Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          qF6VvGPigV8bWfOvho9OgxrLKR7nHqEXHkQtfnOptX0=
Subject key identifier:   15:F3:06:91:A5:15:F1:01:1E:DC:83:B0:B8:5E:0A:DD:C0:BB:F7:FE
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       04F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          04F0
Signing time:             Thu 06 Aug 2026 03:20:37 +0000
Manifest this update:     Thu 06 Aug 2026 03:20:36 +0000
Manifest next update:     Sat 08 Aug 2026 03:20:36 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: +XZZWaAqUIEJMY8w6qsoHs9A3rZONkeokWW+Tr0Z5Z4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: Aug  6 03:20:36 2026 GMT
            Not After : Aug  8 03:20:36 2026 GMT
        Subject: CN=6a73fd85-3703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cc:e8:27:51:0a:52:1b:a0:32:3b:11:b0:9f:
                    37:ce:62:a0:31:fe:ed:17:74:a5:64:25:c7:2d:c6:
                    d4:b4:fb:d4:ba:0f:51:be:c8:db:68:ce:12:a7:d8:
                    79:06:b0:4c:46:0a:ef:06:3e:55:22:cb:97:0d:6d:
                    f1:bb:cd:c6:df:cf:d5:e8:04:2b:65:82:59:0c:37:
                    7d:ed:d9:81:af:47:7a:05:fd:4b:44:21:e8:52:15:
                    87:42:e4:34:3d:0d:c8:9a:0b:5f:61:8c:4c:c4:58:
                    c4:47:21:f4:e5:c6:19:b5:4f:94:30:ed:14:d5:e1:
                    01:44:29:47:21:d7:20:b7:1a:52:10:b7:b2:87:e7:
                    07:ee:24:d5:4b:2b:d8:4d:b4:a4:8a:46:63:02:f3:
                    e3:ac:95:d2:64:b7:92:e6:f0:41:01:63:7e:4e:73:
                    7a:0a:60:ed:57:99:b4:51:af:d9:c1:88:97:1b:90:
                    17:ac:b4:5d:3e:89:ea:74:a4:78:e2:42:94:31:bd:
                    9b:8b:8b:d3:e4:11:f6:ac:b3:5d:0a:e9:2d:1b:c7:
                    b4:48:e9:55:60:08:ba:7b:46:92:3f:2f:50:cb:07:
                    0d:e2:2a:f0:0c:09:44:d3:81:e6:1f:48:1a:b7:13:
                    ab:67:c1:34:ac:7b:29:5a:41:e8:12:d2:60:30:cc:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:06:91:A5:15:F1:01:1E:DC:83:B0:B8:5E:0A:DD:C0:BB:F7:FE
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ef:eb:ca:11:2f:dc:1e:63:73:4a:9b:5f:9b:87:17:af:a5:
         c6:84:47:5c:be:7c:af:54:ef:5c:2e:82:f7:fc:41:e3:a1:58:
         db:97:7c:0e:87:05:58:ed:56:74:84:3b:92:1f:6a:ba:a0:32:
         14:59:26:ac:98:49:00:f0:c4:5e:f7:d9:19:65:09:b4:f6:df:
         fc:43:30:67:57:32:62:bc:99:c7:b5:37:54:45:c0:bd:a1:f6:
         9c:7c:b3:d2:6a:4a:02:6d:c6:ac:37:13:c2:4e:34:ff:e5:aa:
         93:ac:45:4a:ed:13:17:a6:83:f5:73:07:4c:f0:79:04:93:cc:
         b1:e8:cc:1d:9a:e6:47:fe:7e:21:74:5a:ee:1e:e4:0d:58:31:
         d5:75:77:20:af:4c:3e:37:4b:2f:1b:95:15:b4:fc:11:2f:dd:
         1a:35:56:4f:ac:a0:13:13:5c:b5:91:7b:23:c5:b9:42:d6:9b:
         17:6a:97:0a:d7:54:84:93:49:74:25:3d:18:27:d3:52:ee:7d:
         9a:2f:3b:0f:f5:9b:10:8d:c4:5a:5a:77:43:f9:87:93:35:13:
         8f:cd:e3:0e:8c:53:7f:7b:29:6b:d2:86:29:f8:d5:f0:97:7a:
         50:28:fc:27:96:ef:fc:40:02:38:d3:65:27:55:3f:0f:cd:b5:
         db:f1:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:39:21 2026 by rpki-client