Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File:                     QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier:          UzacrSIfEyTl0MafW5metgsjEkHL0j0n7k1NW6tljDU=
Subject key identifier:   E3:00:42:57:76:78:36:A2:E4:99:D4:6B:FA:73:2A:AF:87:0E:E7:40
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer:       /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial:       0100
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number:          0100
Signing time:             Tue 28 Jul 2026 05:16:12 +0000
Manifest this update:     Tue 28 Jul 2026 05:16:11 +0000
Manifest next update:     Thu 30 Jul 2026 05:16:11 +0000
Files and hashes:         1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: 6K0lhiG7BGzQRp1krQP0+SjHjWA+ZR/N0lviueOR9rE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
        Validity
            Not Before: Jul 28 05:16:11 2026 GMT
            Not After : Jul 30 05:16:11 2026 GMT
        Subject: CN=6a683b1c-db86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:5b:86:b5:28:0a:6c:3e:1d:be:fa:e9:cf:
                    af:b0:9a:d6:d3:36:70:22:d5:27:33:ce:02:42:01:
                    72:30:c2:db:66:93:95:ac:de:90:ab:4c:53:ea:db:
                    a7:fe:49:11:0b:b9:b9:c2:d0:7f:df:69:a3:da:7e:
                    4d:25:29:a9:ac:91:2e:f5:81:c4:0c:42:9c:82:d9:
                    c3:ae:6f:91:86:17:04:8c:b2:c9:23:ac:4a:89:1c:
                    13:e9:f6:91:01:48:73:9f:95:54:79:1c:e3:de:da:
                    8d:0a:69:f6:aa:a2:89:8a:03:ff:0d:08:55:03:d7:
                    53:6e:64:0f:d7:ab:d5:3d:1f:a6:a7:4c:29:11:f5:
                    aa:77:c0:ce:99:ad:04:e1:55:f2:af:b1:b3:38:37:
                    db:5c:b4:fc:ca:22:41:b1:64:7f:34:da:24:28:96:
                    26:70:b7:05:f0:a2:94:c1:d8:1f:e8:16:03:30:ef:
                    76:3d:4c:5b:ad:bf:92:6f:d0:9d:33:ae:47:17:c9:
                    b6:30:ba:e2:f6:7f:7a:67:85:f4:e2:c6:58:6f:2f:
                    ad:11:12:6c:75:b8:00:0f:5c:3d:d7:54:38:64:67:
                    8e:ec:73:8e:d0:9c:4f:ed:e6:d3:8b:f6:6a:cd:ec:
                    d9:9c:40:5d:ba:13:9b:1c:bf:c7:37:f1:1b:72:18:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:42:57:76:78:36:A2:E4:99:D4:6B:FA:73:2A:AF:87:0E:E7:40
            X509v3 Authority Key Identifier:
                keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b8:2a:e7:7d:69:1c:43:23:06:d6:49:24:ec:cf:10:32:59:
         47:c9:8c:47:cb:a1:ab:d5:cc:b1:62:04:33:a3:0a:b6:bd:54:
         47:22:2d:61:3c:4f:15:dd:52:8f:52:65:d3:8b:6b:bb:81:8e:
         4e:53:de:ae:7f:b6:00:09:77:fa:27:31:66:8d:fb:ac:53:87:
         c4:87:15:5b:32:98:78:3d:fd:b5:d3:fa:a9:21:0b:30:1f:6b:
         2a:69:8d:d0:8e:b2:cf:ba:6d:21:95:14:4d:d4:2c:32:27:b6:
         f2:c5:aa:6a:10:8a:13:74:6a:fb:9a:ff:27:77:70:be:e7:26:
         68:f1:05:52:83:a6:e0:44:62:74:88:f3:6d:ed:99:9d:7e:bb:
         f6:b2:74:d1:16:cf:7b:fd:5f:d7:13:1a:a3:06:cf:4f:ed:ed:
         74:42:29:74:b7:a0:68:6d:ca:76:1a:4e:e7:15:64:12:fa:93:
         45:06:7c:36:5f:e7:d7:df:5b:46:8c:6a:c2:10:fd:1a:72:ad:
         de:94:69:5c:fc:fa:9c:b5:40:7d:44:ec:76:e7:ef:a0:d1:f8:
         12:c5:84:65:1c:ed:42:f4:9a:06:32:91:cb:17:51:2b:2f:57:
         9c:c9:89:6f:09:9d:d8:cb:95:8d:2a:02:c1:37:63:8c:80:ec:
         09:3b:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:40 2026 by rpki-client