Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File:                     shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier:          SFFRcyiAkIXPISNYQTyxgZaBENlbdG2S2oMmaouLPZU=
Subject key identifier:   A3:2E:32:8B:F3:F5:E6:AB:4B:63:2E:0F:47:88:C3:E1:C7:3F:76:5E
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer:       /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial:       03C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number:          03BF
Signing time:             Thu 06 Aug 2026 03:57:46 +0000
Manifest this update:     Thu 06 Aug 2026 03:57:46 +0000
Manifest next update:     Sat 08 Aug 2026 03:57:46 +0000
Files and hashes:         1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: CRNOkOLlWlIteN3K3kOK0KH3pr1QYx/roq9sHyQ7e6A=)
                          2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
        Validity
            Not Before: Aug  6 03:57:46 2026 GMT
            Not After : Aug  8 03:57:46 2026 GMT
        Subject: CN=6a74063a-cdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:f6:08:54:4f:43:b5:ed:8d:97:e4:c9:f1:
                    be:fd:eb:0e:b5:4a:ab:e7:5c:07:7d:b5:d4:64:36:
                    0c:7b:25:ca:5c:88:5d:93:3a:48:82:53:3f:12:1b:
                    a3:72:55:64:56:bd:3f:ad:11:96:a6:08:5e:25:4e:
                    30:a1:d8:b2:ad:09:a0:4f:cc:0e:7e:5f:8c:4f:85:
                    8f:81:6f:78:dd:08:71:9f:4e:84:f4:f9:0b:7b:aa:
                    8b:31:cc:16:03:4c:58:b4:75:e9:6b:63:4d:f3:62:
                    3a:28:ce:db:60:2c:3b:03:8a:9a:3d:aa:81:36:98:
                    a5:c7:83:4a:b7:d3:af:a4:59:06:21:1d:3c:5e:94:
                    f7:1e:35:74:96:09:77:ba:48:4b:7a:b8:a4:15:12:
                    7c:ae:c6:52:15:1b:b2:f2:f6:00:c5:eb:b0:69:05:
                    80:08:d2:56:72:98:e3:3f:1b:15:e9:8e:79:b2:cc:
                    08:48:49:3a:66:f9:97:3d:5b:5d:68:98:ba:58:25:
                    e6:6f:16:81:d4:a0:ed:8d:2f:06:49:5b:28:37:12:
                    0d:16:1c:f4:69:84:cd:57:38:b2:bb:ec:78:aa:79:
                    72:b0:65:00:22:f3:b6:d1:97:d5:b5:80:c6:2c:a8:
                    c8:51:c7:2c:c7:44:0f:aa:6b:b2:90:da:18:6b:fb:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:32:8B:F3:F5:E6:AB:4B:63:2E:0F:47:88:C3:E1:C7:3F:76:5E
            X509v3 Authority Key Identifier:
                keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e8:f1:41:77:77:24:52:7d:89:b6:2e:ca:d4:e1:94:55:ee:
         ed:6e:d6:fa:a4:52:fb:6f:7f:ac:73:dd:df:07:de:d5:0c:d3:
         19:91:b5:da:41:c3:4f:39:ac:95:b1:84:3e:25:3d:dc:ac:c2:
         b6:5a:98:06:58:e2:d7:2b:ef:a6:ad:a3:f2:e2:b5:2e:77:42:
         7b:28:70:15:0f:31:cc:cc:b4:47:89:94:c4:78:79:eb:e9:f0:
         41:55:74:2e:29:c7:19:26:7d:b3:c7:7a:d3:84:77:5a:03:a0:
         ac:91:bf:41:a6:75:df:ee:3e:9e:fd:cb:2d:6a:0c:12:77:bf:
         71:90:46:17:46:62:85:87:fc:e8:f4:c2:2e:2c:9f:9e:f0:f3:
         42:19:84:c8:94:56:0c:a8:2f:e9:a8:71:0e:ca:c2:24:2c:33:
         1b:17:9d:1b:b1:04:a6:14:c6:4c:9b:67:b3:b6:86:7b:5f:6e:
         35:99:ab:e1:16:85:5f:c8:9d:ce:39:0d:5d:13:b7:1e:3f:89:
         bc:c2:7c:95:a1:eb:e3:2f:98:c3:92:3a:b2:97:12:43:6e:42:
         2b:e6:b5:54:60:ee:1e:0a:15:31:a6:b3:b7:77:cf:04:5a:bf:
         4e:9f:b9:a3:f7:96:8c:4f:4a:5e:1a:45:c2:11:79:c5:32:30:
         88:58:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:42 2026 by rpki-client