Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
File:                     XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft (raw, json)
Hash identifier:          geBYlZwcAS2Mj14sOsoVyEweNMbJ92cxxJ74ee3NzCQ=
Subject key identifier:   CB:2C:95:DF:C7:A3:8D:23:2F:68:F4:84:52:8B:8E:88:2E:0F:45:2D
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Certificate issuer:       /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial:       04DA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
Manifest number:          04D7
Signing time:             Tue 28 Jul 2026 03:23:51 +0000
Manifest this update:     Tue 28 Jul 2026 03:23:50 +0000
Manifest next update:     Thu 30 Jul 2026 03:23:50 +0000
Files and hashes:         1: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl (hash: AYNqut7YdZ8gzgxxCjdu522/vD+p3wRrHd2IZrfDK8s=)
                          2: A1805C0C92FF11F0845A567BDAE4EC9C.roa (hash: ccYbYk4DFeBezZ71ObQ5q/wL3jkn4Z2RITih1QoUcNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                          rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAR, serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
        Validity
            Not Before: Jul 28 03:23:50 2026 GMT
            Not After : Jul 30 03:23:50 2026 GMT
        Subject: CN=6a6820c7-03cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:8a:70:16:c1:1d:eb:ff:8c:ce:49:be:84:
                    40:e6:c4:c5:d9:93:33:b6:ae:06:64:73:bd:43:d3:
                    ac:5a:8e:a2:e7:68:84:25:63:05:96:e6:cf:62:f7:
                    96:62:17:6d:d1:73:0a:19:93:f4:0b:18:23:aa:ee:
                    1e:27:60:14:1d:fc:41:3b:ca:c6:2a:f6:4e:34:b1:
                    8a:86:df:71:f8:18:37:7f:36:74:49:13:bc:1e:69:
                    44:5c:04:66:4a:50:bf:3d:7d:73:3e:76:04:9f:98:
                    b3:14:32:a9:75:e3:44:bd:ac:67:a7:61:6d:29:02:
                    5f:1b:31:5f:ef:14:5f:5b:9e:5e:23:1e:5e:e9:d4:
                    7c:fb:8c:80:a0:3a:7b:ab:5d:67:2e:1f:0b:12:82:
                    6a:fb:72:99:19:f5:35:7f:19:8e:89:e0:eb:9d:37:
                    29:d2:c5:53:1c:2e:a5:1f:4f:d6:0d:de:e0:33:5c:
                    27:e5:16:81:ce:db:f7:a9:49:b3:bd:e7:bc:af:da:
                    24:d3:52:a2:6a:16:4f:35:5b:30:64:47:52:78:8a:
                    31:1b:72:4c:06:d4:4c:5f:84:63:e1:64:e2:a4:92:
                    60:e5:d2:c5:25:f8:93:0b:70:15:ca:89:9b:f7:93:
                    36:58:c9:6a:8a:34:9b:a9:f1:03:b6:93:2a:de:d0:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:95:DF:C7:A3:8D:23:2F:68:F4:84:52:8B:8E:88:2E:0F:45:2D
            X509v3 Authority Key Identifier:
                keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:83:a8:6b:fc:74:81:31:bb:d9:a3:3c:dc:c1:c5:c4:af:
         e3:5e:b1:3e:31:9c:14:e6:4d:4d:f3:db:6d:75:b5:c3:6b:6b:
         37:bf:c0:9c:e9:0e:f2:d1:53:89:e2:26:cc:9a:f2:e9:b0:ee:
         ef:f5:39:85:24:48:a7:1c:d1:d7:74:39:9d:28:a7:29:1a:28:
         ae:53:c3:59:78:33:a0:7e:b3:6e:e9:8b:30:7a:59:7a:bc:4d:
         e5:4f:cb:56:08:b6:69:b3:05:af:de:05:4d:f2:00:54:42:d2:
         09:23:c3:d2:29:47:65:f3:d3:b6:3f:3c:93:c2:46:0d:c0:23:
         9c:16:99:9e:a4:f8:17:0b:dd:f3:09:0c:19:b2:d3:35:87:bf:
         d8:1c:85:b6:d1:b4:7b:35:c0:35:a4:fd:f6:3e:7c:a8:00:1f:
         1d:c9:4b:86:52:22:a7:88:eb:cb:bd:3d:59:7c:c4:71:66:cc:
         04:bc:f4:d0:42:9a:db:43:62:a2:a5:5f:bf:b8:f4:79:22:f8:
         21:b4:3e:20:a4:dc:93:c0:40:02:69:26:bd:3b:43:09:3f:a5:
         42:f5:01:87:37:a9:cc:ed:5d:c1:fc:a5:bf:6c:a5:3e:f4:a8:
         93:45:fd:e6:c5:51:85:a1:37:74:6d:89:e8:7e:ad:3c:64:15:
         54:14:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:52:08 2026 by rpki-client