Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          tYtZVIPdYik8AAHpnM6ns8iaUdb4/thLPwvdcSyRaAI=
Subject key identifier:   90:D7:8B:94:16:6A:DC:66:62:E9:E1:32:12:58:64:63:E0:FA:E8:40
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0F5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0F59
Signing time:             Tue 28 Jul 2026 01:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 01:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:36 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: IJbjBm15dZsXIjxCXJWZIRw3nCCZC4/ypw7SH9OHy9M=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3932 (0xf5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: Jul 28 01:00:36 2026 GMT
            Not After : Jul 30 01:00:36 2026 GMT
        Subject: CN=6a67ff35-9eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:7b:f6:d7:25:d7:7b:6d:90:10:44:f8:74:
                    05:a1:8d:39:30:8f:0e:84:e8:f3:bc:f2:28:bf:ae:
                    9a:0c:12:47:8e:98:2f:c0:85:da:df:42:63:31:a2:
                    d1:32:96:58:34:27:7e:df:a2:be:31:f9:bd:77:c5:
                    3b:64:db:ed:f6:2f:33:d8:bd:ee:61:36:7c:61:33:
                    33:28:f8:b8:7a:8a:77:34:a1:d7:65:bf:47:03:a5:
                    4d:1e:da:d2:0f:4c:e5:9a:54:08:d4:13:a4:34:20:
                    40:42:22:d4:7a:18:c7:49:58:a1:7f:33:c7:17:e5:
                    24:d0:a3:c2:4c:ca:23:b8:fe:12:12:a0:fd:1a:8f:
                    58:4b:c3:96:1e:29:ad:e7:fd:97:cc:cb:b7:81:bd:
                    f8:db:8e:e1:98:0e:33:5d:a0:c0:7c:53:0a:a8:e4:
                    95:f5:68:04:bb:49:c9:41:72:41:ef:c6:d2:e6:18:
                    1d:b7:40:14:01:ce:57:8e:34:89:e5:f8:d5:ad:9d:
                    a8:98:e4:9b:8d:31:95:ff:65:5f:eb:5d:a2:fc:11:
                    a9:2e:d5:5d:a5:8d:3b:e6:ec:84:13:c2:56:fd:1e:
                    bc:36:ce:29:65:7a:96:d7:14:23:55:d3:83:da:2c:
                    55:a7:4d:12:83:cd:3c:80:34:de:1d:fa:b6:02:03:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D7:8B:94:16:6A:DC:66:62:E9:E1:32:12:58:64:63:E0:FA:E8:40
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:b4:81:82:7d:9e:5d:38:e7:d8:05:f4:ce:24:7e:c1:43:
         ba:c7:9b:e8:98:2b:e9:ba:45:9e:54:a6:b3:f3:b6:e1:4b:f7:
         e3:00:f4:1e:e0:d8:68:b9:26:a3:6d:0e:6a:6b:ef:43:ac:9b:
         d2:e1:79:30:9a:14:71:1b:df:41:9f:f7:22:6b:3c:de:a3:ae:
         83:db:b6:6f:23:a0:12:8b:35:19:4d:4a:c7:ce:7e:2c:08:b5:
         a7:2a:8a:ce:84:eb:db:ea:35:0c:15:75:61:a1:a4:ed:1e:5b:
         ac:fd:a0:29:3a:ae:21:fd:c5:43:16:e2:0a:34:b6:8b:06:34:
         14:17:24:3c:13:5a:ea:b1:63:3f:38:ff:2f:5b:0e:0b:bd:4e:
         7a:c5:7d:77:db:b2:66:be:4e:4e:ed:d1:29:30:06:08:6f:37:
         17:41:74:d3:2b:51:b6:3d:d5:98:11:c9:34:2a:22:1b:f2:ff:
         00:42:09:6b:1e:63:94:8c:aa:8a:d8:69:09:c3:e2:d4:ee:9c:
         ac:fc:68:10:49:82:66:e7:8a:4e:58:32:74:d5:3d:80:15:32:
         98:31:25:d6:e3:e0:85:2d:03:42:8b:e4:58:ba:c5:79:e8:c2:
         5d:0f:ed:d3:f6:2c:f9:84:58:47:31:de:c6:1f:1f:77:8e:13:
         01:1e:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:05 2026 by rpki-client