ce:07:34:fe:24:a3:a4:e6:
                    74:62:11:e5:48:8c:67:f0:3e:6e:d9:6b:b2:ef:a5:
                    64:e6:06:f4:5d:bf:59:11:6c:49:3e:34:d1:96:2c:
                    5f:0e:99:e4:a0:a5:a6:ea:42:24:87:9e:c2:f2:8f:
                    91:d8:98:df:0d:53:c1:7d:d9:d3:5b:cc:ac:63:0e:
                    bc:8a:ed:bb:bc:0a:85:08:18:5e:b0:1e:5e:1e:be:
                    f9:c1:f8:30:c9:3e:5b:9a:09:92:97:f2:44:8a:7f:
                    99:17:72:dd:93:71:6f:81:1e:35:d6:6a:c6:bc:af:
                    8f:3c:de:cd:ce:a0:73:0d:c6:6b:9e:e6:84:c2:29:
                    a0:86:b7:4a:95:9d:d4:a5:0b:a4:27:05:f3:4e:b8:
                    ad:b3:1a:cc:25:e1:86:b3:cb:55:45:08:96:92:83:
                    37:ce:7b:74:1d:29:5b:4f:0e:14:3b:74:e0:17:63:
                    fd:fa:60:b9:20:c3:03:cb:f7:81:27:c2:8f:38:c7:
                    25:4d:df:10:fd:2a:78:84:20:4b:b4:83:44:77:f0:
                    b4:e8:7d:8a:80:41:71:da:37:e6:39:08:ad:e5:e6:
                    29:09:44:df:fd:e1:51:a5:43:e7:82:7d:6f:fa:49:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:70:07:52:35:8B:E2:F7:5E:FF:9A:D1:1E:2D:0C:B5:2C:2B:53:1A
            X509v3 Authority Key Identifier:
                keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:80:da:3e:e5:02:52:b7:be:9d:8f:b0:1d:c1:7d:0e:63:e3:
         14:3b:4a:85:4c:06:1c:ea:32:e5:ad:73:8f:69:64:ba:be:4b:
         b7:c0:c8:7a:d4:ad:27:eb:29:48:48:84:31:30:82:be:9f:db:
         2a:c5:04:9b:11:9d:d1:a4:f4:d4:33:e3:56:07:67:2f:52:fb:
         4c:15:41:20:75:e8:cc:c2:79:23:ba:83:36:df:11:3c:4a:bb:
         c9:5c:d1:24:7f:24:b7:e3:70:f1:06:e4:8b:2f:cb:13:a7:d3:
         de:c0:77:9d:91:b2:86:09:38:14:01:d2:9f:5e:2d:3d:1c:0f:
         42:22:19:22:17:66:50:5d:97:1b:34:a9:56:28:b8:80:d4:35:
         68:3a:f8:9b:f2:19:02:a4:49:8a:0b:18:61:0f:31:3b:08:0a:
         f5:fa:89:52:d5:71:02:48:29:01:be:4e:3d:17:20:7d:a2:59:
         56:f3:d4:ed:0d:c0:34:e3:e9:1f:f2:ce:c4:1d:e7:92:a7:4c:
         9e:e5:ea:88:96:c5:29:69:a9:ac:dc:7c:b7:01:46:eb:c9:f2:
         b4:49:f9:26:05:c4:5f:f6:2b:fe:36:d9:b8:ed:1e:0b:ed:2b:
         7f:8f:c9:ef:10:64:3d:5f:61:96:c9:f5:97:5a:3f:3f:17:b6:
         c2:dd:99:41
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDI2QTFBRjExMC8GA1UEBRMoQjRDMDFDNEQ2MUU4MDU5MDA1REFFQTRDNjc3QTE2
RTQ0NDdENTUyQzAeFw0yNjA2MTIwNDE3MTlaFw0yNjA2MTQwNDE3MTlaMBgxFjAU
BgNVBAMTDTZhMmI4ODUwLWRhMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC50MfX9svVxqH5TrqmRbQgfbcy+LOBzT+JKOk5nRiEeVIjGfwPm7Za7Lv
pWTmBvRdv1kRbEk+NNGWLF8OmeSgpabqQiSHnsLyj5HYmN8NU8F92dNbzKxjDryK
7bu8CoUIGF6wHl4evvnB+DDJPluaCZKX8kSKf5kXct2TcW+BHjXWasa8r4883s3O
oHMNxmue5oTCKaCGt0qVndSlC6QnBfNOuK2zGswl4Yazy1VFCJaSgzfOe3QdKVtP
DhQ7dOAXY/36YLkgwwPL94Enwo84xyVN3xD9KniEIEu0g0R38LTofYqAQXHaN+Y5
CK3l5ikJRN/94VGlQ+eCfW/6SdR/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUb3AH
UjWL4vde/5rRHi0MtSwrUxowHwYDVR0jBBgwFoAUtMAcTWHoBZAF2upMZ3oW5ER9
VSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyNkExLzlCRkRFMUJBM0VBRTExRUY4RUUyQzE1RTc2MkU5NTFBL3RNQWNU
V0hvQlpBRjJ1cE1aM29XNUVSOVZTdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3RNQWNUV0hvQlpBRjJ1cE1aM29XNUVSOVZTdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDI2QTEvOUJGREUxQkEzRUFFMTFFRjhFRTJDMTVFNzYy
RTk1MUEvdE1BY1RXSG9CWkFGMnVwTVozb1c1RVI5VlN3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDEgNo+5QJSt76dj7AdwX0OY+MUO0qF
TAYc6jLlrXOPaWS6vku3wMh61K0n6ylISIQxMIK+n9sqxQSbEZ3RpPTUM+NWB2cv
UvtMFUEgdejMwnkjuoM23xE8SrvJXNEkfyS343DxBuSLL8sTp9PewHedkbKGCTgU
AdKfXi09HA9CIhkiF2ZQXZcbNKlWKLiA1DVoOvib8hkCpEmKCxhhDzE7CAr1+olS
1XECSCkBvk49FyB9ollW89TtDcA04+kf8s7EHeeSp0ye5eqIlsUpaams3Hy3AUbr
yfK0SfkmBcRf9iv+Ntm47R4L7St/j8nvEGQ9X2GWyfWXWj8/F7bC3ZlB
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:32:25 2026 by rpki-client