Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
File:                     I5ojlaIixGtom4OhTUvZ5CL40XE.mft (raw, json)
Hash identifier:          l//CErY3v68sufdXtHuhLOIozHLeKSLkHdq1vKikFek=
Subject key identifier:   0F:0A:3A:FF:C3:39:E4:12:15:57:4C:4A:76:DF:D9:CE:6F:22:78:65
Authority key identifier: 23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71
Certificate issuer:       /CN=F361033EAF/serialNumber=239A2395A222C46B689B83A14D4BD9E422F8D171
Certificate serial:       42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
Manifest number:          40
Signing time:             Sun 21 Jun 2026 05:36:19 +0000
Manifest this update:     Sun 21 Jun 2026 05:36:18 +0000
Manifest next update:     Tue 23 Jun 2026 05:36:18 +0000
Files and hashes:         1: I5ojlaIixGtom4OhTUvZ5CL40XE.crl (hash: jWN/ZahL5ADRPTUUP6ZSvkSZcSk1AHbSWmZ4Fagv6Yo=)
                          2: 6EB3E9463D8211F1BFB367BBCE1D38B0.roa (hash: JDQw1SItmn8dJ5vJZ59409x/u+m2Azdm6fUPsmf8m6Y=)
                          3: BA0E425E3E3311F196C104F8CE1D38B0.roa (hash: u7+fqqHQnG+ld2TX7zf+J5qSkRtZWaLPDkz+BXSHa58=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361033EAF, serialNumber=239A2395A222C46B689B83A14D4BD9E422F8D171
        Validity
            Not Before: Jun 21 05:36:18 2026 GMT
            Not After : Jun 23 05:36:18 2026 GMT
        Subject: CN=6a377852-640f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:14:af:c1:c2:8a:2b:d4:29:73:2e:98:7d:
                    89:ad:41:87:74:21:48:7e:a4:e0:fe:fb:f0:46:16:
                    4f:c6:28:e5:16:bd:42:1e:55:68:c6:a1:6b:7a:09:
                    29:68:25:3a:f8:15:1e:45:1b:f3:5f:60:c4:19:17:
                    9a:76:65:e1:1a:69:3f:b6:22:9b:40:46:3c:6a:99:
                    21:86:1a:e4:2f:d7:19:2c:b3:35:8c:35:3d:59:bc:
                    1e:d4:a7:11:5c:e9:be:26:44:ac:c5:16:74:29:67:
                    18:5f:db:ab:02:04:e3:b6:74:c1:a2:d5:b0:37:aa:
                    7e:ac:0c:09:8e:d7:7f:92:37:36:fb:db:f4:2f:cd:
                    b5:d4:a4:c7:21:1d:92:a1:14:b5:ca:9d:cd:31:1b:
                    55:8e:e7:51:07:e1:b7:e8:95:67:10:2e:5b:c4:35:
                    55:ac:88:b9:eb:1d:28:b0:36:49:8e:62:2a:a2:e6:
                    2d:76:82:6e:6e:a1:6c:76:5f:7d:8c:20:56:29:1a:
                    32:e5:0b:79:49:31:60:0e:09:9f:3b:27:2e:7c:b7:
                    d3:90:53:54:c7:a8:df:41:03:96:da:0d:53:e7:07:
                    01:82:eb:07:24:80:41:9b:c4:64:c5:8d:71:3a:ea:
                    af:74:77:c4:ac:45:11:90:7c:48:7a:45:c6:7a:cc:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0A:3A:FF:C3:39:E4:12:15:57:4C:4A:76:DF:D9:CE:6F:22:78:65
            X509v3 Authority Key Identifier:
                keyid:23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:70:b3:b0:76:dc:f7:a9:7b:16:ac:95:48:68:fa:e3:61:6e:
         cd:6a:12:54:40:c3:09:db:71:13:9f:29:52:c1:ca:d0:4c:3c:
         ea:f2:7d:df:7b:4f:96:43:d5:5d:15:a8:bd:7c:ad:2b:e4:96:
         7d:60:8f:c6:df:8e:d4:b6:15:8b:5a:6f:87:fa:3a:f6:a9:4c:
         3d:b0:56:49:dd:10:2b:69:5c:e6:37:c6:9c:fe:25:4d:f0:4a:
         00:7a:31:9a:7a:9b:2c:ff:a9:f3:74:e8:e5:18:35:05:b7:70:
         36:e0:ab:32:fc:a6:a6:28:93:b9:22:7d:0f:bc:4e:75:08:c4:
         f6:51:d8:ca:17:9f:1a:67:c0:1f:b9:92:b2:7b:a8:54:62:72:
         52:0e:79:4b:f5:47:7c:65:59:60:76:7a:f9:9e:60:27:cf:80:
         e0:6e:e9:1f:26:38:9a:f1:e6:32:0e:7b:19:6f:32:fd:08:3f:
         fa:13:9a:79:30:bb:65:e8:eb:fe:aa:3c:71:5a:9d:eb:87:47:
         7a:4c:dc:9f:eb:7a:6a:de:59:71:df:4e:87:34:f3:a5:b8:98:
         29:22:f8:28:4d:ed:21:fa:2c:82:09:1b:27:f7:03:07:d0:ce:
         22:2e:21:3e:52:02:b2:20:c0:ce:eb:2f:00:27:14:ce:f3:27:
         03:70:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:39:55 2026 by rpki-client