Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          bz0NcQzEvImZi26QrDSi2u6XLF1jbXuMgcHY3qnDTD4=
Subject key identifier:   F9:0C:24:44:D6:D4:98:49:CB:2E:32:91:FE:06:F6:36:19:19:56:37
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       0302
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          0301
Signing time:             Tue 28 Jul 2026 04:17:43 +0000
Manifest this update:     Tue 28 Jul 2026 04:17:42 +0000
Manifest next update:     Thu 30 Jul 2026 04:17:42 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: pLk3eu3XDh5Sqx7S/Lu9b5MEldLiZ7cmuwcxIUtJl1U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770 (0x302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Jul 28 04:17:42 2026 GMT
            Not After : Jul 30 04:17:42 2026 GMT
        Subject: CN=6a682d67-c958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:64:3f:22:76:d9:55:84:57:bc:e3:47:37:
                    91:74:bd:2a:fe:8c:72:24:80:a6:06:bb:85:77:7c:
                    03:1e:1f:6e:46:f5:55:be:e5:5d:43:7e:af:9c:8e:
                    e9:11:11:31:26:14:df:03:17:fd:9a:36:e8:f7:78:
                    15:ca:7b:e6:51:e4:35:3c:1e:3b:81:20:ea:c3:2e:
                    9e:c2:b2:c3:c6:bb:46:e4:e6:ce:c0:93:45:31:0c:
                    64:96:e6:ce:c2:ca:a5:8e:e0:d7:45:28:b3:e2:3a:
                    cf:bb:76:76:11:cd:85:fc:9f:71:88:88:d0:10:e4:
                    39:d6:95:31:e1:da:50:1c:24:c8:73:a7:07:86:79:
                    b5:23:99:6a:cc:a1:09:de:12:29:0a:03:aa:97:25:
                    5e:a0:12:45:14:b0:92:2d:92:74:4f:3a:09:dd:c4:
                    9a:27:7d:62:d1:3d:28:15:5b:72:05:98:84:30:06:
                    ff:07:6d:a0:30:ca:94:5a:b6:f6:fc:05:ac:5d:94:
                    fa:09:ab:f5:dd:07:0b:a6:d3:38:68:6d:e3:21:c7:
                    cd:57:f7:3f:8b:68:2e:a0:2d:2b:6e:8d:33:4a:f1:
                    81:88:a8:78:c9:77:5f:5f:07:ba:27:66:f8:84:74:
                    db:35:90:61:12:46:fd:82:6a:bc:cc:58:61:2e:d3:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0C:24:44:D6:D4:98:49:CB:2E:32:91:FE:06:F6:36:19:19:56:37
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f5:0f:fa:c3:da:0c:31:e8:68:89:12:75:e6:d3:00:ba:0a:
         d1:5b:e0:45:85:b1:25:88:4c:0d:0a:a4:3e:3d:44:29:cb:21:
         c5:bb:f5:12:d5:09:71:55:72:3a:0a:29:d0:3d:31:6b:ce:f6:
         cc:f3:5f:e7:80:9b:02:61:01:7d:6b:7b:a8:c2:c6:5f:87:4c:
         42:1a:55:26:75:97:49:a5:1d:38:8b:e2:24:e5:6c:a8:dc:3f:
         45:55:c3:22:6b:50:0b:b4:06:4b:09:a9:a5:3f:95:1c:6b:be:
         68:8d:0f:dd:1c:6f:a9:32:58:a7:30:61:ff:fd:0c:3d:87:8a:
         a5:12:60:14:43:e8:37:b2:40:c5:df:2d:8d:e5:cc:e5:31:02:
         c2:26:3b:aa:97:b7:ee:3a:d1:83:13:2a:8b:31:95:f0:50:e6:
         a5:e8:77:96:78:44:30:20:b0:08:f5:6f:09:07:3d:3a:bc:c1:
         be:8e:05:20:96:4e:30:79:63:36:ae:18:48:19:6c:68:16:b8:
         4a:7d:d0:7f:bb:33:66:a0:aa:72:4b:84:c6:44:b8:60:96:47:
         66:e0:e5:5a:13:7a:e3:28:d9:22:b6:ae:21:33:9e:fa:a5:4a:
         f5:7f:ef:68:f4:0a:ff:20:59:47:8e:2e:23:e5:d6:56:5d:55:
         8d:27:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:19:33 2026 by rpki-client