Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File:                     KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier:          xIB2oqlknsVz88umrxJDZ7PFiBGIaWOlZM5sAGJ7rqs=
Subject key identifier:   3C:DB:65:F3:8A:E5:49:C6:B0:0D:DA:F8:44:74:93:05:96:37:24:7C
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer:       /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial:       0319
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number:          0318
Signing time:             Thu 06 Aug 2026 04:16:42 +0000
Manifest this update:     Thu 06 Aug 2026 04:16:41 +0000
Manifest next update:     Sat 08 Aug 2026 04:16:41 +0000
Files and hashes:         1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: 969+wqoOHZFT7WuHwHgxGBiP2DqGc5I6uhDsS3BhwoE=)
                          2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
        Validity
            Not Before: Aug  6 04:16:41 2026 GMT
            Not After : Aug  8 04:16:41 2026 GMT
        Subject: CN=6a740aaa-7334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:b7:ba:c7:ba:bb:9d:3a:1e:cf:0f:cc:96:
                    61:86:3d:eb:2b:8b:9f:16:c8:1b:d8:a5:56:71:c2:
                    a4:8c:78:65:98:b5:08:b2:6f:19:9c:00:cf:38:92:
                    0b:a0:f9:58:97:61:60:ee:5a:51:04:ea:83:e8:aa:
                    26:23:54:62:01:ff:33:5c:7a:4d:46:a5:0e:96:0c:
                    8e:df:bb:43:8a:eb:c9:6f:66:e8:6c:7a:f7:30:18:
                    b0:ab:06:83:76:92:bc:d5:68:09:59:28:65:87:b6:
                    75:84:2a:34:39:e7:57:8f:cb:e5:fe:47:3f:db:b3:
                    0d:b1:15:59:75:23:75:dc:38:0e:e1:aa:96:e7:11:
                    3b:3e:72:f9:33:89:74:32:53:7b:be:30:75:31:7e:
                    51:df:bd:b5:a6:5d:01:b6:09:38:16:92:ce:a7:ad:
                    33:af:39:bd:fb:29:13:fa:99:9c:0b:84:e9:33:45:
                    67:f3:93:78:d8:e9:66:7b:53:a6:f9:98:2f:40:9e:
                    16:e7:19:67:75:c4:74:04:dd:8c:33:0e:f5:b0:c0:
                    fe:c5:ad:07:e5:b3:ec:31:27:dd:94:34:d8:41:e8:
                    6a:c6:ab:08:1a:1f:67:80:e9:38:df:ee:8a:5c:4d:
                    a2:20:c5:53:4c:0e:76:1c:23:1b:fb:75:98:e3:16:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DB:65:F3:8A:E5:49:C6:B0:0D:DA:F8:44:74:93:05:96:37:24:7C
            X509v3 Authority Key Identifier:
                keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:38:ad:8a:8d:6d:79:77:2b:c1:bd:7f:0c:a8:dd:92:cc:
         0a:38:0f:14:c9:8d:78:b6:b3:26:31:80:45:29:ae:e7:f5:b4:
         41:b3:e0:68:52:27:c9:24:d5:43:59:bc:0d:75:08:86:37:8f:
         b7:3d:71:af:c8:54:20:0e:06:6b:8b:b8:26:84:c3:5b:95:14:
         fd:7f:84:16:c3:c8:d4:da:bc:36:cb:cc:85:22:dc:9d:c0:f0:
         57:d8:d0:18:e0:12:28:e0:19:ed:d3:b5:50:8d:d3:19:20:b9:
         c9:d1:f6:98:ac:3f:94:1e:72:1d:79:4d:16:10:85:f2:49:8f:
         b3:1f:a5:30:52:a0:58:2f:e7:94:99:84:3c:0e:6a:17:2a:1e:
         9e:21:a4:8f:04:43:78:49:1a:a9:73:4e:79:76:53:51:81:99:
         9f:6e:2d:a4:6c:04:1e:65:b8:09:bb:04:51:63:5e:56:bf:8e:
         e8:64:2f:8d:12:c7:2e:b9:ea:4f:a1:66:6a:8a:26:84:be:3d:
         a1:a3:04:14:4a:c6:b9:d3:82:af:7d:a5:36:12:62:17:f6:5d:
         52:a8:d0:aa:88:c5:ab:c0:53:41:c0:aa:c8:d6:43:46:b5:fe:
         6a:72:0e:36:0b:f8:59:bf:9f:24:67:a1:5c:14:56:68:2c:4e:
         47:73:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:38:27 2026 by rpki-client