Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File:                     iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier:          Q89VScT27vMdQnYRQbp3Nuy+jL/yUz9ZB+M5Fi5VTQ8=
Subject key identifier:   B6:51:DE:66:A5:E4:17:C5:CB:BD:85:9E:55:84:D8:E4:8D:EB:18:AC
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer:       /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial:       0FD8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number:          0FD6
Signing time:             Tue 28 Jul 2026 00:56:53 +0000
Manifest this update:     Tue 28 Jul 2026 00:56:52 +0000
Manifest next update:     Thu 30 Jul 2026 00:56:52 +0000
Files and hashes:         1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: nk/sl6DDm9gDkAtOeXML033aUA/JTt4Qs2/MJkgrfxs=)
                          2: D1595E92479F11F1955B4AE8CE1D38B0.roa (hash: rIbLa5rpV4WAj/sqUqpq18W5uZz1OXNKu6ZwE1OKxqg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4056 (0xfd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AF, serialNumber=895527C77E201446673090F081648F186127B1BA
        Validity
            Not Before: Jul 28 00:56:52 2026 GMT
            Not After : Jul 30 00:56:52 2026 GMT
        Subject: CN=6a67fe55-74ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:80:b0:93:c6:5e:be:b0:a6:e7:1f:a0:82:71:
                    7a:af:9a:34:05:3e:5f:25:29:ed:00:de:2d:2e:d5:
                    22:38:b0:e4:12:ea:f6:e3:e3:c4:b2:77:1a:3c:85:
                    38:65:15:6f:ff:92:77:41:6c:14:91:41:7f:bd:75:
                    09:49:9e:73:3a:cd:bb:cc:77:84:4c:05:4a:16:3f:
                    eb:fd:d5:42:7d:f4:ef:e6:d0:65:c1:44:f2:50:e5:
                    85:5e:d7:b9:f8:34:43:39:63:95:cd:4a:d2:6d:65:
                    7f:d0:6b:c6:1b:6b:37:bf:b7:c4:bc:e6:50:3a:79:
                    49:a9:4b:20:1e:b0:51:cd:b4:b2:45:cc:88:9a:b5:
                    bb:ae:39:de:e9:3f:8f:0b:20:62:a3:81:aa:1f:51:
                    a2:a4:2e:35:76:40:19:92:55:c3:19:ac:20:af:fa:
                    a4:39:6e:36:de:3d:1b:8b:39:96:45:8d:01:18:0d:
                    50:ae:fb:59:93:96:90:51:b8:2f:96:4b:ee:4e:5d:
                    15:b3:3d:ad:ec:de:5d:97:19:60:2e:18:aa:8e:9a:
                    1c:81:c8:62:21:4b:92:1e:53:63:36:97:71:fd:f2:
                    51:fe:0d:19:96:99:41:75:57:c9:7b:cc:a9:b5:56:
                    5e:c2:7a:cb:a1:52:79:9b:47:f1:92:7a:06:a6:4b:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:51:DE:66:A5:E4:17:C5:CB:BD:85:9E:55:84:D8:E4:8D:EB:18:AC
            X509v3 Authority Key Identifier:
                keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:02:81:e1:67:fa:0d:72:ef:a7:18:a1:40:46:02:99:6c:e6:
         12:83:9c:1f:05:33:7a:0e:f8:32:9b:b4:4c:85:d0:ef:4a:19:
         13:42:74:b2:4c:e4:2f:40:01:c9:26:af:0e:8a:74:cf:e3:bf:
         5b:8d:a1:ea:79:cf:e9:02:10:f0:2e:f1:c5:92:b7:87:18:70:
         f5:90:a4:71:f4:93:6a:93:74:ff:a8:61:29:3f:90:7a:b9:74:
         14:fb:df:19:7c:d8:e7:72:80:94:5f:3c:f3:41:5d:7b:ec:3d:
         ca:5c:f1:14:a1:c8:68:55:b4:80:36:59:1e:d3:cd:b5:e9:6b:
         b5:00:30:9a:81:3a:4b:38:f0:5d:9a:40:37:fb:f5:91:6c:b7:
         69:ab:df:f0:f7:16:e9:31:44:59:bc:db:b7:dd:2e:53:74:19:
         68:9e:d8:3a:24:2a:1f:93:e8:a0:69:af:ad:ed:3c:22:ba:da:
         36:79:c8:30:74:78:f4:2e:c7:0b:c3:4b:d1:77:9f:13:49:67:
         25:78:ef:22:a2:92:be:b5:8b:c5:d7:3f:3a:c8:e6:98:0a:99:
         6e:73:ea:5e:1f:8b:c2:64:de:26:58:85:7d:68:9a:f1:6e:0a:
         4c:a6:b7:13:dc:22:d6:0e:4d:14:00:22:42:8d:dd:85:3b:1c:
         cd:f7:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:47 2026 by rpki-client