Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          dys+jrfcAszfn58gK+OYP3kzNlvBgpWmeOph1oGhOms=
Subject key identifier:   2F:DE:50:ED:5C:ED:9F:37:AD:63:74:B7:CD:59:9C:07:B9:17:96:43
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       02CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          02CA
Signing time:             Tue 28 Jul 2026 04:27:28 +0000
Manifest this update:     Tue 28 Jul 2026 04:27:28 +0000
Manifest next update:     Thu 30 Jul 2026 04:27:28 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: +6xEUak+wr9m1bu6lPV8W6miZu6OtHa/Uo8XJR7nrwc=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Jul 28 04:27:28 2026 GMT
            Not After : Jul 30 04:27:28 2026 GMT
        Subject: CN=6a682fb0-6091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:44:77:b0:0c:d1:8b:7f:19:03:3e:25:b2:
                    5a:26:e6:e0:ee:48:40:1b:39:cc:5a:d1:9c:13:49:
                    53:b4:5c:5d:7f:a0:aa:a7:7a:e8:62:e4:b1:2e:70:
                    fb:22:f2:21:ae:22:a7:3a:78:9b:ab:6f:be:69:92:
                    33:72:d6:68:c4:b1:c5:3a:5b:b5:d3:5b:ea:c9:90:
                    ac:f0:a2:90:c7:f7:d3:13:b3:b1:cb:c7:ae:cb:e1:
                    2b:8f:d8:c1:93:23:0d:0a:e3:02:ec:47:c5:ee:07:
                    69:57:c0:99:93:59:04:2e:80:e1:75:c4:e9:4e:96:
                    55:c1:e7:9b:ef:e5:41:72:9c:59:55:fe:fd:c3:4b:
                    90:bf:e6:fe:ba:4e:90:1c:a2:65:09:6c:68:fd:5d:
                    a5:44:54:68:f1:85:c0:7d:f9:c2:5c:ee:73:11:48:
                    fc:e4:35:a7:d8:85:b9:9e:8e:d9:c9:0b:d4:c8:5d:
                    fc:e1:c3:bd:04:63:66:1b:92:30:d8:5c:70:81:21:
                    7b:3d:6c:b2:8b:1e:88:70:1f:21:6e:cc:4e:03:5d:
                    63:84:82:57:16:1a:ed:84:a8:6e:ca:37:03:f8:b3:
                    23:a9:27:db:43:28:b2:74:0f:b9:ac:e6:a3:ef:a2:
                    10:58:66:f6:78:3c:e9:88:6d:89:72:3e:ba:2f:40:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:50:ED:5C:ED:9F:37:AD:63:74:B7:CD:59:9C:07:B9:17:96:43
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:be:c3:11:97:2e:db:c1:80:79:6b:ea:d0:37:0c:8c:68:29:
         47:86:43:0c:67:a8:11:6d:ee:70:03:a9:1d:e8:7a:75:dc:7c:
         99:c7:a2:e8:a8:8f:ee:fb:5f:c9:34:69:c1:d7:8e:97:f6:94:
         6b:23:5d:4c:b0:81:3e:fc:69:4e:91:46:f2:af:ab:1d:5d:fd:
         32:b4:b6:c3:dc:c6:49:57:42:cd:fe:15:a0:f6:ef:04:e2:c1:
         32:b1:36:4d:e7:8b:57:15:b4:de:e7:76:21:cd:25:16:a5:50:
         2e:38:b9:7d:0e:c4:b1:98:04:6e:70:54:a8:7a:ee:a0:b6:3a:
         88:a5:ee:3d:ae:7a:de:b4:52:95:06:b0:a1:42:95:53:cc:91:
         58:2d:f0:b3:18:01:d5:b8:03:aa:38:41:7c:f6:c4:bb:d4:57:
         93:22:1e:80:15:84:43:90:d2:75:d7:3b:93:4a:f4:e7:bb:ce:
         12:ad:61:1c:a4:03:4d:fd:64:6c:4f:02:ef:a5:3a:26:3e:24:
         99:c0:ca:97:01:54:f3:83:62:38:ca:7a:88:63:70:9e:23:30:
         dc:8d:96:aa:d2:4d:7e:a7:38:63:f0:03:aa:6b:c6:50:76:45:
         7c:67:d6:00:23:2e:44:0e:ce:cf:47:81:32:9f:c9:f4:fe:40:
         55:b8:66:ec
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTY4MDJBRjExMC8GA1UEBRMoNjhCRDM0M0MxRDlGNzA0NkM2MkY5NTVGODY3MzE5
RDg1MkIxNEExMDAeFw0yNjA3MjgwNDI3MjhaFw0yNjA3MzAwNDI3MjhaMBgxFjAU
BgNVBAMTDTZhNjgyZmIwLTYwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9/kR3sAzRi38ZAz4lslom5uDuSEAbOcxa0ZwTSVO0XF1/oKqneuhi5LEu
cPsi8iGuIqc6eJurb75pkjNy1mjEscU6W7XTW+rJkKzwopDH99MTs7HLx67L4SuP
2MGTIw0K4wLsR8XuB2lXwJmTWQQugOF1xOlOllXB55vv5UFynFlV/v3DS5C/5v66
TpAcomUJbGj9XaVEVGjxhcB9+cJc7nMRSPzkNafYhbmejtnJC9TIXfzhw70EY2Yb
kjDYXHCBIXs9bLKLHohwHyFuzE4DXWOEglcWGu2EqG7KNwP4syOpJ9tDKLJ0D7ms
5qPvohBYZvZ4POmIbYlyProvQO91AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUL95Q
7VztnzetY3S3zVmcB7kXlkMwHwYDVR0jBBgwFoAUaL00PB2fcEbGL5VfhnMZ2FKx
ShAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2ODAyL0Y2QUE2RUU4NjUzRDExRUY4NDRCMjY4RTc2MkU5NTFBL2FMMDBQ
QjJmY0ViR0w1VmZobk1aMkZLeFNoQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FMMDBQQjJmY0ViR0w1VmZobk1aMkZLeFNoQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTY4MDIvRjZBQTZFRTg2NTNEMTFFRjg0NEIyNjhFNzYy
RTk1MUEvYUwwMFBCMmZjRWJHTDVWZmhuTVoyRkt4U2hBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASvsMRly7bwYB5a+rQNwyMaClHhkMM
Z6gRbe5wA6kd6Hp13HyZx6LoqI/u+1/JNGnB146X9pRrI11MsIE+/GlOkUbyr6sd
Xf0ytLbD3MZJV0LN/hWg9u8E4sEysTZN54tXFbTe53YhzSUWpVAuOLl9DsSxmARu
cFSoeu6gtjqIpe49rnretFKVBrChQpVTzJFYLfCzGAHVuAOqOEF89sS71FeTIh6A
FYRDkNJ11zuTSvTnu84SrWEcpANN/WRsTwLvpTomPiSZwMqXAVTzg2I4ynqIY3Ce
IzDcjZaq0k1+pzhj8AOqa8ZQdkV8Z9YAIy5EDs7PR4Eyn8n0/kBVuGbs
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:28 2026 by rpki-client