Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          8Zp0jdZWPrSXcUVgMiA+8eTd9DNbbpuc16IcmOQcdlA=
Subject key identifier:   AB:DC:1E:A4:F1:9C:F1:7F:7B:D5:12:A1:61:82:3E:08:A2:89:A7:D1
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       0393
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          0392
Signing time:             Thu 06 Aug 2026 04:04:24 +0000
Manifest this update:     Thu 06 Aug 2026 04:04:24 +0000
Manifest next update:     Sat 08 Aug 2026 04:04:24 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: ew+BYD5A9RiEGP56zayuopKfup40G/Fe26TRNDLg27s=)
                          2: 698B22BAB0E011F098883C87DAE4EC9C.roa (hash: 5UZtU7DBbaKMgey3XqLzKXM826/jRqDSRDPI7cDwmOY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Aug  6 04:04:24 2026 GMT
            Not After : Aug  8 04:04:24 2026 GMT
        Subject: CN=6a7407c8-6eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:81:d5:29:d1:97:8e:bc:10:e6:a8:33:40:
                    0d:a4:3b:7d:85:0b:bc:a7:24:a5:6e:8b:17:c0:9f:
                    b0:c7:8f:58:d6:81:13:ce:b5:e3:6f:ed:8c:86:00:
                    47:71:bf:d7:46:e7:13:68:34:43:49:c8:55:f5:19:
                    0d:76:36:c5:44:ac:52:c5:ea:dc:4d:35:82:2d:a5:
                    1f:52:ee:52:a5:da:7c:68:92:0c:29:7b:ea:8d:1b:
                    a8:55:ec:81:c5:d1:d5:f6:ce:c0:9c:63:b1:87:e9:
                    88:4a:bf:1d:e0:f4:60:b5:4b:a7:a1:c4:ab:0b:3a:
                    2e:61:36:c8:f6:98:e7:3c:5b:38:8c:b3:b3:ce:02:
                    f2:36:cf:38:69:5e:dc:40:fa:44:fc:c3:63:71:74:
                    80:8d:65:e2:ed:9e:16:80:8e:41:af:0c:2d:69:ae:
                    83:64:bc:91:7f:d3:30:00:b6:94:65:5b:33:61:e6:
                    b9:6c:4b:59:c1:65:aa:14:c3:6b:4e:85:5c:ef:a7:
                    ac:f2:a7:2f:20:83:62:b2:16:3d:f0:7a:35:d3:32:
                    6f:7e:2a:17:51:cb:70:77:f0:04:67:c3:4f:66:7c:
                    b1:1b:6d:28:65:df:ee:ac:db:50:60:a0:f3:a6:fc:
                    23:51:a2:74:81:05:14:8f:9b:8e:a6:d6:a2:88:fc:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:1E:A4:F1:9C:F1:7F:7B:D5:12:A1:61:82:3E:08:A2:89:A7:D1
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1b:58:49:d0:ae:73:7a:f5:c4:b3:05:35:69:d9:3a:d1:1f:
         65:f3:c8:d7:f4:ce:52:db:24:55:0a:8f:1c:2a:56:21:5f:56:
         f9:c0:6f:5e:ea:24:a9:4e:0f:77:1d:f7:b5:8e:ae:fd:20:ba:
         e6:b5:fb:30:d6:dd:df:41:d8:6d:a8:08:05:6b:ee:80:82:c2:
         74:64:2c:15:61:1c:d9:ea:33:a2:d9:cc:83:60:17:64:01:71:
         ae:c0:84:c5:54:62:e9:e6:23:79:94:46:88:64:87:67:35:79:
         bf:ed:0a:72:e0:e2:cf:bd:46:ee:49:f0:dd:ad:f3:4d:a7:45:
         4e:e1:f2:d3:7a:be:c3:10:f1:f7:4f:4f:98:ab:7d:4d:d9:e2:
         1b:bd:52:4f:51:b2:68:51:1b:06:0d:c5:8c:49:3d:a4:68:65:
         34:80:9c:25:f6:17:d0:6f:cc:88:d8:8a:15:88:6d:e4:76:95:
         a0:48:1f:0c:5f:41:a9:64:fc:30:1c:5e:7e:2f:8b:9f:31:fe:
         78:9d:47:bd:40:01:1d:79:62:7b:c3:4f:b6:1b:f2:05:80:77:
         b5:dd:aa:0b:e4:ae:14:f8:28:df:d1:b8:91:1c:23:38:dd:51:
         99:5d:b0:ab:47:c6:4d:c9:48:fa:6d:64:f7:6c:80:b3:c2:57:
         4f:ec:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:37:40 2026 by rpki-client