Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          1sH7qw8pI/77jQNFlnNFZ9aid7nNKRs3CUQ9BBgZ7gM=
Subject key identifier:   EE:81:21:A5:A7:17:73:4D:67:39:F4:4F:5C:FF:06:2E:7A:65:E2:CE
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       092D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          0928
Signing time:             Thu 06 Aug 2026 01:47:37 +0000
Manifest this update:     Thu 06 Aug 2026 01:47:36 +0000
Manifest next update:     Sat 08 Aug 2026 01:47:36 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: snXg+FlzxSQQxsK3TXqjmgP5oMC9aq+JwjHcyAE6XiU=)
                          2: C69507C6303111F08DE721DEDAE4EC9C.roa (hash: n1LnT/xuX8ossK6e1Qu5ErVwbY8lo9OUKGVmWsM35RE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349 (0x92d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF, serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Aug  6 01:47:36 2026 GMT
            Not After : Aug  8 01:47:36 2026 GMT
        Subject: CN=6a73e7b9-4830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:94:35:78:72:d7:75:55:08:6d:e2:12:10:
                    9b:5b:5c:83:be:9c:51:96:09:25:a0:aa:1e:99:bd:
                    15:7e:33:06:e0:f4:e3:98:07:d5:5b:98:e5:6d:c0:
                    d9:11:8e:41:fd:a5:39:e0:10:d9:48:11:e4:2e:7e:
                    13:67:5b:b8:d4:b1:7f:ca:92:6a:f3:80:2f:c9:51:
                    08:c8:fe:ec:6d:ec:4b:82:79:72:7a:b8:5a:e5:84:
                    5b:a4:81:6e:de:75:0d:1d:43:1a:a8:cd:f5:dd:b3:
                    f4:af:1b:67:8f:ba:4d:fc:78:a2:55:42:b3:7e:eb:
                    07:10:41:45:ce:99:76:d1:c0:23:40:e6:31:e1:55:
                    df:2b:01:71:9b:fa:7a:69:a0:35:15:5a:7d:dc:c6:
                    d5:b5:c7:fd:07:9f:41:5b:57:fb:a6:ad:14:e1:b8:
                    e6:74:6a:b9:1f:7e:32:f0:bb:84:8f:ae:e3:14:7f:
                    8a:32:ab:b1:51:b6:6c:7d:62:0c:a9:b2:83:d6:b7:
                    a9:98:28:20:8b:99:ed:57:ec:17:66:6b:81:66:d3:
                    ec:e6:8e:4c:19:2a:e4:a5:b0:c1:4f:5f:66:a3:5d:
                    21:ca:ce:3f:10:70:51:be:e2:a4:0b:6f:71:e4:a0:
                    35:8a:b5:da:a8:ce:bc:79:48:03:c6:f3:01:bb:6b:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:81:21:A5:A7:17:73:4D:67:39:F4:4F:5C:FF:06:2E:7A:65:E2:CE
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:6e:3e:5c:f9:53:b2:10:fb:d0:85:02:46:c0:3b:2c:c7:
         94:f2:e1:2d:5f:15:45:35:0a:1e:12:8f:14:e2:d8:9a:10:7c:
         6c:81:07:e8:9a:83:2e:6c:6d:06:88:e8:2f:e0:b6:41:2d:dd:
         31:f3:6b:ce:bd:3e:8c:ff:40:07:d9:62:83:bb:55:a3:08:ed:
         d4:f6:5c:79:06:53:25:6b:cf:b8:26:35:00:80:eb:b2:7a:4c:
         c2:9f:52:62:7f:14:3a:41:e7:7a:60:3f:9f:ab:e7:85:6a:05:
         d7:e3:4d:e5:a3:95:6d:93:75:a0:42:7e:08:fc:9b:8f:38:6b:
         2f:1d:90:d3:5a:c2:c3:f9:bf:84:df:bf:7c:e9:a0:b4:90:85:
         2f:ae:1e:e7:9b:79:26:d8:f0:73:57:77:f3:99:62:89:45:a1:
         34:c6:78:9f:dc:c1:4b:a2:60:46:84:0e:f2:66:01:34:99:31:
         53:69:f9:e5:3f:7e:9f:8c:77:6e:50:24:df:fb:8d:b7:93:bf:
         71:2b:52:82:c6:46:4f:08:12:00:04:37:30:68:5a:21:09:c2:
         d9:d4:b7:c2:6d:83:4c:8f:52:e3:89:a6:04:fb:bc:af:fb:0d:
         a1:65:55:1d:12:46:01:ab:a2:e0:5f:56:04:75:76:a5:7c:f5:
         c0:49:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:40:08 2026 by rpki-client