Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
File:                     ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft (raw, json)
Hash identifier:          2m6lMs/muJ0y5OviIyhKkKuA4p96qOr1N+OBetmFpmA=
Subject key identifier:   DE:C7:BE:23:5C:12:02:19:8F:7D:3F:FF:40:55:7D:EB:66:DB:A5:4F
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Certificate issuer:       /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial:       03D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
Manifest number:          03D5
Signing time:             Thu 06 Aug 2026 03:56:23 +0000
Manifest this update:     Thu 06 Aug 2026 03:56:22 +0000
Manifest next update:     Sat 08 Aug 2026 03:56:22 +0000
Files and hashes:         1: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl (hash: Ju02vynTVrjTz0CnJs4SpYkZGe2zjFVrUfTNrwU6F9Y=)
                          2: 9C225EFAE57E11F0ACCF11ADDAE4EC9C.roa (hash: 52/RrDD53hRvIOj4m0Ki2aPwgfD+p2vQH2NitGDAjtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A0C9AF, serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
        Validity
            Not Before: Aug  6 03:56:22 2026 GMT
            Not After : Aug  8 03:56:22 2026 GMT
        Subject: CN=6a7405e6-a58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:53:74:10:bc:72:db:84:9e:ed:04:4f:b7:
                    82:3c:5d:8a:de:f0:a5:98:de:11:3b:99:a7:ec:26:
                    e4:e1:2f:64:97:51:f1:b1:b7:a7:b0:de:38:11:ab:
                    e2:e7:61:45:c4:45:f5:33:f2:bb:33:df:2c:d8:d0:
                    29:e6:6e:e7:94:3f:4b:0c:c1:0e:b5:b7:bc:2f:46:
                    26:b5:4a:da:ce:dd:78:32:91:1f:58:08:c3:0f:05:
                    fb:2d:82:52:ac:4f:06:43:85:9e:cb:24:9b:55:c4:
                    c8:98:4d:7b:17:1a:bc:5a:32:81:43:dd:7a:80:34:
                    87:bf:bb:16:31:9b:a5:94:f1:2c:55:8d:a4:4c:3e:
                    d1:14:74:de:f2:33:c2:c6:9f:9a:db:24:fd:d1:56:
                    df:29:a5:1a:d5:ca:b3:25:f6:43:17:4c:68:90:af:
                    bf:df:4b:57:62:4d:7e:1e:00:ea:02:42:7f:33:22:
                    95:d8:5d:89:aa:9d:e3:b6:5e:a6:d8:c6:ae:8b:fb:
                    81:0a:46:da:48:95:ff:a2:da:bd:6c:13:69:4e:5d:
                    1c:53:ef:99:3f:c5:c1:a3:7b:69:61:6d:e7:73:c3:
                    72:9d:65:d8:1e:84:73:bc:56:09:3d:44:f5:75:ad:
                    5e:3a:34:28:da:ed:c4:22:aa:a7:f1:b5:c7:8c:96:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:BE:23:5C:12:02:19:8F:7D:3F:FF:40:55:7D:EB:66:DB:A5:4F
            X509v3 Authority Key Identifier:
                keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:b6:a4:1c:45:51:45:4c:79:25:5f:18:79:33:02:9e:7b:
         15:2d:dc:ce:9b:dc:5e:dd:47:9a:53:17:5c:48:33:f1:e5:26:
         89:9f:d0:57:e1:12:98:d5:35:6d:a8:ea:06:e0:94:93:b9:f4:
         0a:3d:d5:04:da:87:5f:f7:2e:1e:7a:e8:eb:a3:96:11:cc:32:
         38:71:7b:76:1a:7f:2f:15:1d:13:42:6f:98:b5:9a:ab:dc:b7:
         05:02:7e:a1:54:6d:13:31:15:c7:ca:87:86:15:4d:54:72:15:
         0d:31:fa:59:dc:7b:41:b7:ce:24:98:c4:3a:38:56:45:6c:77:
         a0:35:61:46:2e:0a:da:3b:1c:f8:22:5f:cc:ac:dc:51:29:89:
         89:ad:93:2e:8e:02:9f:0e:da:cd:2a:56:dd:7d:b6:82:96:b4:
         9c:e7:23:ff:f8:42:d5:4f:82:6c:4c:ba:b5:06:17:ff:0b:d2:
         08:3f:46:52:d0:39:ef:26:fd:8b:6c:87:7d:1c:76:b1:fe:c1:
         c6:9d:25:10:52:bf:60:9e:bb:77:d7:60:92:11:ac:03:4c:eb:
         53:b9:4f:98:c5:73:40:80:c0:2a:4b:97:86:87:ee:5c:2b:b9:
         2c:42:f0:07:a3:f2:b7:09:33:07:da:99:19:25:a6:16:76:03:
         53:0f:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:17 2026 by rpki-client