Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          sVvQkHbd4UQgU/VN9lEAVjQ0HOWOCfc/0P55ovDvCgA=
Subject key identifier:   56:C1:98:EF:36:27:23:43:50:43:46:50:79:24:CA:EE:6A:03:B1:97
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       077B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          0779
Signing time:             Sun 21 Jun 2026 02:08:39 +0000
Manifest this update:     Sun 21 Jun 2026 02:08:38 +0000
Manifest next update:     Tue 23 Jun 2026 02:08:38 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: C9jKxDDks6S6xeIL4n28qFvcLj7TzQuFSBw9eAoBVKU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Jun 21 02:08:38 2026 GMT
            Not After : Jun 23 02:08:38 2026 GMT
        Subject: CN=6a3747a7-b372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:dc:8b:cb:b7:1c:e9:29:24:3c:95:56:c0:d1:
                    48:40:c6:70:cd:ec:79:31:ba:94:07:18:80:d8:3e:
                    5f:5f:60:06:ed:a8:d5:f0:80:ac:88:9c:06:46:90:
                    b8:6c:73:78:73:cb:f0:be:75:15:07:ba:9d:2f:ad:
                    cb:f0:ed:d0:21:0d:c6:dd:3a:f0:43:dd:e8:a0:0e:
                    32:be:99:8e:48:f8:0a:d4:ce:c0:eb:59:42:e6:e0:
                    1e:af:0c:9a:f0:80:0d:92:69:8b:cd:f8:2d:73:1a:
                    98:d3:15:0c:24:0f:37:fa:8a:0d:e7:a7:28:d1:ed:
                    0c:2f:ee:db:57:f6:d1:7c:07:b1:f7:8a:5d:36:01:
                    a9:7c:86:9a:d4:fa:05:57:15:0c:04:a6:dc:ca:68:
                    bb:cd:28:fa:22:37:62:60:aa:ae:d6:c2:50:1d:6a:
                    b7:b8:4a:c7:5a:bd:c7:93:c3:99:ba:a6:c6:6e:23:
                    d0:76:54:82:c5:33:14:2f:d4:2d:19:bb:f8:4a:3d:
                    7a:23:66:7b:42:0b:f4:3e:40:e1:e6:32:a0:84:df:
                    85:a0:e1:12:3e:95:16:5b:16:a6:39:76:ee:20:25:
                    a3:02:c5:7f:b5:7e:a7:83:ea:8c:78:37:0e:12:96:
                    08:fd:13:64:1b:25:08:c9:83:1d:b0:7f:09:83:16:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C1:98:EF:36:27:23:43:50:43:46:50:79:24:CA:EE:6A:03:B1:97
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:72:df:5c:c2:d0:df:e1:00:0b:85:09:c0:64:81:88:8b:2e:
         6d:63:2b:39:58:0f:08:ba:4a:7c:12:0c:8a:37:f3:da:28:ea:
         d1:92:41:70:99:89:b3:d5:93:25:b6:a4:3a:c6:78:94:6f:e4:
         6c:c0:d4:ca:ae:10:06:cf:63:9a:9b:9d:69:4b:4b:ef:d2:83:
         82:3b:12:33:01:05:ca:96:2c:27:45:cb:fa:35:c7:a0:1e:08:
         97:64:62:f0:4e:33:d6:65:72:f2:66:c8:be:db:78:8b:5a:0f:
         72:0d:42:34:79:da:c6:db:68:21:86:d7:25:05:66:df:6d:7e:
         d2:74:63:34:9f:46:e3:b9:3b:f0:bd:54:d6:46:82:ae:78:58:
         6d:32:68:74:0c:6c:11:75:6f:1e:df:6a:21:68:c4:e1:42:a6:
         a4:8a:9a:77:04:ef:c3:33:c0:90:59:2a:83:7f:86:3a:34:9e:
         29:96:c4:0f:ff:96:ed:72:e5:b9:10:4b:19:c4:a3:bd:a1:43:
         61:be:81:01:d5:5e:6c:d8:38:c2:6e:e0:50:d3:7b:44:f1:4b:
         cb:43:59:4a:23:62:6d:0d:a5:a9:16:3f:a7:2c:e2:87:e1:6d:
         b9:8e:85:c8:e8:37:62:12:fd:74:1e:5b:26:01:55:0a:bf:da:
         be:05:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:18 2026 by rpki-client