Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          byypuKiUZI+oYNv4QLaKJ+T1QbmRVRKPlM7WUp3xQ/s=
Subject key identifier:   0C:87:9A:36:6C:38:A2:66:5C:44:BC:36:91:86:8A:EC:94:F3:A1:4F
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       0925
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          0924
Signing time:             Wed 29 Jul 2026 01:47:28 +0000
Manifest this update:     Wed 29 Jul 2026 01:47:27 +0000
Manifest next update:     Fri 31 Jul 2026 01:47:27 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: ocfy+TIZxWRzqphFVHhNNVoIBJQxyFOE80LA7VujYfY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Jul 29 01:47:27 2026 GMT
            Not After : Jul 31 01:47:27 2026 GMT
        Subject: CN=6a695bb0-cf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:dd:78:63:23:24:db:59:96:f8:09:0e:63:
                    bf:61:3b:06:03:f5:3f:cf:50:9c:b4:a4:5b:e3:38:
                    3e:fe:b2:cc:60:d7:38:bc:d0:02:d7:77:35:da:12:
                    6e:5f:82:5b:8d:48:f5:56:7c:25:0f:44:ab:7f:08:
                    2b:b1:a5:48:70:8b:ea:54:13:a3:40:7c:bc:4d:5a:
                    96:33:11:d7:e9:79:a3:9f:47:c7:94:8d:f6:ed:da:
                    98:7b:d9:c5:3e:09:57:3d:25:3c:b8:2d:44:2a:8b:
                    d8:bd:00:3e:c8:da:d4:ca:f2:9d:bf:74:9e:b1:b9:
                    88:f2:66:21:57:6d:16:25:3c:90:81:65:07:0e:b3:
                    21:31:8f:65:a7:9c:36:db:c1:2a:42:3e:59:82:55:
                    f8:99:e6:98:15:56:1b:72:7f:ba:25:14:4a:ae:70:
                    3a:c3:0f:62:29:08:be:1e:4f:68:17:be:b5:a0:26:
                    f4:7b:87:5b:e9:40:a1:c4:d7:27:00:64:cd:f4:28:
                    48:93:51:fd:21:5a:a4:fd:0a:5a:b1:62:59:4a:8c:
                    be:85:fc:3a:7a:62:aa:f9:a5:c1:ed:dc:4e:90:e4:
                    83:59:63:f7:5b:24:04:15:7b:6d:08:a1:ea:58:ef:
                    74:f4:ea:fb:01:6a:3e:da:8c:da:f4:bc:3f:0f:e5:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:87:9A:36:6C:38:A2:66:5C:44:BC:36:91:86:8A:EC:94:F3:A1:4F
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:80:cf:8e:90:53:e8:f5:46:6a:f7:1e:b1:41:0f:5c:af:10:
         fa:18:3f:9a:fb:b2:ce:66:13:bc:51:8d:38:9f:fd:15:6f:73:
         d2:5f:af:68:d6:6b:6e:76:af:9d:c4:63:e1:0f:5d:b3:e5:45:
         3f:ee:1e:62:73:89:34:97:54:55:c4:6d:55:1f:95:b4:34:dd:
         53:fd:7f:ee:53:64:96:bc:78:03:51:3b:68:a0:20:14:3a:6e:
         aa:e1:e9:24:8c:68:a1:20:26:36:af:d7:bb:aa:eb:69:ac:a8:
         7c:a7:16:e9:83:65:1c:54:19:ce:09:5f:13:90:b8:80:53:b7:
         38:b6:72:3f:0e:cb:65:a5:4a:d4:d9:b2:dd:97:2b:5a:5b:04:
         66:e8:7d:89:55:97:5a:fb:6d:8e:26:8b:13:39:dd:40:ac:71:
         a1:9a:d6:90:91:72:00:62:56:bf:49:cd:81:9d:c9:26:82:80:
         19:08:81:ca:e4:ba:c9:c0:4b:0d:c9:de:1e:8a:df:a8:b4:28:
         87:2a:40:5a:0d:cc:de:cb:8b:aa:ee:5d:66:4e:9b:4c:9f:55:
         80:ce:cf:0e:70:f4:d2:8b:7b:ba:e6:a3:dd:ca:8d:4b:d5:a3:
         7a:0e:af:bb:e9:09:ce:48:48:d9:7c:7e:b0:ad:16:b1:95:d2:
         bc:19:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:54:37 2026 by rpki-client