Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          6TdSycS3OkDoLRT0ALt4+pOVbdWTITeBoeynpVhakjA=
Subject key identifier:   85:8B:D5:1D:C0:6A:B6:6C:02:5E:8B:58:2B:34:B3:1A:FD:07:42:2A
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       0305
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          0300
Signing time:             Tue 28 Jul 2026 04:20:09 +0000
Manifest this update:     Tue 28 Jul 2026 04:20:08 +0000
Manifest next update:     Thu 30 Jul 2026 04:20:08 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: iEE0o5y0sDjxXfbcqQUfJpQCbeSK9GsW0OfIfltZoFM=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
                          3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Jul 28 04:20:08 2026 GMT
            Not After : Jul 30 04:20:08 2026 GMT
        Subject: CN=6a682df9-7c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:06:b6:51:75:4c:a1:9b:57:ed:d5:d2:ef:
                    5d:3e:52:75:b8:65:c7:c6:c5:1c:fa:bd:de:e0:5c:
                    50:43:7f:b7:35:e0:c8:24:8e:9e:e4:bf:6e:12:d4:
                    e2:df:bd:95:01:70:8a:a0:0d:c6:f4:55:4a:ad:f2:
                    1c:3d:54:95:8f:07:b6:7d:aa:d1:47:a5:18:50:1d:
                    70:81:38:da:5a:cc:62:c9:64:a5:a6:16:f6:d1:f8:
                    8a:ca:ab:56:19:45:b9:7d:f5:6f:dc:75:bd:34:f2:
                    ee:04:d2:f9:ab:18:f4:cb:0c:d8:fb:c7:67:0f:85:
                    f5:09:61:e4:d4:46:d9:d2:16:51:1e:17:23:d8:a9:
                    0c:0d:14:ef:4d:78:74:a2:91:a6:cb:5b:23:74:bc:
                    87:58:33:8d:37:73:63:3f:5c:ec:17:ce:ab:46:fb:
                    e6:08:83:7c:b5:5d:35:76:5f:33:a4:9a:a2:8a:aa:
                    20:f6:d9:31:7e:46:39:e9:24:aa:96:dd:61:b0:5b:
                    4c:22:31:9d:b1:b5:24:e5:4c:62:bf:27:0c:ed:cc:
                    c6:87:3a:de:a9:67:58:4a:65:07:e4:50:72:ac:8b:
                    1a:4f:bf:eb:10:6a:3e:e9:05:25:7f:97:cb:ba:4b:
                    87:a0:37:db:05:47:21:46:6e:d7:fa:5a:a6:ba:bf:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8B:D5:1D:C0:6A:B6:6C:02:5E:8B:58:2B:34:B3:1A:FD:07:42:2A
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:89:b5:af:50:47:9e:5b:61:be:f4:ad:4e:a8:73:3b:3c:
         b7:72:39:d0:f1:3f:2c:aa:73:9c:30:92:55:fa:91:77:53:4b:
         2a:9a:2d:8e:a8:2f:ff:00:35:78:54:0e:0a:1f:40:28:d5:4f:
         bd:bc:e4:3d:d3:61:a6:7a:83:1e:ec:ed:d9:6c:cd:25:e3:bc:
         85:7a:b3:5e:b3:00:fc:f4:dc:c4:ab:bb:8a:29:28:07:4f:94:
         1a:7c:30:a3:15:ad:1e:ec:7a:16:a3:f7:b2:a8:f4:45:40:96:
         f3:fc:61:0c:d3:13:5e:d5:50:1e:06:1c:f0:0f:85:f2:1e:fc:
         02:81:fb:f7:4d:a0:ad:7b:8b:b0:c5:92:86:81:bf:22:f1:28:
         6f:36:4c:43:45:14:2e:52:3f:d9:08:fd:c5:29:b0:eb:65:d0:
         3e:d2:8b:c7:20:8d:a3:6d:d9:53:b7:d7:1c:4c:24:3d:13:ff:
         57:10:c3:56:d0:14:d5:7b:34:62:75:a9:52:7a:1f:c0:e8:cf:
         e3:eb:6c:d2:8c:1b:20:10:ff:1d:12:99:48:3e:a9:e1:5f:9d:
         09:4e:5b:43:81:7f:14:af:14:29:cd:90:fb:41:1e:86:90:42:
         7e:62:fe:58:e1:e9:7a:3c:7e:45:d0:bb:d7:c8:4d:07:6f:76:
         e6:b4:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:13 2026 by rpki-client