Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          ab7go2sIlSeWsPRuGTfuLw5QwwJtaZOL6yTUkdNCNIU=
Subject key identifier:   DE:97:A3:08:11:38:12:FA:54:7C:EC:05:76:43:90:C4:35:12:78:26
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       0270
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          026F
Signing time:             Thu 11 Jun 2026 04:35:16 +0000
Manifest this update:     Thu 11 Jun 2026 04:35:16 +0000
Manifest next update:     Sat 13 Jun 2026 04:35:16 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: pIp/VGvm0BPVUW+F/2MJlwmij5sB5pTPLuCzs99+quM=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Jun 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Jun 11 04:35:16 2026 GMT
            Not After : Jun 13 04:35:16 2026 GMT
        Subject: CN=6a2a3b04-bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:de:20:b2:e6:8e:23:ab:48:2f:96:a5:b3:00:
                    43:1f:b3:74:2d:a0:fd:02:e4:e0:ce:41:3c:d3:48:
                    61:47:cc:3d:02:8b:33:93:8b:57:55:e1:be:3a:60:
                    7f:88:3b:26:ce:19:5f:c0:85:68:fc:f7:6c:e6:b6:
                    c9:d5:2a:b0:44:89:47:ad:07:86:35:12:4c:a7:9d:
                    92:17:61:91:c2:c3:3c:a2:31:9b:b7:08:94:3f:19:
                    d5:e7:16:f2:c6:6d:23:09:77:ab:d3:e5:92:b4:dc:
                    03:43:c0:77:e2:f2:2c:36:ff:42:07:fa:9a:a1:d6:
                    fe:88:ce:7e:ad:59:1a:fd:7f:0d:2e:bd:51:c7:f7:
                    0d:52:77:81:a9:88:5d:f3:e8:c0:35:93:f5:42:76:
                    e5:57:b3:99:62:a4:e1:d1:3d:f8:d4:d6:c2:f7:01:
                    95:32:6d:2f:ac:6f:f1:50:9d:9b:f6:4c:a4:08:fa:
                    72:32:b4:72:a8:32:0e:9d:10:89:37:b1:9d:f9:82:
                    16:55:32:04:44:9f:de:4f:5f:54:b2:0d:0f:cf:4c:
                    56:43:64:4b:4a:45:75:5a:e7:60:75:d8:8e:4f:84:
                    c5:67:ac:af:9e:a0:9d:c7:48:00:5c:96:f5:0f:77:
                    df:7f:7b:bb:26:25:d4:d2:6a:6c:f9:32:31:a8:f8:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:97:A3:08:11:38:12:FA:54:7C:EC:05:76:43:90:C4:35:12:78:26
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:dc:24:ab:dc:82:26:71:c2:85:1a:e0:cf:83:63:0c:ef:f7:
         c0:41:78:f7:61:cc:1c:34:42:db:ab:bd:55:09:09:87:ca:08:
         1c:de:04:e7:c1:c6:e3:64:08:24:8c:4a:a1:7a:5e:8e:12:5d:
         ae:72:d2:4c:11:6f:4b:8c:f6:d1:cd:a3:e7:62:b3:7d:0a:45:
         34:f2:91:b5:0e:16:a0:ec:14:53:8c:87:c1:d6:dd:a0:a2:4c:
         b0:50:66:16:a3:e0:12:78:88:4f:93:06:06:8f:17:a9:51:31:
         3f:bf:a4:3e:5e:38:73:8b:24:83:75:f6:c3:99:0d:02:91:91:
         1a:e7:3e:f8:f1:38:f8:2a:72:dd:94:d7:ab:c9:c1:27:06:f2:
         31:0b:17:24:1e:10:3a:9b:6e:a8:22:2d:d0:5c:64:83:9f:70:
         0d:f4:36:b8:10:b9:b3:a2:76:de:0a:0c:3d:51:44:a0:58:44:
         5b:e2:82:ae:78:96:16:15:09:3f:29:3d:d7:13:55:05:44:d2:
         02:16:ba:cf:74:74:ee:1c:e5:b9:9e:8d:e5:d1:a5:79:5f:d0:
         ca:91:26:41:a6:24:8f:89:8e:d2:36:7b:dd:e0:24:38:e0:5a:
         2b:9e:04:39:e2:34:3d:f9:c9:66:4b:5d:e0:e5:8d:a4:cb:44:
         bd:84:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:27:52 2026 by rpki-client