Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          p9KAo+3f0q+MbnljnGQ6PeH75GCR9TE33rH2gJyTAoE=
Subject key identifier:   12:B3:3F:3B:E2:33:71:44:8D:B7:32:EF:B6:1C:F7:B2:93:F3:6B:47
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       056B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          056A
Signing time:             Sun 21 Jun 2026 03:02:47 +0000
Manifest this update:     Sun 21 Jun 2026 03:02:47 +0000
Manifest next update:     Tue 23 Jun 2026 03:02:47 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: hwT66D29Ym6gE7zmnwXFqVIxvpJdYb1t9lDrxHANyNw=)
                          2: 1B35856C195C11F1A4BE1BE6DAE4EC9C.roa (hash: CHaNrBOXzFgVGFou41x3nuG9Yh9iFT+XuvLJW7NRZ94=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: Jun 21 03:02:47 2026 GMT
            Not After : Jun 23 03:02:47 2026 GMT
        Subject: CN=6a375457-47d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:a4:4f:38:34:b1:b9:5e:7a:4a:d9:3e:e0:
                    1d:18:0d:49:62:61:c7:19:95:fb:4e:f6:7d:5d:95:
                    1d:ea:56:89:4a:18:c8:50:c5:66:17:5e:2c:5c:7c:
                    e4:1d:90:71:69:60:50:47:77:f1:a7:68:e8:f5:6a:
                    27:0b:7d:1e:ce:99:f1:25:3d:83:ea:42:25:a0:00:
                    1e:3e:b9:64:a6:d7:cc:6c:7c:df:9b:96:33:de:2c:
                    34:ef:72:93:af:e6:e5:cd:da:eb:eb:4c:03:ba:27:
                    78:7c:2f:ef:15:d2:88:7e:ff:ba:e6:5f:3a:2f:6f:
                    9f:9d:c7:ff:e9:df:1b:cb:28:7c:aa:8d:c6:7b:96:
                    a3:52:44:e0:ff:68:ab:3e:66:c8:79:99:e2:c6:91:
                    f7:5a:df:35:8b:8b:43:26:31:76:2a:a5:57:23:95:
                    7f:92:ca:b5:a0:81:69:25:85:d9:57:60:45:d7:50:
                    d9:81:c0:9e:9a:4f:44:97:26:ae:85:b6:ed:fc:3b:
                    b7:90:a3:92:e2:de:94:2c:d0:ea:b0:7b:0f:11:a4:
                    2f:34:09:79:3d:62:52:31:cd:eb:7d:01:ef:90:f7:
                    44:da:13:81:25:52:75:91:00:96:9d:11:4b:eb:6a:
                    28:16:ff:09:6c:8e:b3:e4:91:c9:e7:8b:26:d3:be:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:3F:3B:E2:33:71:44:8D:B7:32:EF:B6:1C:F7:B2:93:F3:6B:47
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:da:5e:47:fe:b7:ab:ca:19:1e:18:03:93:2b:a0:b1:19:fd:
         54:04:b9:fc:59:9a:8e:4e:50:a8:cb:4b:b5:e6:5e:67:f3:9b:
         60:88:f2:0a:7e:c3:2b:e8:88:ca:b9:be:8b:19:21:9d:4d:3b:
         c6:29:3c:99:3f:7f:26:ab:ef:42:5f:a3:4e:dc:62:60:41:38:
         56:42:23:2b:65:35:f9:c3:db:16:fb:19:65:94:be:98:c2:40:
         1c:2f:52:17:55:b5:d4:2d:b3:17:2b:f0:e5:2f:ec:c1:26:02:
         96:08:49:8e:d9:57:d2:89:55:88:f2:8f:34:f0:6e:e4:26:93:
         15:a3:9c:66:86:19:9b:cd:c7:bd:2d:1b:35:ec:90:6b:bf:2f:
         84:3d:95:be:d9:43:fe:69:55:69:1b:ff:af:b1:ca:06:5e:9a:
         b7:37:04:57:83:a5:69:72:f6:13:21:37:67:97:f9:4e:2d:60:
         2f:19:5a:c3:48:20:bb:aa:db:55:b1:5a:35:54:8b:ae:cd:1a:
         cc:ce:59:6e:65:3f:56:5c:2e:6f:f9:89:fe:10:93:3f:5b:55:
         7b:c4:9b:21:ea:a2:de:9c:72:4e:d2:3e:49:6f:16:03:8c:31:
         b2:3c:c3:e7:bf:e8:70:6a:d1:3f:f1:90:a2:a3:2c:27:f0:ff:
         74:15:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:47 2026 by rpki-client