Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
File:                     4-72W1UWm_HGaNKpYbla8vKIf90.mft (raw, json)
Hash identifier:          ejijGk+QWII657aL8OivR5AbfZi6U9NQhzi71loEbQ4=
Subject key identifier:   4F:E4:59:98:D9:52:70:5E:74:43:F7:EA:FA:CE:F8:38:B2:99:E5:B0
Authority key identifier: E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD
Certificate issuer:       /CN=F36FE55FAF/serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
Manifest number:          60
Signing time:             Tue 28 Jul 2026 05:36:55 +0000
Manifest this update:     Tue 28 Jul 2026 05:36:54 +0000
Manifest next update:     Thu 30 Jul 2026 05:36:54 +0000
Files and hashes:         1: 4-72W1UWm_HGaNKpYbla8vKIf90.crl (hash: Ht3zm89iTUMUbLKS8RXy9QkJEvF3POyQvVJ2DOTw64s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE55FAF, serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
        Validity
            Not Before: Jul 28 05:36:54 2026 GMT
            Not After : Jul 30 05:36:54 2026 GMT
        Subject: CN=6a683ff7-5f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:20:31:ab:26:ba:4b:18:84:db:0c:55:01:4e:
                    d3:80:d7:f9:a3:b4:7f:e5:18:ae:4c:df:86:55:ef:
                    ca:52:ea:af:9b:23:09:69:9c:10:f1:ce:69:e7:c8:
                    29:7b:89:92:36:1f:18:ae:81:4e:11:a6:fa:4c:9f:
                    ca:6b:33:cc:59:24:70:4d:dd:30:5f:7d:37:06:cb:
                    0f:d5:29:7b:f0:88:b8:a4:4c:8a:43:f1:43:f2:0d:
                    99:4a:5c:6e:c5:00:ab:71:42:52:9d:74:c6:64:ba:
                    e6:84:e5:3b:06:09:91:7b:d9:57:dd:fa:81:d7:72:
                    3f:51:6a:3e:88:aa:ae:93:f8:c1:15:e1:39:eb:05:
                    51:fc:03:9c:5a:7b:39:36:55:db:86:1b:76:d4:d1:
                    76:fc:54:b0:60:9a:00:f5:e2:3d:7d:07:e1:f8:10:
                    ea:f2:f1:bd:18:36:e8:de:6b:ac:42:75:30:b3:52:
                    51:41:66:e5:34:b0:d0:b9:02:f1:6b:b2:1f:10:36:
                    b3:f1:b4:fa:7f:0c:f7:a7:e2:45:0b:cb:a0:bb:13:
                    b2:50:05:20:d3:cc:66:c8:24:e0:4d:6c:3a:23:2c:
                    65:31:8f:38:a9:b3:ab:d9:4c:e8:78:4e:4d:29:66:
                    5a:2e:d0:6d:e0:38:e4:0e:b1:2f:04:59:44:2b:d3:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:59:98:D9:52:70:5E:74:43:F7:EA:FA:CE:F8:38:B2:99:E5:B0
            X509v3 Authority Key Identifier:
                keyid:E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:ea:db:f0:83:ab:4e:d8:af:fc:d6:ba:b3:a5:4b:22:16:
         7c:fa:6d:d7:bc:e2:3d:30:cc:a8:2a:01:c7:b5:04:23:9b:6c:
         0c:0c:62:fe:b4:a5:71:eb:c7:ed:e0:27:ba:5d:f7:15:82:48:
         28:82:a4:33:8c:f9:89:df:9c:cc:1c:c5:06:56:15:4b:65:08:
         4c:d8:f2:7e:d6:28:ad:e9:7b:29:5e:d7:12:de:8d:5b:1a:9d:
         39:56:01:4b:34:40:14:58:65:ff:33:75:71:14:3f:18:b3:2c:
         48:d3:e3:c9:14:b0:04:a8:1a:76:b2:7a:8f:ca:42:a3:33:78:
         f1:f3:f0:5f:fe:dc:30:fe:d3:bf:69:07:aa:02:81:b3:f6:7c:
         e1:ff:95:36:d1:09:69:45:1e:7a:8b:0e:88:90:69:72:41:91:
         38:34:50:b6:84:7b:1f:4b:dd:62:1a:92:3e:f5:80:a0:52:50:
         84:7a:9d:69:2b:4c:0c:d0:f0:d2:43:38:c4:f6:f4:08:6c:47:
         f2:69:ca:33:6a:c5:d0:d4:17:ad:48:3b:ee:07:89:e9:b3:6e:
         40:b1:29:02:0b:88:72:d0:17:9a:e4:a9:f9:ee:36:06:27:ef:
         ba:99:5a:25:be:92:fa:ca:c4:ec:c4:5d:ef:c7:06:47:3e:bf:
         70:bb:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:27 2026 by rpki-client