Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          Bl2F6fIB/L1byfo2bcvAW0OkS0G3rNFvEhxNrnIyCL8=
Subject key identifier:   4C:A6:8A:53:D4:3E:AC:18:0B:34:5D:B4:D1:95:05:D6:1D:D4:5E:BF
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       061B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          0619
Signing time:             Sun 21 Jun 2026 02:42:10 +0000
Manifest this update:     Sun 21 Jun 2026 02:42:09 +0000
Manifest next update:     Tue 23 Jun 2026 02:42:09 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: C1a2K4iTX32N+0p5gV3xN2TCh1VF9w38znrJQ7ZEC5c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: Jun 21 02:42:09 2026 GMT
            Not After : Jun 23 02:42:09 2026 GMT
        Subject: CN=6a374f82-c5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:f9:84:c2:12:43:77:b9:7e:be:6e:13:b5:
                    70:8d:3f:7a:da:f1:76:63:fa:ac:92:ea:f9:5f:38:
                    0d:a0:30:3a:a5:06:0c:e7:22:0f:88:59:b2:b0:ad:
                    8a:2c:bd:4e:5c:be:9d:c7:e3:15:05:b9:58:23:d4:
                    c0:1e:53:88:a4:59:6c:8d:d4:f3:70:7c:cd:67:85:
                    64:c1:db:e2:06:86:23:d5:70:da:77:28:92:fc:e1:
                    e2:d9:3c:78:fc:17:d2:ef:fa:44:e6:da:49:b0:f1:
                    db:f6:8c:5f:2e:d4:07:dc:c3:35:85:fa:c6:c5:15:
                    f1:a8:90:b3:c6:07:ba:5f:b1:13:4c:d9:c3:0a:e9:
                    cc:a4:62:49:65:a9:33:c1:ae:63:18:4c:db:b0:0a:
                    cd:d5:28:6d:0e:3e:45:96:7b:eb:c9:95:1d:10:a2:
                    7f:dd:9e:71:59:f9:89:bf:d8:c2:88:d0:c3:54:26:
                    c9:0f:b3:8e:96:8a:f5:78:2e:26:47:fb:48:d9:ed:
                    08:1f:54:bf:26:3e:ba:08:14:29:1a:5c:7f:00:37:
                    24:42:e3:ca:eb:4f:e2:21:06:04:3d:ea:7b:ef:c1:
                    0d:0c:ff:dd:19:d4:b2:1e:e8:03:60:8e:37:6b:19:
                    49:a2:f5:23:98:1f:3c:2d:77:98:6d:bf:05:02:18:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A6:8A:53:D4:3E:AC:18:0B:34:5D:B4:D1:95:05:D6:1D:D4:5E:BF
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:48:ec:d4:8c:ef:e1:02:2d:8a:4c:c2:56:5f:e7:26:e9:6d:
         88:41:2f:35:0e:c3:b3:3e:19:f2:31:be:96:d5:c2:24:08:d9:
         d6:7f:c4:84:61:21:27:00:12:bf:ce:9a:b3:02:ed:4f:dc:80:
         99:4c:c9:69:46:59:04:89:2c:24:87:de:ef:b1:a8:07:ea:c2:
         db:78:26:fa:32:0c:6b:fd:4f:47:f7:2a:9c:02:82:35:81:9b:
         95:7f:30:cd:64:45:14:fa:bb:6d:4c:37:7b:b1:49:37:52:59:
         e7:18:a3:82:b2:2a:f5:69:43:f1:18:c5:39:54:a8:be:5c:4f:
         e4:1d:d4:72:34:a4:5f:c4:31:73:ec:9b:66:54:38:79:e8:ce:
         90:aa:66:dc:b1:94:40:c0:20:93:61:65:0b:a0:e9:2c:a1:3a:
         ec:72:ae:93:7e:74:01:3e:3c:7c:41:75:dd:e8:7e:87:ef:13:
         2f:05:6c:de:da:2d:f8:68:6c:cb:d9:b5:4c:88:ad:9e:62:84:
         04:7f:1d:fb:eb:d2:27:91:f2:7e:5b:91:81:a0:c6:44:40:eb:
         9d:03:27:de:55:78:99:e6:5b:8e:f4:57:0c:59:d0:9f:fe:b2:
         b5:c2:af:6a:0d:bc:1e:fa:04:06:23:1c:29:72:c0:16:25:11:
         87:1e:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:44:09 2026 by rpki-client