Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          8uy+E597XrMY/b57rDf8nvMrRrCLgCpnVeF5ZCxudW0=
Subject key identifier:   52:17:DA:FB:EA:2E:32:B8:54:6D:A7:8F:AB:6C:A9:91:76:4B:10:83
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       1031
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          102C
Signing time:             Tue 28 Jul 2026 00:51:48 +0000
Manifest this update:     Tue 28 Jul 2026 00:51:47 +0000
Manifest next update:     Thu 30 Jul 2026 00:51:47 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: o8898jqYc2mywD/rCWkJOLN+3K7QMU+/rCTgwqeZfko=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4145 (0x1031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Jul 28 00:51:47 2026 GMT
            Not After : Jul 30 00:51:47 2026 GMT
        Subject: CN=6a67fd23-386e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:a9:d3:65:98:04:5c:48:31:aa:7c:e5:73:
                    c1:b5:8b:2a:03:e0:6d:af:b8:a0:b9:0f:31:09:5c:
                    16:93:da:ee:d8:13:6b:94:05:9a:8a:dc:b7:30:d7:
                    ad:bb:cf:5c:54:3c:18:06:4b:65:07:72:df:4b:34:
                    7a:51:34:1e:b1:ba:13:a3:7d:f4:d3:62:fc:98:03:
                    4c:71:08:17:97:4a:00:85:dc:ce:cb:f5:9f:b4:f1:
                    8b:70:93:a0:da:02:9b:82:56:c4:be:bf:c5:0b:f6:
                    9d:53:19:62:02:ab:25:bb:c7:49:4a:74:be:17:9e:
                    e5:33:fe:08:06:c6:87:d2:e9:3d:00:75:e5:b2:1f:
                    23:33:05:8f:5f:1e:80:8a:39:26:ac:81:35:0a:9f:
                    e4:ce:a6:b2:27:4d:ae:6f:68:0d:7e:8e:49:a7:c2:
                    8b:5e:9c:c2:f3:77:7f:60:be:d2:01:b7:8f:d6:f5:
                    b5:d7:e6:3b:d4:42:bb:7d:3e:5e:ef:1a:6e:9d:1d:
                    27:50:d5:72:b6:52:bb:4e:a4:15:8c:fd:64:a6:63:
                    29:a7:27:d1:8b:9b:04:ce:b3:a9:6b:d1:61:66:f2:
                    cb:07:6e:54:64:9c:0c:b3:ac:f8:16:af:96:59:39:
                    5d:e0:d3:d4:8b:19:59:fe:40:c6:05:e5:cf:2d:97:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:17:DA:FB:EA:2E:32:B8:54:6D:A7:8F:AB:6C:A9:91:76:4B:10:83
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c7:d0:76:aa:85:c7:3a:fb:5e:2c:00:79:0f:a8:95:3b:69:
         dc:4c:81:ee:82:6c:b0:9f:4b:7b:b3:dc:db:b8:17:ca:13:d1:
         1e:cf:33:e6:21:16:ce:fb:7e:d4:88:66:26:ef:2c:8b:94:f7:
         13:65:2d:0f:54:b5:a6:0b:a1:59:9e:ed:c9:78:d3:85:4f:e3:
         71:6e:38:d6:8f:38:1d:b6:2f:cd:e8:2a:c3:27:75:21:76:82:
         c9:15:ca:ae:d6:05:44:df:d9:7b:24:fc:d1:d7:fb:65:33:85:
         05:dd:46:a4:b0:ae:c5:e9:18:30:94:3e:a4:98:b4:6e:60:ae:
         05:9e:c1:e6:df:83:fe:0c:d1:b8:2b:f3:2b:11:63:ff:62:dd:
         f4:a4:f1:fa:e2:68:53:00:1a:e8:9b:d8:00:fd:df:62:33:18:
         ac:e8:b5:53:80:5f:d2:f0:49:0a:45:9e:b5:6f:ad:a2:9a:cb:
         d3:9d:31:26:df:38:3d:8d:b6:db:34:7a:18:b6:06:9a:b1:45:
         b9:0f:fb:95:32:de:7a:84:9a:b7:3c:5c:f2:d0:a7:1d:cf:34:
         30:b5:fe:af:da:71:24:04:32:5f:b7:8e:83:74:bc:6b:89:0c:
         e3:49:c3:da:9c:75:2c:aa:fa:c4:f5:41:7d:52:30:2c:61:19:
         f5:54:f2:95
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhERkFBRjExMC8GA1UEBRMoRDY2OEJFQ0FGM0NCMTREQjYyNEEzNDI1RDY2NjYw
OUJGMjdCNTJFRTAeFw0yNjA3MjgwMDUxNDdaFw0yNjA3MzAwMDUxNDdaMBgxFjAU
BgNVBAMTDTZhNjdmZDIzLTM4NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHTanTZZgEXEgxqnzlc8G1iyoD4G2vuKC5DzEJXBaT2u7YE2uUBZqK3Lcw
1627z1xUPBgGS2UHct9LNHpRNB6xuhOjffTTYvyYA0xxCBeXSgCF3M7L9Z+08Ytw
k6DaApuCVsS+v8UL9p1TGWICqyW7x0lKdL4XnuUz/ggGxofS6T0AdeWyHyMzBY9f
HoCKOSasgTUKn+TOprInTa5vaA1+jkmnwotenMLzd39gvtIBt4/W9bXX5jvUQrt9
Pl7vGm6dHSdQ1XK2UrtOpBWM/WSmYymnJ9GLmwTOs6lr0WFm8ssHblRknAyzrPgW
r5ZZOV3g09SLGVn+QMYF5c8tlzGdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUhfa
++ouMrhUbaePq2ypkXZLEIMwHwYDVR0jBBgwFoAU1mi+yvPLFNtiSjQl1mZgm/J7
Uu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4REZBLzBFOUIxOUJBMTQwQTExRTVBN0Y1RkM0Q0Y4QUVBMjI4LzFtaS15
dlBMRk50aVNqUWwxbVpnbV9KN1V1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFtaS15dlBMRk50aVNqUWwxbVpnbV9KN1V1NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhERkEvMEU5QjE5QkExNDBBMTFFNUE3RjVGQzRDRjhB
RUEyMjgvMW1pLXl2UExGTnRpU2pRbDFtWmdtX0o3VXU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBx9B2qoXHOvteLAB5D6iVO2ncTIHu
gmywn0t7s9zbuBfKE9EezzPmIRbO+37UiGYm7yyLlPcTZS0PVLWmC6FZnu3JeNOF
T+NxbjjWjzgdti/N6CrDJ3UhdoLJFcqu1gVE39l7JPzR1/tlM4UF3UaksK7F6Rgw
lD6kmLRuYK4FnsHm34P+DNG4K/MrEWP/Yt30pPH64mhTABrom9gA/d9iMxis6LVT
gF/S8EkKRZ61b62imsvTnTEm3zg9jbbbNHoYtgaasUW5D/uVMt56hJq3PFzy0Kcd
zzQwtf6v2nEkBDJft46DdLxriQzjScPanHUsqvrE9UF9UjAsYRn1VPKV
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:19:25 2026 by rpki-client