Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.mft (raw, json)
Hash identifier:          bwStRcocvxsw0oEs5RnLIV01Dr1PC1yCy08LGXNicPc=
Subject key identifier:   34:79:3A:6D:07:56:B0:AF:4B:2D:37:04:10:16:B7:B2:4C:A0:B6:D0
Authority key identifier: C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Certificate issuer:       /CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
Certificate serial:       0382
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
Manifest number:          0381
Signing time:             Tue 28 Jul 2026 04:04:24 +0000
Manifest this update:     Tue 28 Jul 2026 04:04:24 +0000
Manifest next update:     Thu 30 Jul 2026 04:04:24 +0000
Files and hashes:         1: wzA4fNIYxMz6UivFNddwdVvPe28.crl (hash: Ki7BYbvC/1c7ixo0Ww+BECp8tFl9MFQc8mrTBmmgnqI=)
                          2: D27A6A28D7C111EE8A342CA3775412E6.roa (hash: peA4+LIUnTnNHVNJXvAgPW0H2f9Uqrwu8nzHISX24Zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D591BAF, serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Validity
            Not Before: Jul 28 04:04:24 2026 GMT
            Not After : Jul 30 04:04:24 2026 GMT
        Subject: CN=6a682a48-ed6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:f4:d5:d3:95:4f:56:dd:00:dd:eb:4e:b4:
                    6a:21:a0:89:09:1d:bf:9e:fe:76:82:1f:e3:03:fe:
                    68:cc:ea:9b:4a:42:82:a3:66:32:71:07:2f:ec:b3:
                    72:83:41:1a:1f:a2:96:b8:63:3f:52:f4:96:ef:20:
                    5b:bd:06:85:79:0d:bf:2d:b8:dd:63:4a:51:ea:fd:
                    ff:8c:b8:b0:5d:ae:45:72:21:5b:f3:f1:b0:1e:24:
                    cb:89:8a:85:d5:38:32:ff:4c:06:96:d9:e1:ee:8f:
                    ce:e2:38:e9:39:18:52:2a:71:58:57:58:c4:0b:03:
                    16:4a:5a:2e:71:46:05:1a:01:26:e4:00:d3:a5:54:
                    1e:23:c0:48:36:c2:24:a5:8a:9c:ba:b0:61:d9:06:
                    53:79:76:ba:4b:56:c0:8f:8b:7d:ff:db:68:d0:da:
                    2e:4f:ff:42:af:0f:65:33:13:27:ac:89:d1:a4:a4:
                    43:55:d6:5b:e3:54:e8:72:95:4c:4f:40:e4:ed:34:
                    ae:de:80:7a:9e:30:f6:33:c9:c7:90:9a:9f:87:fb:
                    1a:50:63:ca:32:41:97:f8:e6:13:4c:57:6c:03:7f:
                    5a:dc:6e:b9:63:20:96:da:44:e7:21:f1:5d:2e:2c:
                    eb:e5:63:be:88:ed:d2:82:60:bd:6f:25:04:9c:9a:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:79:3A:6D:07:56:B0:AF:4B:2D:37:04:10:16:B7:B2:4C:A0:B6:D0
            X509v3 Authority Key Identifier:
                keyid:C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:e3:a9:19:84:80:e5:d2:75:0b:db:40:78:02:46:f3:aa:
         57:80:d5:77:a9:de:db:ac:fa:f7:95:66:d0:ac:45:57:46:65:
         d1:0c:9f:b1:33:a5:8b:e1:1f:5f:ad:a1:f4:62:31:0c:82:33:
         db:70:52:53:82:5f:4f:d2:4e:9c:48:91:4e:c9:08:91:3b:f6:
         1c:8b:74:0b:cf:15:f8:81:32:cf:d7:4f:c1:c9:db:0d:ef:9a:
         3d:a1:67:3b:db:64:00:8b:15:0c:f9:7d:10:25:71:2a:33:19:
         2a:c7:6a:34:62:33:58:47:69:36:70:c1:6e:00:8b:69:cd:c4:
         9b:8c:2d:43:29:98:d6:3b:92:a2:84:28:81:1b:75:68:a9:cf:
         a4:33:a6:58:cf:05:7d:64:be:80:22:8a:96:67:c2:53:5a:f2:
         37:1e:42:cb:30:7a:69:f4:f9:2c:2b:54:0d:f9:fa:cc:9f:02:
         e6:8e:8c:35:a4:a2:7e:f1:de:25:d6:55:9b:e1:9f:7f:7c:f4:
         12:19:fa:ae:2e:f9:a2:9f:6d:17:47:a6:5e:97:57:e0:cc:5c:
         86:d9:ed:27:5c:b9:06:66:f4:39:d5:64:09:00:f5:ff:00:aa:
         a9:5a:cf:c6:d1:c0:22:50:7d:f9:16:bf:74:22:7c:37:52:cd:
         0a:96:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:58 2026 by rpki-client