Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
File:                     IU5T_WAV277wRT3vRAdy_7AU3Yo.mft (raw, json)
Hash identifier:          /ehM4MjLuxVSidYUsNkosS3rw+DuAEswwCXPTEJFy+s=
Subject key identifier:   67:0F:D9:76:90:E0:2F:48:55:92:7B:4C:CC:93:CB:B5:7F:7C:21:0F
Authority key identifier: 21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A
Certificate issuer:       /CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
Certificate serial:       0472
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
Manifest number:          0470
Signing time:             Sun 21 Jun 2026 03:28:24 +0000
Manifest this update:     Sun 21 Jun 2026 03:28:23 +0000
Manifest next update:     Tue 23 Jun 2026 03:28:23 +0000
Files and hashes:         1: IU5T_WAV277wRT3vRAdy_7AU3Yo.crl (hash: owxUnduDS4aNHM3gk9nrNHqo9W30wnQiTrxPJh/ltgs=)
                          2: 20752E50271A11EFB295582D7DDC24C2.roa (hash: vJwAgE4GViNLt6DStSXnSiz5VQ5wiyhctReG5qMVaz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639B67AF, serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
        Validity
            Not Before: Jun 21 03:28:23 2026 GMT
            Not After : Jun 23 03:28:23 2026 GMT
        Subject: CN=6a375a57-a7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:f9:8f:f6:3b:86:37:d4:75:ea:7a:56:17:
                    cf:35:48:ae:23:a5:ca:24:62:97:62:dd:ba:0f:87:
                    21:53:55:50:a3:c1:52:0b:45:8b:5d:28:08:76:5c:
                    56:c4:bf:e1:8b:0f:fb:b7:21:35:63:2d:ee:97:46:
                    8f:59:98:71:d8:fd:79:8a:87:f7:cc:03:8b:f5:da:
                    fb:9e:b8:40:76:37:ad:84:45:a4:4c:c3:80:23:f6:
                    14:de:2f:d7:a3:a4:dd:ed:8a:42:4b:63:02:16:ea:
                    46:89:fd:1a:5c:d7:9a:cc:e6:be:10:1e:1d:e4:97:
                    08:da:91:cc:6b:96:8f:75:15:be:b1:d9:f8:8e:83:
                    ae:e1:4c:ac:83:a5:3c:e7:91:e6:3e:17:d0:7b:86:
                    d8:41:18:42:98:28:58:86:de:91:fc:88:4a:80:04:
                    0c:20:de:3f:4c:a5:e7:9d:9a:4e:f5:1f:e1:49:21:
                    c5:6d:2a:3e:de:86:e9:2d:50:4e:f6:c6:82:2d:73:
                    bd:3e:e5:97:77:64:e9:4b:0b:4b:7c:21:b5:1d:60:
                    8e:13:9a:7d:d6:31:92:64:68:55:91:36:b4:6a:71:
                    a8:7f:67:62:c9:43:de:d7:66:8a:aa:bf:26:61:66:
                    bf:5b:21:c3:0a:fc:55:37:4f:c3:ae:17:af:9c:9f:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0F:D9:76:90:E0:2F:48:55:92:7B:4C:CC:93:CB:B5:7F:7C:21:0F
            X509v3 Authority Key Identifier:
                keyid:21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:20:0a:56:65:62:b1:76:ff:57:bf:f5:08:9d:d6:b1:7b:6e:
         eb:59:0f:a5:c6:de:c7:2a:fd:f2:7e:78:ed:08:46:fd:02:3c:
         e5:8b:0c:24:3f:0e:4a:1a:7f:2e:f7:9e:a9:3a:9c:e6:e6:2d:
         f1:7b:0c:51:e3:38:32:a7:0f:13:e6:8d:8d:71:35:2f:b1:a0:
         0d:bd:c3:28:47:e7:76:98:ef:24:8b:23:ba:06:4f:d0:8f:3b:
         1f:11:97:d0:b3:3b:04:68:68:7f:0b:21:ce:36:86:e1:9c:8a:
         d6:87:81:b4:97:39:69:93:3e:d5:46:39:e9:65:66:69:f0:96:
         60:fa:1a:13:7f:e5:72:61:db:ba:fa:10:6c:0b:83:4b:40:93:
         77:41:fa:b1:eb:e0:e6:43:5d:ce:03:46:b4:5e:30:e4:a6:ee:
         48:a3:1d:0c:92:ab:cc:9b:28:10:8c:01:08:0e:4c:1a:ad:5e:
         13:ea:41:f5:0c:09:5c:28:e9:75:24:a2:1a:38:4a:11:29:d9:
         68:a2:db:80:f8:78:73:25:d4:66:ac:8d:08:b9:7e:e2:f6:d5:
         dd:23:5d:7e:d9:cd:a8:ae:23:22:a5:21:47:e7:82:1d:de:a7:
         11:d3:0e:80:32:87:b5:c4:67:2c:5a:ba:0a:4f:31:e1:58:79:
         07:f2:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:37:01 2026 by rpki-client