Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          +pCfpc62hw2OgTHgMoqBUJrdokWhJZJbHPNLjNv3+d4=
Subject key identifier:   0A:A0:36:7B:16:12:6F:85:70:7F:AC:60:C3:3A:79:D5:4A:24:D1:51
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       04A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          04A3
Signing time:             Thu 06 Aug 2026 05:46:06 +0000
Manifest this update:     Thu 06 Aug 2026 05:46:05 +0000
Manifest next update:     Sat 08 Aug 2026 05:46:05 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: xJ/PeBPXgRtIKC5tbk0ucDnjI/Y8gzODUoDKjhtroNI=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: Aug  6 05:46:05 2026 GMT
            Not After : Aug  8 05:46:05 2026 GMT
        Subject: CN=6a741f9e-ccde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:17:37:35:10:55:49:25:b5:fb:0e:8a:3c:
                    73:6d:92:ec:5a:1b:d9:25:82:dc:97:bb:2d:fa:1e:
                    c8:a0:9d:11:98:3e:f1:a3:57:67:46:ba:44:07:7b:
                    60:8d:d1:e5:a8:8e:d4:49:f2:e6:84:88:34:e4:a3:
                    dc:75:1d:fc:db:e5:70:d9:d7:c2:9f:3f:01:68:a1:
                    c5:da:b8:f9:64:48:78:ec:d7:76:90:0a:01:bb:78:
                    5e:3f:02:f7:af:94:4a:11:9e:fd:11:d0:54:ce:71:
                    ef:a9:a4:0d:c9:90:65:94:a5:58:66:8b:69:3f:5c:
                    43:62:ac:77:b7:90:54:9e:96:da:82:66:4b:34:66:
                    9a:fd:81:91:35:06:eb:fd:9e:6f:98:b2:f8:e3:4c:
                    61:fe:3b:85:e2:30:18:c2:24:ea:cf:09:58:2c:47:
                    7a:a2:3b:75:98:6e:22:66:f3:24:0b:c5:56:38:4a:
                    b6:b6:23:9f:f3:40:b5:46:e7:4a:d4:31:da:48:d4:
                    3b:b1:ff:b2:ce:b6:d6:b0:67:4f:e1:6d:a1:23:e3:
                    72:1d:5e:71:b8:fd:eb:8a:71:b2:da:c0:46:ea:31:
                    07:79:7a:7c:d0:5d:66:3f:c3:55:64:bd:be:6c:9c:
                    63:88:d1:6c:8b:a6:63:7d:c5:6e:d7:c5:01:8e:09:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A0:36:7B:16:12:6F:85:70:7F:AC:60:C3:3A:79:D5:4A:24:D1:51
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:62:aa:f6:a9:cb:55:ec:17:5c:1d:09:08:cf:9c:db:5a:
         cd:99:36:20:75:83:49:8d:6b:4f:b3:44:b7:da:ca:e0:70:74:
         9a:20:9a:99:49:bc:61:8b:a0:14:45:af:af:2d:47:c0:82:85:
         0f:31:61:3b:9f:6c:c8:d6:9b:23:c4:b2:26:6d:7e:b5:c5:bb:
         0d:fc:77:1b:47:a9:66:77:90:e7:f4:0f:9d:83:35:fa:70:1c:
         49:21:df:1a:16:9e:fd:e6:43:10:ba:10:d3:5d:de:13:2e:a8:
         8c:dc:19:ed:c4:10:a4:0e:14:8c:e0:6c:a8:a0:56:14:66:ca:
         4a:67:41:1c:77:5e:a8:3a:85:47:c5:08:ce:d1:22:4f:6d:31:
         ca:bc:72:f8:e9:9b:cc:4a:be:bb:37:8c:e5:bc:22:cb:31:d2:
         37:87:4e:66:b4:4d:b7:9c:fd:03:9a:c1:c5:e8:a2:d7:5a:9a:
         65:bf:af:a3:90:3d:d6:72:45:57:73:6a:90:9a:9d:72:81:ed:
         36:9f:bd:c0:ea:b6:30:61:d5:40:7d:71:20:27:47:d1:8a:76:
         06:f7:15:9a:f6:7d:67:a1:6c:d1:91:c7:33:1e:9f:d9:80:d0:
         8f:bf:2b:19:fb:67:7b:6c:1b:74:dc:7b:79:f6:91:47:cc:a1:
         95:66:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:39:22 2026 by rpki-client