Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File:                     Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier:          CCOBILq1c+Hv51r79RFuI/g9WAOdnRPoIHtzdo7KlNw=
Subject key identifier:   76:E2:A1:83:4F:B5:5B:3C:CB:E6:2A:07:2A:01:4D:4F:A4:2A:8F:BB
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer:       /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial:       062A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number:          0620
Signing time:             Tue 28 Jul 2026 02:47:22 +0000
Manifest this update:     Tue 28 Jul 2026 02:47:22 +0000
Manifest next update:     Thu 30 Jul 2026 02:47:22 +0000
Files and hashes:         1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: UpK/A9ISGFL+IWUlHEIUKMd8s4RwrpOecbEvuiKUi0U=)
                          2: B20CCB9E797911F1826E3FBFCE1D38B0.roa (hash: jFtBWD8b4/pcM12zi7gI3mC1xmb0s5cfDLKXIlCYkhg=)
                          3: 0960CA42BA3211F0A0CE52AFDAE4EC9C.roa (hash: /hSkccke2QwuiXgH6leYqgSqL0lMDfWuf3RDrn5+nSY=)
                          4: A27E602082FF11EE8205C9864AD9E6FC.roa (hash: pv58iSJoNZfLF15J4awhKwcNzaZSo1gyn9KUtGLQf7U=)
                          5: 811B0F4682FF11EEAC9619864AD9E6FC.roa (hash: pPHAUOTt22hBeaB17IRburRyPCm6dJpRxd6TfErC+xI=)
                          6: 40750D8E82FF11EEA9EF75854AD9E6FC.roa (hash: IfBtUMkbvyisKLp/KIr1N58P5Vt8K4q1zYyTPAWX8DY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 02:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
        Validity
            Not Before: Jul 28 02:47:22 2026 GMT
            Not After : Jul 30 02:47:22 2026 GMT
        Subject: CN=6a68183a-cb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:2b:f8:46:d5:a4:66:56:d5:0e:22:a2:41:
                    3c:53:ca:3a:60:ec:96:9f:ef:90:fb:b4:ca:7e:95:
                    96:f4:7d:87:f8:11:f2:45:34:40:99:ad:64:72:c3:
                    39:6a:32:01:7f:7d:0d:6c:6e:98:b1:a9:74:fb:96:
                    fb:e1:e2:b4:a4:f8:e1:bb:fa:07:be:52:66:66:90:
                    c9:d4:93:6d:79:9b:6d:22:e9:eb:54:34:fd:28:b1:
                    bb:40:49:68:02:38:68:a4:c3:eb:23:10:d2:26:44:
                    b1:71:3c:a1:fa:44:ca:cc:13:0f:cb:4b:c8:d6:d2:
                    48:ac:11:e1:8f:c0:e2:66:94:33:30:d9:11:c7:c0:
                    4e:2e:dc:66:80:94:ef:b2:f0:ee:45:14:d3:1a:22:
                    2d:45:6d:c9:36:9a:46:3b:65:51:e7:9f:6f:65:fc:
                    6e:df:af:3b:b5:f1:20:8d:97:53:bb:02:be:6f:23:
                    58:c2:dd:f3:98:2f:63:af:b3:13:3a:1b:6f:06:ae:
                    71:62:2c:05:98:f0:10:69:d0:e2:71:b7:53:91:a5:
                    41:1b:8e:89:1f:83:f4:a8:98:60:f6:8b:c9:c9:7d:
                    89:33:0d:14:29:f4:8a:7d:07:d3:da:b2:4c:09:d9:
                    74:5c:32:82:86:19:73:62:fd:a7:60:32:3c:73:9f:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:A1:83:4F:B5:5B:3C:CB:E6:2A:07:2A:01:4D:4F:A4:2A:8F:BB
            X509v3 Authority Key Identifier:
                keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:97:17:f6:52:39:13:9a:f2:a4:25:d2:24:4f:ce:25:55:d5:
         63:eb:13:8b:6f:15:2b:9a:53:be:18:82:95:fe:04:a7:2c:cf:
         f4:e9:ee:fa:b1:c8:7a:86:1b:6d:16:9e:52:56:99:ea:b5:27:
         dc:b8:2f:ce:4a:8b:9e:a7:66:0d:f4:36:96:b5:9e:35:24:62:
         19:35:06:a1:59:ce:52:98:95:3c:53:df:4c:4d:e0:5f:c4:d1:
         36:9d:21:cc:ce:f7:e2:cb:26:57:5d:a2:ae:d2:cf:4d:46:00:
         b4:b0:9f:96:00:ea:a5:7c:88:9b:d6:e0:a1:5c:23:27:a1:b1:
         c1:95:c4:9b:31:eb:26:57:dd:41:dc:5e:f7:24:7a:fd:b7:bf:
         04:22:f8:5d:ab:a3:5b:e8:fe:b6:bd:a2:59:6d:eb:3c:59:19:
         56:19:1f:b3:78:d6:1f:30:e8:34:2e:fc:4e:50:ae:0b:c7:35:
         35:bd:52:ea:56:b6:af:c8:11:f3:25:aa:3f:84:02:d7:6a:41:
         f9:d2:3e:39:4e:99:0a:63:f9:2b:90:33:ac:62:3f:e9:26:5c:
         33:f3:46:62:01:80:da:1b:26:2b:94:b3:44:e2:3d:6a:94:92:
         f3:ec:66:e9:7f:aa:8b:ab:a5:36:14:28:35:90:b2:4f:fa:9e:
         90:6c:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:34 2026 by rpki-client