Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File:                     7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier:          26gxprxr6fmrDDcpw5HWeN5JZkzlZop1OoLcatshEVU=
Subject key identifier:   A6:35:CB:26:FA:85:4F:0E:B4:F1:90:4F:CF:52:30:ED:9E:73:8C:ED
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer:       /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial:       032F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number:          032C
Signing time:             Sun 21 Jun 2026 04:08:41 +0000
Manifest this update:     Sun 21 Jun 2026 04:08:41 +0000
Manifest next update:     Tue 23 Jun 2026 04:08:41 +0000
Files and hashes:         1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: W0g2A3dS9aoW+IUzQGrS5YAxcTfPYFiUw3N4sSPhycM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
        Validity
            Not Before: Jun 21 04:08:41 2026 GMT
            Not After : Jun 23 04:08:41 2026 GMT
        Subject: CN=6a3763c9-4903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:86:84:46:e2:c8:35:52:bb:7e:cb:34:5d:
                    4f:b2:23:7c:83:d7:c2:e3:6a:1a:49:2a:bc:ff:f4:
                    83:bb:e2:a6:14:3f:a7:82:da:93:ed:30:9b:68:4f:
                    bb:4f:00:6f:9b:4e:25:9c:ea:6d:c4:50:61:2c:49:
                    9e:ae:ae:54:64:fb:e2:de:08:ef:64:7c:ac:71:30:
                    df:76:c5:d8:d7:cf:47:7c:ab:fe:38:44:24:83:52:
                    da:89:67:95:9b:e1:4a:8f:a0:7b:c5:e7:08:e7:29:
                    28:e1:00:0f:94:15:0c:c0:61:21:11:70:76:48:7e:
                    e4:f1:22:e7:b3:97:05:ab:48:5e:63:15:6a:82:37:
                    9a:ef:33:6d:5a:ae:ef:5d:11:8b:06:5b:b0:bf:72:
                    54:41:ea:36:84:6c:d4:c5:18:ff:d8:ae:04:55:7e:
                    e4:7e:46:bf:4a:ee:51:07:36:48:6d:b8:85:44:f5:
                    b5:a7:9d:fb:71:c0:21:e4:a3:26:5a:6a:ce:9b:3d:
                    12:3b:3c:6d:b8:6b:44:24:64:52:8d:c0:78:9d:20:
                    85:d9:68:b4:46:d7:25:9f:4c:21:ed:d0:16:80:92:
                    21:a1:25:06:9f:c9:d1:a8:4c:9e:05:d0:38:7b:8e:
                    e6:b0:30:39:0b:f5:0f:cb:0f:a8:94:32:1e:d1:57:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:35:CB:26:FA:85:4F:0E:B4:F1:90:4F:CF:52:30:ED:9E:73:8C:ED
            X509v3 Authority Key Identifier:
                keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:29:88:7c:81:fe:23:4a:43:10:0a:1a:8d:9c:97:70:20:
         89:5d:6a:3d:9a:c7:20:cc:e1:35:a1:f6:2d:21:7f:92:3c:99:
         cd:24:50:39:4d:b3:c0:0c:dc:cb:6c:d7:ee:cc:c7:70:d1:98:
         99:20:f5:ea:35:83:a4:ca:40:b9:16:41:a2:5d:12:a2:52:59:
         84:e8:19:6b:88:bf:da:da:87:4c:14:03:90:6c:16:8f:f8:aa:
         ab:c1:45:11:77:a7:b5:db:b8:dc:22:82:94:77:0a:a6:82:b0:
         20:42:38:e5:dd:e9:48:0d:97:5a:2c:98:51:19:5e:c1:01:cf:
         4b:7b:15:29:73:09:d6:4e:ef:8b:87:05:9a:1f:2a:fd:c6:2b:
         84:9e:1f:b8:f7:4d:7a:5a:1f:b4:1f:64:af:7e:eb:54:5b:06:
         4c:ed:c3:36:e5:5b:42:77:61:12:8d:8b:f2:ee:d9:b4:f2:30:
         8f:1c:15:3f:3b:bb:da:46:f7:70:23:d1:a9:94:1e:84:ff:be:
         e7:df:0d:0e:a7:61:6f:bc:e0:95:17:e1:82:cd:58:f1:08:43:
         87:aa:88:4e:a9:77:f8:16:0d:84:3b:8e:f4:c1:bd:ca:f9:44:
         5f:95:68:c7:f3:45:37:06:b2:65:1b:7d:da:fe:1b:59:1a:2f:
         d7:c2:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:16 2026 by rpki-client