Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
File:                     38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft (raw, json)
Hash identifier:          0qnFupADZNBAwtgkTTtLfZpYNzqCFd9sswOcLdx4uBk=
Subject key identifier:   2A:78:22:8A:EB:2A:39:CE:88:48:C2:C7:32:13:73:5C:7A:D5:B4:B1
Authority key identifier: DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8
Certificate issuer:       /CN=F36D9331AF/serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
Manifest number:          26
Signing time:             Tue 28 Jul 2026 05:43:07 +0000
Manifest this update:     Tue 28 Jul 2026 05:43:06 +0000
Manifest next update:     Thu 30 Jul 2026 05:43:06 +0000
Files and hashes:         1: 38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl (hash: WLT7eFLmZ6Gyhcq+NTfDFw/3lxCmF4mTizcwNlR+Ko0=)
                          2: 294373CC6F0F11F1819301F7CE1D38B0.roa (hash: ETMnfkYgdR0C9KWl5E+TZTv27PVluRefelvYjni0Gxw=)
                          3: FDC40B586F0E11F1BD52D3F6CE1D38B0.roa (hash: JvHfa8PbxLnLrnbEStFKCsSxCR5AFd3IjBiTnIAQW+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9331AF, serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
        Validity
            Not Before: Jul 28 05:43:06 2026 GMT
            Not After : Jul 30 05:43:06 2026 GMT
        Subject: CN=6a68416a-9ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:35:c7:6c:6e:7e:43:97:a2:23:5e:6f:71:
                    c2:fa:7c:31:b9:21:1a:ea:51:69:48:15:10:ef:db:
                    c3:6c:a0:e6:ae:1c:fd:37:d1:d5:15:fa:22:ad:0b:
                    97:c1:d2:f4:50:67:95:b3:db:4a:59:77:66:f0:37:
                    99:64:5c:c5:18:e2:0d:2f:fc:b2:c3:c3:a6:5a:a8:
                    ad:e6:fd:83:2e:78:b5:47:45:2d:66:c9:ee:58:f6:
                    09:28:15:0b:64:1f:12:a9:fb:e0:2e:3d:2d:dc:57:
                    bd:d3:ae:be:dd:55:e0:b8:1a:ef:0a:0d:5f:dc:c2:
                    5a:2a:7d:86:cc:7a:d0:97:ab:19:a8:40:c4:8c:98:
                    09:5f:08:19:22:0d:8c:7e:1c:86:eb:40:a0:92:cf:
                    f6:bf:bf:cf:7f:11:3f:d1:d6:0c:cf:82:70:44:35:
                    1e:65:72:ae:4b:d7:1a:ad:91:8d:4c:fb:bf:62:1d:
                    4c:ba:84:28:bc:25:ce:80:5c:bf:e8:2e:3a:47:7f:
                    8b:03:25:61:25:31:b8:9c:02:70:d2:18:77:dc:54:
                    64:56:5f:ed:72:29:23:5d:62:08:f3:20:57:81:e9:
                    8d:08:d7:73:53:75:45:22:bd:8b:ec:f4:f6:1b:5e:
                    35:28:aa:92:91:a1:12:e5:cb:f3:2a:cd:d0:d1:92:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:78:22:8A:EB:2A:39:CE:88:48:C2:C7:32:13:73:5C:7A:D5:B4:B1
            X509v3 Authority Key Identifier:
                keyid:DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:dd:06:34:80:25:f9:e0:8a:d8:4b:a6:f2:84:53:d5:e3:11:
         6a:1f:6a:af:c2:30:ff:f1:4e:b8:bb:35:f2:7d:7a:98:5e:16:
         09:53:40:79:e2:c8:84:58:bd:6e:83:3e:0d:a9:78:5f:b3:0c:
         9c:cf:0e:fe:65:16:bc:4d:dc:fe:3b:3b:65:1e:7f:5d:ce:f6:
         7b:c3:d5:06:9c:40:f4:84:5f:d7:b8:39:8c:f5:3f:7f:60:c9:
         c6:d3:ef:b2:96:f7:c4:c8:4c:82:19:f9:36:ae:49:7d:e2:db:
         0d:6d:74:eb:0d:13:42:6f:f4:af:a3:5d:be:49:05:44:98:2f:
         14:5b:2c:6c:39:99:a1:62:38:f4:66:08:9f:ea:1d:2c:cf:e5:
         a6:83:fd:65:9b:e2:5b:f9:41:f9:00:d6:c2:96:8c:1d:41:4c:
         73:05:c4:9d:85:57:8b:47:d6:1f:33:2e:f6:fa:1c:a6:2e:a0:
         68:5c:81:3e:bf:69:89:a8:1b:15:e0:92:50:d7:df:12:50:68:
         e8:c4:df:b1:84:7c:fb:fe:a7:83:90:c4:d7:bb:aa:a4:1b:88:
         d5:eb:00:93:ff:8b:ca:27:c2:c6:19:22:2a:73:28:75:a1:f6:
         49:49:a3:cc:de:8c:6d:9f:5d:3f:40:f8:8d:41:56:61:fc:5d:
         37:0e:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:05 2026 by rpki-client