Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
File:                     MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft (raw, json)
Hash identifier:          /n8DMEc2s0bc9wdwzGZ8dCEIE65D2MfAenBZIBNP+7Q=
Subject key identifier:   9C:BD:2E:99:4E:BA:7D:47:30:1E:0F:3D:F2:B5:B4:5E:F4:4B:34:A7
Authority key identifier: 30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A
Certificate issuer:       /CN=F365972AAF/serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
Certificate serial:       040E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
Manifest number:          040C
Signing time:             Thu 06 Aug 2026 03:49:19 +0000
Manifest this update:     Thu 06 Aug 2026 03:49:19 +0000
Manifest next update:     Sat 08 Aug 2026 03:49:19 +0000
Files and hashes:         1: MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl (hash: Jk4pIr5pTrGv1jtqLtyDCVhLETKomq+JLcS+KHS/1iA=)
                          2: 92399C0CCFB511F0886853A2DAE4EC9C.roa (hash: 8B6wU1xY38cYhzr9lZGnTjsUMM95hSXAG9bGNEVmCPI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365972AAF, serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
        Validity
            Not Before: Aug  6 03:49:19 2026 GMT
            Not After : Aug  8 03:49:19 2026 GMT
        Subject: CN=6a74043f-1084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:08:30:9a:43:19:81:48:79:2f:21:2f:b2:
                    70:a0:ca:91:81:db:e5:25:b6:8a:a4:50:d6:b8:b6:
                    ec:00:f3:54:91:c0:33:07:e3:7e:09:33:6e:b2:aa:
                    24:ad:bb:94:da:fd:4c:3d:90:fb:c1:80:d2:f9:c6:
                    6a:7a:eb:6a:c6:ef:8b:bc:a2:b3:36:34:f7:2f:c1:
                    05:03:01:e9:e8:b6:97:46:16:30:ce:e4:e2:3c:60:
                    e5:1b:27:f2:34:02:96:1d:cd:f9:91:af:98:fc:10:
                    ab:1f:54:6c:1c:c0:5c:b0:3e:10:65:16:d5:56:1b:
                    32:74:84:e4:49:a4:c8:ff:81:9d:5b:2c:c7:a4:87:
                    8f:af:78:95:a1:0d:c5:b1:d7:4e:cb:12:fd:d5:ca:
                    e4:f9:ec:7f:05:27:85:3c:1d:80:d7:68:fc:d7:af:
                    f7:df:64:b7:dd:60:c0:01:06:7f:91:03:44:8f:d8:
                    bc:da:7b:a3:0a:0c:3d:cc:4b:ec:73:dd:ef:d6:e4:
                    ae:28:61:74:9e:95:c4:b8:a7:29:6f:cc:e8:7c:e7:
                    e2:8e:66:cc:a4:38:54:4c:92:4c:b3:9d:24:a4:39:
                    77:85:ff:1e:06:af:33:a4:96:a8:30:1d:49:db:2d:
                    23:1b:01:68:61:ff:a2:fd:7e:79:f4:3f:43:a7:bf:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BD:2E:99:4E:BA:7D:47:30:1E:0F:3D:F2:B5:B4:5E:F4:4B:34:A7
            X509v3 Authority Key Identifier:
                keyid:30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:cd:56:38:ba:28:c9:5b:6d:b5:b6:4a:e2:03:55:34:89:8e:
         ed:7e:9f:f2:25:2c:7d:7d:84:42:5d:c8:33:35:dc:e0:da:32:
         b6:97:43:26:d5:50:1d:37:a5:53:0a:01:28:1b:44:15:54:29:
         cd:2f:98:10:2b:ff:e1:1b:c2:e7:f5:8f:d1:30:88:3a:48:46:
         54:83:f5:cc:39:0b:18:6f:fa:23:49:35:a2:45:09:b1:19:0a:
         c6:d8:49:5c:dd:8f:d8:0e:a0:3f:a0:f2:8d:47:d9:1e:60:a5:
         1f:8a:56:2a:e3:f0:6c:ea:eb:8c:30:e6:4c:b0:7a:d9:d7:3c:
         c4:bc:f7:1b:12:7c:1c:4a:9d:1e:e3:68:d0:91:9f:72:20:fc:
         ae:61:d4:f2:22:0f:89:10:64:f0:ba:95:50:c5:20:5f:04:3a:
         75:05:81:4b:b7:91:ba:aa:c6:2e:44:6e:b0:6d:09:4b:31:0d:
         7c:df:6b:44:1b:f5:9d:73:56:7c:bd:7e:f8:13:e0:5f:e5:22:
         48:38:02:7e:66:1f:0d:24:99:87:6b:6e:1d:91:8b:42:22:5c:
         8c:b3:db:b8:46:20:c3:39:16:d4:21:c5:3b:46:94:fc:7f:54:
         e8:94:0e:98:43:76:21:9b:b5:b1:8a:4c:86:7d:10:42:ef:90:
         47:9e:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:40:07 2026 by rpki-client