Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          sPQiRkCTvHazn8gyqi+L0tMvBBeYsgtzwY/x2vQt3IM=
Subject key identifier:   70:8C:CD:A3:BA:E0:C1:73:4A:AB:66:7A:87:47:CB:96:07:4B:61:62
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       0687
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          0685
Signing time:             Thu 06 Aug 2026 02:37:25 +0000
Manifest this update:     Thu 06 Aug 2026 02:37:25 +0000
Manifest next update:     Sat 08 Aug 2026 02:37:25 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: 3fsJng/ArQUEYwN0V1GsRLyaZWVfUfQ+ALJEvcd7C3Q=)
                          2: D63780C66E3011F1966BCAB1CE1D38B0.roa (hash: H2PuTqMDK+XmhiiIA5H4ju2xB0NtOk1fvK11ma5Ehjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Aug  6 02:37:25 2026 GMT
            Not After : Aug  8 02:37:25 2026 GMT
        Subject: CN=6a73f365-9af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:de:3f:a5:f4:0e:53:a1:96:68:ac:8d:fa:
                    f9:74:75:49:b9:f9:d2:67:2a:0d:f0:0d:6a:8f:bb:
                    22:82:71:ed:31:e5:6a:5b:4b:99:66:16:50:66:8e:
                    d2:b1:f3:6c:03:ae:91:42:a2:f0:03:97:8a:4a:88:
                    82:db:41:b5:81:bf:a5:55:70:cf:f6:7a:87:b3:39:
                    4e:74:5e:e6:06:32:a8:17:2e:f0:22:54:0f:45:02:
                    21:a1:14:8d:b3:83:a8:7b:ea:0f:d8:cb:70:86:d3:
                    c3:8b:19:75:a2:9d:6d:38:0a:bf:d2:e1:55:45:10:
                    a0:64:d3:9f:ce:5b:8c:68:b0:75:95:3c:2f:39:72:
                    ae:df:e4:de:80:70:a4:1d:88:cf:b3:27:f2:9b:84:
                    ea:51:bd:74:74:65:6d:d9:a4:ef:98:63:30:83:ac:
                    59:8f:c9:f7:2f:d8:bf:61:08:d5:bc:a2:63:32:eb:
                    f9:fe:90:c0:a0:af:ec:85:39:7e:1a:c0:18:17:4e:
                    b3:17:7f:0c:2d:41:19:9f:b3:30:14:aa:e0:3b:13:
                    37:9c:b3:3b:94:d0:6a:27:54:f1:bc:fc:c4:50:06:
                    84:07:89:15:c6:37:83:7c:e4:71:6d:96:e7:5f:f6:
                    34:68:c7:c6:b7:ca:14:58:39:0d:29:fe:7e:1c:fe:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8C:CD:A3:BA:E0:C1:73:4A:AB:66:7A:87:47:CB:96:07:4B:61:62
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:3c:b4:93:8a:49:cc:03:5c:ec:09:f8:36:dc:b5:fc:c2:
         a8:c8:52:92:50:01:b8:0d:d9:6c:db:23:60:a0:52:70:a1:13:
         a7:9c:31:fb:5b:09:28:c2:79:5c:53:f7:3d:e3:53:74:4f:32:
         9d:b3:54:9a:6a:71:92:5c:22:8c:20:af:ac:6a:7a:ee:47:99:
         52:eb:e8:7e:b0:2a:c0:00:52:0d:d7:83:be:a7:71:c3:25:e9:
         c1:ea:db:e6:67:ec:61:fd:72:b6:e0:14:25:e3:c8:74:59:fe:
         2f:6b:2f:2e:66:66:60:fc:94:15:8f:40:1d:ee:7a:53:74:9e:
         5e:ab:3e:46:0b:af:18:80:83:cd:95:77:2f:07:5c:ab:5a:59:
         90:23:e6:55:37:04:95:65:92:7b:a2:4f:c0:c0:5c:cd:84:37:
         68:6a:e1:6b:20:b8:bb:0c:74:c1:e9:b7:36:e7:ac:f0:bc:9d:
         9c:a8:36:8d:29:0a:b3:42:a6:f8:2e:c9:d2:0b:76:c3:85:d5:
         d2:77:ac:90:f5:49:98:57:58:6e:0a:9a:f9:7b:98:9a:74:4c:
         40:a6:7c:3f:9a:c9:a1:e6:22:85:60:a2:9c:2e:0a:04:20:17:
         fc:22:1a:57:90:88:ad:2d:08:d9:ce:e4:da:04:03:ac:d3:4b:
         ed:4f:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:33 2026 by rpki-client