Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
File:                     KvCNgqXIimbwBbMcgOhymuKM11U.mft (raw, json)
Hash identifier:          DemxIgDzxCn4zEBx3c3gYKRkr0zT2+NBEdgDuHrPBIc=
Subject key identifier:   DC:79:CF:ED:A8:A0:B2:A3:3D:39:F8:43:9B:25:3E:56:6A:A2:BA:4E
Authority key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
Certificate issuer:       /CN=F36406D3AF/serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Certificate serial:       0A51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
Manifest number:          0A4F
Signing time:             Sun 21 Jun 2026 01:26:14 +0000
Manifest this update:     Sun 21 Jun 2026 01:26:13 +0000
Manifest next update:     Tue 23 Jun 2026 01:26:13 +0000
Files and hashes:         1: KvCNgqXIimbwBbMcgOhymuKM11U.crl (hash: sJArCTEtzPo39M3e9jRKQgpjFGPEjmAj8iBmommMiik=)
                          2: E0B7E5C6AE2111E98F04DF3CF8AEA228.roa (hash: DsX+R5lwZz5IbPxYwdbT3HKP4x8lgrMkS5VZBHtyCkQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
        Validity
            Not Before: Jun 21 01:26:13 2026 GMT
            Not After : Jun 23 01:26:13 2026 GMT
        Subject: CN=6a373db6-bb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:91:08:3e:20:43:23:ce:d4:e0:aa:6f:03:
                    7a:bc:ba:12:7c:4a:6d:05:3f:3c:dc:07:54:cd:73:
                    dc:52:e0:93:ed:af:8a:14:43:86:33:94:a5:5f:aa:
                    8a:16:58:90:dc:53:f6:aa:8c:e2:7f:61:1f:89:b8:
                    b9:9b:d8:c6:0b:66:79:53:a6:99:4b:15:b8:0f:bd:
                    92:6e:f1:28:fc:89:87:27:3d:2a:af:1b:2b:90:e8:
                    5f:15:1c:f7:82:5f:97:08:e6:26:22:3a:4b:82:f3:
                    66:5f:72:8b:53:77:80:8a:c1:24:09:94:3b:fe:0e:
                    27:51:d4:49:18:df:72:36:fc:13:6d:b5:2a:74:ad:
                    24:c2:c1:34:4e:d8:33:2b:0c:dd:d9:8a:9a:85:53:
                    8d:4a:b6:f7:f2:67:ab:a2:0f:3b:08:82:69:27:84:
                    8b:ca:2d:5c:75:53:92:43:c2:72:2d:f6:ef:50:7b:
                    14:93:53:5f:b3:d9:cf:cb:92:e7:b1:50:37:7b:8b:
                    a2:eb:6b:7e:1a:f6:50:6d:94:b9:4f:9b:e1:d2:38:
                    cd:2e:07:67:ad:b4:07:2b:b1:3c:0b:c7:a7:66:b7:
                    56:04:a2:06:32:b8:2d:ea:33:06:e5:b7:50:6e:4b:
                    23:2d:79:82:33:0d:c9:43:e0:91:81:0e:05:a2:43:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:CF:ED:A8:A0:B2:A3:3D:39:F8:43:9B:25:3E:56:6A:A2:BA:4E
            X509v3 Authority Key Identifier:
                keyid:2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:d8:d1:9e:80:b1:d6:47:71:8b:10:bf:68:99:f1:a8:ec:
