Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          1jnM37lkBCCCBnaCIrLb1aFjaMTOVSXZupTuVOqdPAI=
Subject key identifier:   DB:70:76:B1:2E:5F:50:C0:D7:B2:75:0A:98:CA:D8:DE:E8:78:7F:85
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       0412
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          0412
Signing time:             Thu 06 Aug 2026 03:47:44 +0000
Manifest this update:     Thu 06 Aug 2026 03:47:43 +0000
Manifest next update:     Sat 08 Aug 2026 03:47:43 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: ZA3GybzQ2js5VWm511lOt9MGTMfF+e1oojJ0WmczV5g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF, serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
        Validity
            Not Before: Aug  6 03:47:43 2026 GMT
            Not After : Aug  8 03:47:43 2026 GMT
        Subject: CN=6a7403e0-b190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:2b:ac:5a:d2:f1:41:e7:25:83:e7:7c:fe:
                    3d:fb:58:db:70:5a:5f:81:c8:bb:d6:c0:2a:68:b3:
                    6b:b2:23:f1:a2:e8:36:69:a1:53:ca:52:c1:73:71:
                    36:ff:05:bc:5a:24:c1:eb:cf:28:12:8a:fb:7a:7d:
                    ea:b2:91:ea:a1:03:ba:3e:db:68:24:13:ac:2e:0b:
                    3d:de:0b:bf:0e:b5:d3:a6:2e:46:0d:82:bb:45:a0:
                    7e:c3:78:18:cf:02:84:61:98:52:72:f0:f4:e5:d8:
                    ca:31:05:78:3e:d6:81:c6:66:19:64:b9:18:d5:eb:
                    49:a9:fd:65:88:90:64:86:a1:7d:c3:31:36:ba:88:
                    09:c1:14:14:df:13:96:9a:be:c2:d2:fc:70:e6:c3:
                    f7:9d:b6:90:70:57:e0:3d:f1:f7:3b:5d:e9:f3:63:
                    bd:a3:14:98:fc:3b:cd:44:9d:d7:3f:9c:8f:1e:24:
                    58:3d:95:ce:c6:6e:1a:01:60:53:c7:2a:82:d4:be:
                    a5:a0:67:fe:cb:49:f7:5b:5e:1b:be:67:8f:4b:fe:
                    75:1d:63:00:05:ce:9b:7d:55:21:9b:03:1d:cf:3d:
                    1d:95:fe:aa:b5:41:f4:ea:f5:fa:3e:c8:11:78:c5:
                    53:b8:1f:d3:1f:a7:37:8f:a4:d0:48:5f:40:a6:88:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:76:B1:2E:5F:50:C0:D7:B2:75:0A:98:CA:D8:DE:E8:78:7F:85
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:45:b2:1f:b8:85:b5:fd:64:0b:ea:89:2f:6d:d2:f0:23:
         ed:49:9d:b6:7a:ee:63:db:02:c2:7c:88:de:0f:c0:16:24:0c:
         27:2e:94:7b:ae:88:91:6b:13:f1:c2:78:9c:9a:75:13:f9:97:
         d5:e1:7b:1e:fc:7e:c5:e3:e4:3d:08:f2:f5:86:4f:62:ff:ad:
         ec:c0:b5:4c:2b:1b:da:47:3d:78:30:d0:50:4f:5e:85:8d:e9:
         30:b7:67:b7:86:60:1d:86:a1:a4:8e:7b:8b:ba:4e:e0:42:5d:
         9d:a1:5e:86:f7:3a:21:8a:76:3a:7b:95:51:84:10:8e:db:93:
         39:d2:5b:0e:92:bd:6b:af:e9:73:25:3c:4f:39:80:49:68:b4:
         22:0f:5a:1b:e1:cd:2b:d1:c1:b7:e1:58:43:90:11:a8:f1:c8:
         8b:5d:fb:ac:c1:d2:47:9c:86:93:8d:c2:c4:e4:5c:d1:2f:b0:
         d2:33:40:5c:38:3d:69:15:15:5e:9c:d3:7e:dc:15:d3:73:26:
         01:c8:61:cb:fd:21:71:6f:64:79:81:1a:25:49:e2:33:d4:a8:
         3e:0d:75:15:53:bd:a7:db:e7:ee:12:98:71:a9:ee:fb:58:7c:
         92:49:5b:e9:7c:13:7b:37:31:2a:be:d1:fb:c9:cf:91:7a:cc:
         94:f6:ac:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTE4NTRBRjExMC8GA1UEBRMoRTdGODA5QUE2QTMxNjZCOEM1QUVDOThGQ0ZBOEY2
NTUwRTBGRTg1RDAeFw0yNjA4MDYwMzQ3NDNaFw0yNjA4MDgwMzQ3NDNaMBgxFjAU
BgNVBAMTDTZhNzQwM2UwLWIxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiHSusWtLxQeclg+d8/j37WNtwWl+ByLvWwCpos2uyI/Gi6DZpoVPKUsFz
cTb/BbxaJMHrzygSivt6feqykeqhA7o+22gkE6wuCz3eC78OtdOmLkYNgrtFoH7D
eBjPAoRhmFJy8PTl2MoxBXg+1oHGZhlkuRjV60mp/WWIkGSGoX3DMTa6iAnBFBTf
E5aavsLS/HDmw/edtpBwV+A98fc7XenzY72jFJj8O81Endc/nI8eJFg9lc7GbhoB
YFPHKoLUvqWgZ/7LSfdbXhu+Z49L/nUdYwAFzpt9VSGbAx3PPR2V/qq1QfTq9fo+
yBF4xVO4H9MfpzePpNBIX0CmiDo3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU23B2
sS5fUMDXsnUKmMrY3uh4f4UwHwYDVR0jBBgwFoAU5/gJqmoxZrjFrsmPz6j2VQ4P
6F0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxODU0LzVDRkY0QUUwNzFBRDExRUVBMkVDNzQzMzRBRDlFNkZDLzVfZ0px
bW94WnJqRnJzbVB6NmoyVlE0UDZGMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVfZ0pxbW94WnJqRnJzbVB6NmoyVlE0UDZGMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTE4NTQvNUNGRjRBRTA3MUFEMTFFRUEyRUM3NDMzNEFE
OUU2RkMvNV9nSnFtb3hacmpGcnNtUHo2ajJWUTRQNkYwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAnUWyH7iFtf1kC+qJL23S8CPtSZ22
eu5j2wLCfIjeD8AWJAwnLpR7roiRaxPxwnicmnUT+ZfV4Xse/H7F4+Q9CPL1hk9i
/63swLVMKxvaRz14MNBQT16Fjekwt2e3hmAdhqGkjnuLuk7gQl2doV6G9zohinY6
e5VRhBCO25M50lsOkr1rr+lzJTxPOYBJaLQiD1ob4c0r0cG34VhDkBGo8ciLXfus
wdJHnIaTjcLE5FzRL7DSM0BcOD1pFRVenNN+3BXTcyYByGHL/SFxb2R5gRolSeIz
1Kg+DXUVU72n2+fuEphxqe77WHySSVvpfBN7NzEqvtH7yc+ResyU9qxz
-----END CERTIFICATE-----
Generated at Thu Aug 6 11:39:39 2026 by rpki-client