Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File:                     iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier:          YEvC03MYrndvGHiGP8FS27/gj+CEFhnVG+b8lOPNHcI=
Subject key identifier:   97:6C:EE:95:0B:40:B0:80:2A:EC:03:E4:DC:E7:6D:B3:48:0C:04:F3
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       0FCE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number:          0FC2
Signing time:             Sun 21 Jun 2026 00:57:21 +0000
Manifest this update:     Sun 21 Jun 2026 00:57:20 +0000
Manifest next update:     Tue 23 Jun 2026 00:57:20 +0000
Files and hashes:         1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: FvUt4jLsqUG8BNoRtemP4dQhXSt0zcXNWltUAbjsAic=)
                          2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
                          3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
                          4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
                          5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
                          6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
                          7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4046 (0xfce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: Jun 21 00:57:20 2026 GMT
            Not After : Jun 23 00:57:20 2026 GMT
        Subject: CN=6a3736f1-0592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:f4:90:e8:5c:b1:fa:73:d8:52:89:d7:87:
                    d7:20:4a:02:3a:ca:11:10:1f:41:10:02:10:61:8b:
                    44:d4:4b:05:3e:6c:7f:9e:25:c8:0d:0b:43:ee:4f:
                    d6:fa:d2:5d:19:77:5a:2e:44:c5:cd:c5:de:0d:04:
                    2a:5d:8f:09:93:8e:7a:ce:6d:d8:51:54:53:e8:85:
                    0f:43:88:76:9c:74:a3:0a:59:d2:b0:ae:5c:53:d6:
                    3d:0e:18:e9:14:cc:de:11:04:99:7f:9b:6b:87:de:
                    8b:39:6f:50:d1:db:a6:68:4c:02:85:a0:8a:64:e2:
                    fb:2a:2c:fe:e4:15:2c:f0:1c:59:0b:56:f1:5e:76:
                    81:b8:f5:22:ea:98:92:df:2c:58:6d:a8:c9:cb:05:
                    0f:72:3b:c9:65:90:f6:27:f1:ef:d2:c7:e2:bc:d1:
                    30:e8:42:c4:84:0e:eb:a0:02:12:f8:87:84:35:f0:
                    41:61:57:6e:5a:69:3b:1d:c5:73:32:39:a1:57:59:
                    ed:24:45:96:76:4a:30:c0:fd:82:46:9d:f2:df:18:
                    5b:34:00:f8:05:b8:4c:bd:48:c7:a9:7e:07:ef:96:
                    97:52:31:5e:ea:c0:21:9c:70:93:51:69:ce:82:4d:
                    e0:86:54:18:a8:a0:60:45:6c:b1:5f:f4:25:41:b6:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6C:EE:95:0B:40:B0:80:2A:EC:03:E4:DC:E7:6D:B3:48:0C:04:F3
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:9b:2d:35:d8:e2:af:5b:18:fb:0f:b2:04:3a:11:09:aa:1d:
         44:6a:a9:b6:36:62:fe:84:3c:10:2f:75:ca:bc:17:a0:3c:33:
         ab:96:de:28:f2:5b:fc:cd:1f:0b:6a:eb:12:fb:d7:07:f9:1f:
         bd:3a:13:ed:13:28:38:dc:12:12:32:53:75:d0:7e:ae:6a:7e:
         07:8d:14:b9:c3:f2:5a:aa:24:99:45:78:19:e1:41:2e:35:c3:
         72:e7:fe:c4:86:77:0a:1c:05:b4:19:f9:3c:f1:19:f9:98:ea:
         ee:9f:e5:6c:37:46:92:31:63:82:a3:b7:7d:7f:53:f0:81:0b:
         c3:91:85:fc:43:31:d4:c6:d8:32:9c:f7:ca:55:0a:2e:21:ab:
         0d:c5:1b:fd:96:bd:68:19:0c:ac:db:0f:99:63:00:ba:01:f7:
         10:0c:a5:8c:50:bd:72:16:54:21:ca:85:d7:fc:d0:c3:8d:19:
         1d:a9:bd:db:94:0c:0c:cd:6a:bf:47:64:0d:8c:c9:31:d9:40:
         25:ee:ef:0e:d9:a2:a9:e0:c2:1c:41:61:4a:2d:00:21:c8:d3:
         a4:2e:47:0b:37:e5:6f:45:f8:a4:fc:f4:de:26:6e:f6:45:79:
         f7:39:1c:15:6d:43:ff:f2:71:90:ac:69:0f:a3:ee:39:c0:ea:
         e0:b7:e9:7b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD84wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBBQ0ZBRjExMC8GA1UEBRMoODgyNjI5ODk1RDhEQjU3QjI1NDFFQTQ4RkExMTI2
MzI1RTI5MDIwQjAeFw0yNjA2MjEwMDU3MjBaFw0yNjA2MjMwMDU3MjBaMBgxFjAU
BgNVBAMTDTZhMzczNmYxLTA1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDR3/SQ6Fyx+nPYUonXh9cgSgI6yhEQH0EQAhBhi0TUSwU+bH+eJcgNC0Pu
T9b60l0Zd1ouRMXNxd4NBCpdjwmTjnrObdhRVFPohQ9DiHacdKMKWdKwrlxT1j0O
GOkUzN4RBJl/m2uH3os5b1DR26ZoTAKFoIpk4vsqLP7kFSzwHFkLVvFedoG49SLq
mJLfLFhtqMnLBQ9yO8llkPYn8e/Sx+K80TDoQsSEDuugAhL4h4Q18EFhV25aaTsd
xXMyOaFXWe0kRZZ2SjDA/YJGnfLfGFs0APgFuEy9SMepfgfvlpdSMV7qwCGccJNR
ac6CTeCGVBiooGBFbLFf9CVBtkTxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUl2zu
lQtAsIAq7APk3Odts0gMBPMwHwYDVR0jBBgwFoAUiCYpiV2NtXslQepI+hEmMl4p
AgswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4QUVBMjI4L2lDWXBp
VjJOdFhzbFFlcEktaEVtTWw0cEFncy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lDWXBpVjJOdFhzbFFlcEktaEVtTWw0cEFncy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjBBQ0YvOTI1RTJCRTY1ODZEMTFFNUFFQjU1QzJGRjhB
RUEyMjgvaUNZcGlWMk50WHNsUWVwSS1oRW1NbDRwQWdzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDOmy012OKvWxj7D7IEOhEJqh1Eaqm2
NmL+hDwQL3XKvBegPDOrlt4o8lv8zR8LausS+9cH+R+9OhPtEyg43BISMlN10H6u
an4HjRS5w/JaqiSZRXgZ4UEuNcNy5/7EhncKHAW0Gfk88Rn5mOrun+VsN0aSMWOC
o7d9f1PwgQvDkYX8QzHUxtgynPfKVQouIasNxRv9lr1oGQys2w+ZYwC6AfcQDKWM
UL1yFlQhyoXX/NDDjRkdqb3blAwMzWq/R2QNjMkx2UAl7u8O2aKp4MIcQWFKLQAh
yNOkLkcLN+VvRfik/PTeJm72RXn3ORwVbUP/8nGQrGkPo+45wOrgt+l7
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:42:50 2026 by rpki-client