Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File:                     QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier:          9dLX4pH/s0nfV+fZEbomsSIktfNQrnJgsPwNVT8/Y3E=
Subject key identifier:   D1:C0:1E:D0:82:88:0B:60:03:32:7C:39:DE:58:AB:00:FD:00:E2:6C
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer:       /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial:       D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number:          D2
Signing time:             Fri 12 Jun 2026 05:16:05 +0000
Manifest this update:     Fri 12 Jun 2026 05:16:04 +0000
Manifest next update:     Sun 14 Jun 2026 05:16:04 +0000
Files and hashes:         1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: JlzZz+wXuiP7zSP9Oy+34gAXwokgXH93XRfzgxfnRmw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
        Validity
            Not Before: Jun 12 05:16:04 2026 GMT
            Not After : Jun 14 05:16:04 2026 GMT
        Subject: CN=6a2b9615-f7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:09:38:ca:31:08:3b:ef:9c:26:e0:9e:fb:
                    bc:1b:47:37:2b:51:4e:b3:b3:e4:15:42:8b:25:bd:
                    8c:98:be:19:4b:e8:3b:72:6c:d4:ed:c7:b9:bd:e7:
                    1e:43:97:7b:81:44:0c:60:87:ce:40:87:7e:4b:14:
                    df:fc:2c:46:5f:d8:2a:5b:db:d0:56:a4:1b:9f:18:
                    e1:51:49:71:f1:4c:40:76:60:d9:1f:d3:2f:7f:0e:
                    65:0b:be:1c:be:14:d5:bb:cf:3a:d0:2f:9e:67:82:
                    4b:8d:51:98:05:79:a7:04:df:82:c6:10:ba:0d:6c:
                    a9:cf:ab:24:dd:79:3c:f4:b2:9f:ef:7f:4c:c9:43:
                    5f:88:31:64:ed:b3:8f:af:cc:4d:70:5d:d9:4a:86:
                    30:6e:48:36:08:a7:c1:56:71:73:7c:c7:8f:7e:25:
                    d1:4f:31:e9:89:66:b8:12:38:fc:8f:82:43:74:a2:
                    45:90:2b:97:14:c4:35:ff:b1:98:be:10:b9:02:79:
                    73:ef:77:e8:b2:6a:63:6d:81:7c:7b:b1:ee:5c:a6:
                    8f:d5:dd:cb:88:bf:05:14:77:36:a6:4e:5b:9c:e4:
                    3b:b0:73:c3:90:b3:0c:c1:07:9a:4c:6b:62:b8:95:
                    fb:9d:fd:7d:f4:fc:aa:3b:1b:4b:df:3d:c1:00:16:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C0:1E:D0:82:88:0B:60:03:32:7C:39:DE:58:AB:00:FD:00:E2:6C
            X509v3 Authority Key Identifier:
                keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c4:44:df:f9:3f:78:4e:93:7b:4d:e9:9a:f4:b2:0a:f1:57:
         f2:e4:1d:39:3d:cc:35:31:1c:f2:df:e6:11:8f:29:cf:3b:1f:
         dd:a7:d6:da:70:da:20:51:4f:a2:dd:90:df:86:6e:e6:dc:5e:
         2b:05:d6:6b:81:63:93:f3:62:32:99:3d:1c:2d:b9:ae:fd:0c:
         48:75:b3:75:22:61:1b:36:09:19:ec:b3:69:1b:ec:7d:11:71:
         97:45:1e:57:26:bc:84:d4:40:d6:e9:79:89:6e:af:7a:0e:e9:
         a8:85:6b:3f:ca:51:d7:68:99:dc:da:4b:fa:fe:33:dd:53:dd:
         a3:45:4f:4b:90:88:34:99:5c:8d:88:57:76:e5:80:fa:66:bf:
         ef:4e:fa:2f:5c:a9:e8:a0:d0:54:ab:57:5a:d6:9e:e6:a9:89:
         7f:15:eb:24:0f:60:fb:67:ec:db:2a:a5:cd:be:a3:de:f3:7a:
         88:71:6f:b1:90:4d:58:26:74:28:76:bd:3f:a0:b2:72:de:cc:
         e4:b7:ad:02:09:2d:5f:7e:67:95:24:7c:71:a8:76:2c:c4:94:
         4f:dc:f3:84:e9:48:c6:5e:ee:62:80:9b:25:e1:77:67:35:dc:
         e3:8e:40:ff:e7:8b:35:89:50:d2:9f:a8:37:9f:ca:27:58:7f:
         53:e1:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:30:15 2026 by rpki-client