Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
File:                     WVlvdhVYQOfUJnWNllJakxzZR40.mft (raw, json)
Hash identifier:          DoehhcQatB0fLwJFvDbAQEYocvrS9LKB4THQDf5kSy0=
Subject key identifier:   08:F7:01:45:75:2D:4D:28:9C:5F:9C:FB:6B:08:9B:06:1A:68:51:73
Authority key identifier: 59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D
Certificate issuer:       /CN=F36776F1AF/serialNumber=59596F76155840E7D426758D96525A931CD9478D
Certificate serial:       023B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
Manifest number:          023B
Signing time:             Sun 21 Jun 2026 04:42:22 +0000
Manifest this update:     Sun 21 Jun 2026 04:42:21 +0000
Manifest next update:     Tue 23 Jun 2026 04:42:21 +0000
Files and hashes:         1: WVlvdhVYQOfUJnWNllJakxzZR40.crl (hash: 3PhxMxguHejeLE4Z+lXB+ijM/ZxqiixF+arrgrew2/k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AF, serialNumber=59596F76155840E7D426758D96525A931CD9478D
        Validity
            Not Before: Jun 21 04:42:21 2026 GMT
            Not After : Jun 23 04:42:21 2026 GMT
        Subject: CN=6a376bae-311c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:bc:f1:6e:37:72:fe:e0:48:8d:9e:66:fe:
                    05:1a:f6:b9:87:4d:ba:22:17:27:57:d5:5d:91:e3:
                    b4:9e:d7:5b:31:b1:66:aa:cc:0a:89:6f:78:82:86:
                    58:a4:71:53:a6:93:02:ff:9b:ac:6e:1b:49:1e:14:
                    d4:a0:27:b7:2d:6e:19:31:f8:f9:39:9c:43:f2:5c:
                    a1:16:47:ac:d7:37:2d:76:e6:cd:b8:c5:c3:7c:68:
                    45:c6:9e:e3:1d:3e:4a:8a:2a:af:d8:ad:d2:27:42:
                    a6:2a:af:4d:e1:1c:c9:1c:bf:8f:42:9d:93:dd:3d:
                    14:b6:9b:d2:23:c7:51:70:b3:82:c5:87:1a:1d:20:
                    d9:a6:1d:4c:68:3d:c6:c9:fb:dc:c7:84:91:17:cf:
                    67:6b:78:dc:96:e4:30:42:df:01:4c:5c:1e:14:56:
                    cf:a9:98:55:16:c7:b5:51:bf:60:d3:a3:77:bf:8d:
                    43:10:b7:7b:cd:11:88:92:33:21:8a:26:b5:13:7f:
                    cd:f7:32:ef:f6:2f:27:23:d8:77:47:f9:f1:ae:b7:
                    12:ee:42:b9:05:22:b4:4d:eb:94:5f:18:53:ea:04:
                    0c:95:0e:d1:97:0f:1d:dc:99:f5:67:75:2e:8c:6a:
                    d8:b6:48:5d:2b:82:93:67:e1:68:63:b5:bc:6f:23:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F7:01:45:75:2D:4D:28:9C:5F:9C:FB:6B:08:9B:06:1A:68:51:73
            X509v3 Authority Key Identifier:
                keyid:59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:7f:8a:e6:da:69:38:f5:be:0a:1a:33:09:28:30:8f:fd:
         c8:8c:ae:35:74:8e:3d:b6:dc:b0:6c:71:78:82:e4:80:7e:d2:
         cd:09:65:41:ea:04:3e:cb:c6:16:d8:c0:6b:37:f7:02:3c:a1:
         05:34:23:c1:26:97:38:ae:e3:ee:5c:ff:6d:6a:57:4c:ea:0f:
         2a:e9:0a:59:91:85:13:bf:ef:3f:45:e2:46:25:5d:12:f1:9b:
         46:89:8c:4d:d4:b8:89:13:c4:93:f8:92:74:01:36:db:0c:5f:
         21:c4:0c:ee:ff:3d:90:e8:cc:60:dc:48:f1:00:58:7e:0e:03:
         ff:88:97:90:53:a9:5d:41:9d:63:cf:dc:dc:cb:fb:6c:04:75:
         4a:e6:5d:6f:1e:09:86:e4:55:ec:ae:b3:56:8e:58:27:44:d8:
         a3:68:e5:e4:59:1e:a0:00:38:93:71:92:aa:a8:19:30:a9:26:
         e4:72:4f:69:0f:ef:62:18:73:55:eb:cb:40:b7:85:d7:2e:50:
         81:a1:25:93:28:d9:be:e1:3d:76:f8:3d:42:9a:8d:53:70:42:
         0d:53:71:4e:2a:fe:d2:85:27:bb:bc:2f:99:06:78:23:e8:9e:
         4b:19:fd:b0:17:a0:9f:f2:d5:e9:90:3d:dc:79:17:cc:1e:30:
         76:5d:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:44:48 2026 by rpki-client