Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          0m9e2Nh1Rrp6z71XoXExwJdOlv5HwcsVeuQUCYKS+LA=
Subject key identifier:   F3:9C:A6:89:31:60:65:2C:2C:E0:51:95:AE:B1:44:B7:DF:AF:9C:E5
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       0244
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          0242
Signing time:             Sun 21 Jun 2026 04:41:56 +0000
Manifest this update:     Sun 21 Jun 2026 04:41:55 +0000
Manifest next update:     Tue 23 Jun 2026 04:41:55 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: CMp9Ph9LYKEDvfYK+07b3/fF9ETdkkmztNn8E0nAHC8=)
                          2: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: Jun 21 04:41:55 2026 GMT
            Not After : Jun 23 04:41:55 2026 GMT
        Subject: CN=6a376b94-976f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:94:0a:b1:51:b7:6d:72:8b:a1:0a:de:ec:
                    71:82:1b:e1:91:04:62:c0:19:ac:ef:3e:5f:b8:98:
                    77:68:55:37:27:7c:16:e7:70:b2:95:28:70:50:ab:
                    10:b3:48:da:02:1b:17:e5:09:44:50:02:80:01:45:
                    83:c3:e0:e3:78:36:60:ee:0c:4f:34:6f:3d:bb:95:
                    d1:cc:9c:5e:6a:9e:4e:8b:ae:35:2e:69:45:07:15:
                    0e:93:85:b9:9f:52:ff:ad:cf:d9:27:ae:c6:9d:78:
                    76:6b:14:91:c8:db:c2:40:0d:b9:13:a0:ec:e7:cf:
                    45:7d:55:52:dc:55:7a:17:4d:90:90:4f:3d:98:c7:
                    e1:16:b4:62:b3:3b:db:e5:2a:ec:07:48:e8:6a:dd:
                    b0:26:f1:a2:94:0e:90:93:ab:58:45:a0:8c:8b:f6:
                    5f:1c:54:5b:c9:58:f8:b3:3d:d3:18:98:41:c4:2d:
                    86:2d:fe:92:d6:6c:e9:66:48:0c:23:65:92:28:2a:
                    9c:10:66:f9:9e:1a:19:92:47:87:04:2f:c5:ea:9a:
                    6e:26:b2:3a:16:02:8b:64:c2:f0:e6:b5:34:2a:40:
                    e8:9c:76:99:d4:a0:24:19:4c:15:66:40:b9:0a:33:
                    77:7f:36:c0:a9:a5:29:79:de:92:85:dd:38:9a:42:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9C:A6:89:31:60:65:2C:2C:E0:51:95:AE:B1:44:B7:DF:AF:9C:E5
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:ff:d9:4d:69:f5:eb:22:82:62:bc:a7:30:15:70:91:50:
         e1:e6:d6:e6:e2:47:38:8d:b6:24:ff:6c:02:23:0b:bc:cc:87:
         ce:56:b6:14:ff:bd:30:f9:ca:24:81:05:42:ca:f4:1f:c2:f0:
         45:89:07:08:6f:d9:79:ad:aa:6f:f7:ee:27:2d:87:78:7b:51:
         12:b7:29:58:94:06:b3:83:7e:38:a2:99:ff:0f:9a:38:a3:bd:
         2c:a3:08:73:d8:16:86:6f:a5:41:ce:3a:20:e9:48:10:51:ee:
         6d:32:e7:7c:a9:32:0d:82:47:98:ef:c8:35:c1:39:75:a2:59:
         d5:ee:12:cb:66:53:ea:31:f1:db:d6:8c:bd:c7:25:1d:d9:16:
         eb:fe:6f:29:44:12:d0:46:b0:1f:f1:03:d7:70:12:0a:1a:05:
         57:73:8b:9a:e8:37:63:85:92:1a:d4:61:5e:ff:eb:9d:92:d4:
         37:b3:52:2f:c9:83:9c:17:cf:07:4a:99:60:e4:6c:9f:7f:a6:
         7b:01:7f:c6:f2:42:bc:76:92:f8:e0:ad:2a:3a:13:d5:e4:71:
         67:4c:63:88:ae:cc:dc:3f:14:42:08:b9:9f:8f:e5:7d:4e:44:
         61:dd:92:c6:0f:a3:67:6c:c0:9b:2b:1e:28:16:50:58:95:7a:
         d0:cc:b7:43
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTYxMENBRjExMC8GA1UEBRMoRDdFOTdFQzQxQkI1ODk4MEM0MEZFNEE5RTM2QzAx
MEJDMDAxM0QzMTAeFw0yNjA2MjEwNDQxNTVaFw0yNjA2MjMwNDQxNTVaMBgxFjAU
BgNVBAMTDTZhMzc2Yjk0LTk3NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCriJQKsVG3bXKLoQre7HGCG+GRBGLAGazvPl+4mHdoVTcnfBbncLKVKHBQ
qxCzSNoCGxflCURQAoABRYPD4ON4NmDuDE80bz27ldHMnF5qnk6LrjUuaUUHFQ6T
hbmfUv+tz9knrsadeHZrFJHI28JADbkToOznz0V9VVLcVXoXTZCQTz2Yx+EWtGKz
O9vlKuwHSOhq3bAm8aKUDpCTq1hFoIyL9l8cVFvJWPizPdMYmEHELYYt/pLWbOlm
SAwjZZIoKpwQZvmeGhmSR4cEL8Xqmm4msjoWAotkwvDmtTQqQOicdpnUoCQZTBVm
QLkKM3d/NsCppSl53pKF3TiaQhqnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU85ym
iTFgZSws4FGVrrFEt9+vnOUwHwYDVR0jBBgwFoAU1+l+xBu1iYDED+Sp42wBC8AB
PTEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE2MTBDLzkwRDg0N0YwQjQ5QTExRUY5RDZFMEI2MDc2MkU5NTFBLzEtbC14
QnUxaVlERUQtU3A0MndCQzhBQlBURS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzEtbC14QnUxaVlERUQtU3A0MndCQzhBQlBURS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTYxMEMvOTBEODQ3RjBCNDlBMTFFRjlENkUwQjYwNzYy
RTk1MUEvMS1sLXhCdTFpWURFRC1TcDQyd0JDOEFCUFRFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQtf/ZTWn16yKCYrynMBVwkVDh5tbm
4kc4jbYk/2wCIwu8zIfOVrYU/70w+cokgQVCyvQfwvBFiQcIb9l5rapv9+4nLYd4
e1EStylYlAazg344opn/D5o4o70sowhz2BaGb6VBzjog6UgQUe5tMud8qTINgkeY
78g1wTl1olnV7hLLZlPqMfHb1oy9xyUd2Rbr/m8pRBLQRrAf8QPXcBIKGgVXc4ua
6DdjhZIa1GFe/+udktQ3s1IvyYOcF88HSplg5Gyff6Z7AX/G8kK8dpL44K0qOhPV
5HFnTGOIrszcPxRCCLmfj+V9TkRh3ZLGD6NnbMCbKx4oFlBYlXrQzLdD
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:16 2026 by rpki-client