Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File:                     xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier:          qLVj2lAz8hoJ4R7TFF5Ov7oYzck55xA2IgsKjuRfVvE=
Subject key identifier:   89:97:2A:F1:0A:22:2A:CD:CB:76:9C:2B:14:0B:A8:49:02:8F:2C:19
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer:       /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial:       026E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number:          026D
Signing time:             Sun 21 Jun 2026 04:36:03 +0000
Manifest this update:     Sun 21 Jun 2026 04:36:03 +0000
Manifest next update:     Tue 23 Jun 2026 04:36:03 +0000
Files and hashes:         1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: kVI2tX0xGuCtbI14GrxRPPj7JfvqWe1awrAmm15Nqp4=)
                          2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
        Validity
            Not Before: Jun 21 04:36:03 2026 GMT
            Not After : Jun 23 04:36:03 2026 GMT
        Subject: CN=6a376a33-bd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:74:63:2f:fc:c3:b5:ed:e4:c0:d9:cb:da:
                    16:2a:d5:73:81:64:d4:91:03:b6:ff:63:0a:53:c8:
                    8b:3b:ae:b3:1b:6f:f2:02:a8:4b:01:d4:04:f8:d5:
                    bf:b5:d9:2d:3f:0f:35:de:e8:aa:46:e0:21:cf:8e:
                    bd:14:80:05:3f:9e:2b:88:7d:5a:cd:dc:d5:e0:54:
                    32:ab:07:54:03:f8:3f:9e:61:99:3e:3a:ad:c3:ba:
                    34:62:0d:c7:40:76:9e:6c:4c:83:63:93:19:1f:41:
                    38:c8:5a:4b:89:9f:9e:27:c7:fd:36:95:9f:7b:aa:
                    f6:e2:4b:ef:0b:b4:f3:e5:78:df:98:8b:27:82:62:
                    fd:ab:78:40:7b:72:f7:20:f3:ee:a0:b4:fb:04:48:
                    e7:16:9f:0b:9c:99:f2:87:e0:8c:28:0a:6a:e6:66:
                    b4:17:4b:d7:fe:06:d3:79:7e:57:93:cd:af:e9:41:
                    e4:47:25:61:49:01:ea:44:f6:3a:ff:8c:33:43:62:
                    a3:58:fa:ff:88:de:2d:b1:b8:d6:ce:ec:34:cd:9e:
                    99:8e:b1:a7:26:73:2b:4e:ec:10:07:b7:ce:b3:60:
                    5f:c8:d4:4d:89:27:c1:2a:76:d5:43:04:41:e5:65:
                    ef:8f:a6:b7:4f:b3:f7:67:58:f2:76:4e:77:f9:39:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:2A:F1:0A:22:2A:CD:CB:76:9C:2B:14:0B:A8:49:02:8F:2C:19
            X509v3 Authority Key Identifier:
                keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:5d:ee:cf:98:a7:4a:fb:a8:aa:52:5b:a3:25:7d:cc:c8:df:
         dc:e8:75:11:b7:28:2e:c4:c4:b0:b3:ab:4c:76:19:0b:10:7d:
         b4:c0:a1:6f:ec:93:64:a6:6d:41:ca:1b:6c:38:d4:d4:b6:00:
         1f:f6:98:c7:90:fc:e4:c0:e3:c1:d5:36:2c:e4:ea:66:59:80:
         95:a2:ca:7b:b7:a9:b6:83:e1:54:57:34:af:dd:1c:69:88:58:
         85:c7:01:45:40:32:1b:b0:6f:a0:b0:01:07:38:20:71:cd:1f:
         8a:69:8f:3a:2a:3c:e3:6e:0a:c4:e8:b4:98:56:35:93:c3:e2:
         dd:55:74:fd:2b:56:de:bc:22:03:e7:0b:f3:2e:2d:79:2a:4d:
         66:fb:7e:ae:6b:49:7b:4f:e1:61:1b:4b:94:55:a6:38:88:92:
         d5:69:18:7b:0b:43:d5:cd:6e:8b:9e:9f:88:b1:2f:b9:09:0d:
         2e:ac:23:33:97:17:fe:a9:5d:de:b3:fc:3c:78:0d:aa:9a:95:
         37:1e:aa:3d:dd:11:50:57:96:b8:5a:ef:93:0e:fb:33:0f:f7:
         1c:06:af:27:2b:b9:83:1a:56:47:12:07:89:ce:e9:b9:b0:4b:
         60:5d:16:81:48:4f:c1:50:96:41:9d:ce:1b:66:4b:45:42:41:
         b1:2f:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:45 2026 by rpki-client