Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          bMaGot5HT80KW01tuRvNFsFqGiRJ4fNrDfuMq2WeCd4=
Subject key identifier:   1F:C2:49:20:BE:4B:57:F6:B2:08:B1:C9:97:29:CE:8C:40:D2:BC:AA
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       02BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          02B9
Signing time:             Thu 06 Aug 2026 04:33:31 +0000
Manifest this update:     Thu 06 Aug 2026 04:33:31 +0000
Manifest next update:     Sat 08 Aug 2026 04:33:31 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: V4vdjrepre2RGKf/5AgHOU4aW5iAawPRfySZ7UaxBKk=)
                          2: 9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa (hash: 2uFOUkSFKVasJhOLfUiTVE3r4VWf4k4tupX7FNxvep4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Aug  6 04:33:31 2026 GMT
            Not After : Aug  8 04:33:31 2026 GMT
        Subject: CN=6a740e9b-eb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:f1:a2:5a:0a:dc:8c:c4:d5:21:e7:19:4e:
                    3e:a1:d0:ef:37:53:c9:dc:5e:7d:c8:cc:1e:56:3f:
                    1c:f4:bd:ee:bf:31:e4:c2:c1:c9:72:71:2b:1d:5b:
                    8e:0d:b7:85:90:f4:f7:4f:46:68:2c:16:17:95:c6:
                    f0:6d:22:9b:1b:c8:a6:1d:7b:e8:20:db:33:ec:4d:
                    0e:ee:24:22:b3:5a:9f:e6:c5:85:9c:43:b8:ef:8d:
                    b4:84:f4:91:21:df:c3:2c:c4:b8:87:45:54:44:b8:
                    ac:14:00:94:e6:91:6f:72:75:49:0a:15:71:ca:9e:
                    c1:d2:e2:35:fa:8e:cc:03:6e:49:03:03:f1:1c:05:
                    18:70:f5:c7:98:c2:51:01:fb:56:53:8a:3e:19:92:
                    2e:b0:80:2d:0e:81:51:8f:16:a7:af:e8:67:6d:cb:
                    b8:23:d5:7c:93:83:02:f5:ed:85:20:a4:eb:11:c8:
                    21:f4:41:ea:f6:14:ad:ee:64:17:13:13:7f:c3:d5:
                    37:b6:6e:f0:b6:fc:2d:d6:fd:aa:95:d9:2e:08:85:
                    bd:3c:b4:b9:c3:9d:c7:87:44:45:31:c6:66:c1:ee:
                    7b:e9:a8:c9:05:a5:ce:79:4f:69:d4:a4:94:45:60:
                    80:95:cf:84:a5:b3:5b:66:41:8c:cd:ee:da:fb:f8:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C2:49:20:BE:4B:57:F6:B2:08:B1:C9:97:29:CE:8C:40:D2:BC:AA
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:97:79:f2:7a:f3:77:1a:36:eb:3e:9d:2f:dc:e4:29:69:5b:
         02:63:16:79:b8:1d:8b:06:ab:ca:f4:00:a8:63:de:80:a3:b4:
         bc:76:17:68:92:23:6d:29:ac:a8:0a:22:53:7e:a8:44:a0:f7:
         fc:ac:18:ca:af:26:b5:3f:6b:d5:a6:87:cf:11:34:9b:db:fa:
         41:d8:c0:07:4d:0c:02:fd:c8:ed:6e:c2:a9:47:d4:55:00:3c:
         08:33:b2:f8:07:f3:58:ef:8d:4f:9e:f9:8d:58:d7:da:e5:32:
         04:47:bf:a0:6d:2f:23:9d:1c:e7:26:1f:58:1d:20:31:e5:f0:
         c8:a2:4a:b5:23:9f:ba:70:f6:e1:b5:95:18:f6:f1:f4:00:be:
         ba:6d:bf:46:66:e1:68:1f:6d:cb:fe:14:37:7f:7b:d4:40:b1:
         d0:fd:5c:6b:4a:c7:f2:81:95:21:a5:51:e1:94:bc:09:7f:6e:
         9d:90:c6:a1:99:09:f8:32:75:be:5e:7e:3f:2c:32:81:e4:8d:
         e7:3c:47:09:b5:48:8e:30:5e:3b:81:68:7c:a6:63:f0:f5:66:
         a8:e9:6e:4c:35:99:38:a6:18:50:1e:a5:d4:67:98:a4:7a:90:
         3f:f6:cb:62:f9:54:93:66:a9:48:25:88:46:ef:76:d1:71:dd:
         b7:b7:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:42:12 2026 by rpki-client