         92:04:a7:4a:0b:a5:95:df:85:6f:7e:44:cd:8d:15:94:76:b4:
         c8:b2:27:b2:45:76:b5:99:58:18:14:ae:40:71:99:36:18:0a:
         71:76:ec:2a:6b:c7:5a:35:73:ea:7d:d3:8d:30:5c:f0:8a:97:
         f8:5c:46:29:30:ff:68:f7:18:31:f8:12:43:7d:a5:34:ce:1f:
         98:9c:2e:f8:49:74:0b:2e:c1:87:0d:f6:47:09:8f:3e:74:56:
         2b:18:b2:6b:62:ef:51:15:44:69:c6:22:f3:59:7c:74:22:e6:
         74:f3:f6:ce:0a:c2:93:f6:91:17:d0:52:05:4c:0b:f6:c4:f7:
         9d:c7:d0:fa:e1:97:a7:10:0a:a5:d1:5f:a9:15:36:4d:9e:cc:
         0c:64:9c:40:16:15:25:d4:63:fd:13:81:df:55:ba:c5:51:8e:
         23:1c:ac:92:66:a5:a5:6e:6e:eb:d6:2a:f3:2a:11:5f:86:83:
         1c:0a:e7:97:ba:d0:21:ca:22:c7:57:f9:4f:4c:d7:84:79:ed:
         29:bb:1d:7b:98:10:2e:8b:9b:2f:67:1d:16:75:69:9e:9a:69:
         2c:44:64:02:14:4c:c0:22:39:8c:5c:bf:81:b8:48:87:2d:8f:
         3a:2a:4d:3f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICClEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDA2RDNBRjExMC8GA1UEBRMoMkFGMDhEODJBNUM4OEE2NkYwMDVCMzFDODBFODcy
OUFFMjhDRDc1NTAeFw0yNjA2MjEwMTI2MTNaFw0yNjA2MjMwMTI2MTNaMBgxFjAU
BgNVBAMTDTZhMzczZGI2LWJiNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+6JEIPiBDI87U4KpvA3q8uhJ8Sm0FPzzcB1TNc9xS4JPtr4oUQ4YzlKVf
qooWWJDcU/aqjOJ/YR+JuLmb2MYLZnlTpplLFbgPvZJu8Sj8iYcnPSqvGyuQ6F8V
HPeCX5cI5iYiOkuC82ZfcotTd4CKwSQJlDv+DidR1EkY33I2/BNttSp0rSTCwTRO
2DMrDN3ZipqFU41KtvfyZ6uiDzsIgmknhIvKLVx1U5JDwnIt9u9QexSTU1+z2c/L
kuexUDd7i6Lra34a9lBtlLlPm+HSOM0uB2ettAcrsTwLx6dmt1YEogYyuC3qMwbl
t1BuSyMteYIzDclD4JGBDgWiQ8XTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3HnP
7aigsqM9OfhDmyU+Vmqiuk4wHwYDVR0jBBgwFoAUKvCNgqXIimbwBbMcgOhymuKM
11UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwNkQzL0ZCNjQzQzM2ODc2RjExRTk5NDk1OEIzMkY4QUVBMjI4L0t2Q05n
cVhJaW1id0JiTWNnT2h5bXVLTTExVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t2Q05ncVhJaW1id0JiTWNnT2h5bXVLTTExVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDA2RDMvRkI2NDNDMzY4NzZGMTFFOTk0OTU4QjMyRjhB
RUEyMjgvS3ZDTmdxWElpbWJ3QmJNY2dPaHltdUtNMTFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+29jRnoCx1kdxixC/aJnxqOySBKdK
C6WV34VvfkTNjRWUdrTIsieyRXa1mVgYFK5AcZk2GApxduwqa8daNXPqfdONMFzw
ipf4XEYpMP9o9xgx+BJDfaU0zh+YnC74SXQLLsGHDfZHCY8+dFYrGLJrYu9RFURp
xiLzWXx0IuZ08/bOCsKT9pEX0FIFTAv2xPedx9D64ZenEAql0V+pFTZNnswMZJxA
FhUl1GP9E4HfVbrFUY4jHKySZqWlbm7r1irzKhFfhoMcCueXutAhyiLHV/lPTNeE
ee0pux17mBAui5svZx0WdWmemmksRGQCFEzAIjmMXL+BuEiHLY86Kk0/
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:44:49 2026 by rpki-client