Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          zDUw8CVC0drd0vUmNWHW7C6pdEo9GbLl+LujXwf6dek=
Subject key identifier:   46:FD:D4:8B:9A:11:47:CB:BA:67:43:57:68:91:D7:61:99:CB:1B:94
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       03C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          03C1
Signing time:             Sun 21 Jun 2026 03:53:34 +0000
Manifest this update:     Sun 21 Jun 2026 03:53:33 +0000
Manifest next update:     Tue 23 Jun 2026 03:53:33 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: hBiNicOCeeUKSzr8PTue1r02UgtLdt6UAFTo+SsPqZM=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF, serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Jun 21 03:53:33 2026 GMT
            Not After : Jun 23 03:53:33 2026 GMT
        Subject: CN=6a37603e-9f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e9:0b:b4:35:46:c3:0a:74:6d:70:e6:af:74:
                    15:2e:39:42:49:46:d1:09:34:65:8f:30:d2:91:b3:
                    4c:6e:4d:aa:a2:b4:9d:24:88:9f:17:be:4c:40:20:
                    ad:28:25:93:70:ab:d6:83:fe:3e:f6:1e:66:28:e1:
                    ac:25:1d:9f:a5:06:ba:eb:5e:94:84:21:26:f8:ae:
                    7d:a1:5b:50:91:57:74:c4:34:89:c7:8d:c9:f1:5c:
                    df:64:c1:ee:ea:70:47:e9:58:e9:9b:13:e3:cb:5b:
                    1a:96:84:66:38:37:ad:49:79:75:85:d0:df:06:98:
                    77:2b:c7:84:32:58:b6:6a:07:eb:26:c0:5a:fd:f3:
                    14:6b:36:f2:62:ab:ab:16:72:21:57:85:88:87:bb:
                    0e:31:5d:9b:96:de:77:cf:3a:79:1e:d3:d2:26:ad:
                    f0:0c:b8:14:c9:59:6f:ed:51:e0:96:99:fa:f4:22:
                    ad:fa:be:67:e9:cc:5e:ee:cd:69:21:99:a8:11:dc:
                    a0:7a:07:f5:23:d7:19:a2:fd:dd:69:fb:d1:f1:1a:
                    96:b4:64:79:ae:23:b6:aa:33:99:6c:ea:5e:b3:2a:
                    6e:98:ab:ed:53:cd:fe:45:d7:29:27:65:16:c4:7c:
                    fb:7e:f1:8e:eb:38:a6:da:90:56:17:2a:10:45:0d:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FD:D4:8B:9A:11:47:CB:BA:67:43:57:68:91:D7:61:99:CB:1B:94
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:59:fc:f6:6c:36:a6:57:e2:64:d3:95:c7:1c:04:1d:e2:05:
         c7:ce:a4:68:ce:02:ac:b4:1f:a4:5e:f4:41:4e:28:b5:8d:40:
         65:4b:40:cf:3f:2a:bd:c5:17:01:51:45:e5:6b:73:e3:95:cf:
         48:c8:6d:84:15:58:9c:51:17:4b:01:e2:af:d9:aa:ce:45:f3:
         11:8e:6d:b9:83:22:82:70:7f:85:b9:84:04:1a:53:96:0f:b3:
         5e:d3:fa:69:5f:0d:17:d2:97:9c:ac:e2:dd:01:65:b5:71:59:
         97:53:5c:e0:6b:49:8a:63:07:2b:d9:c0:e1:ae:2f:7c:45:f4:
         4f:74:e0:bb:3f:cd:cd:29:5d:69:48:5f:11:5d:47:6e:bf:be:
         87:93:0e:72:19:31:ce:22:60:ce:76:dc:63:62:33:48:cd:84:
         ca:16:eb:de:dd:e1:75:05:d4:ed:17:36:75:6d:15:f8:ab:6d:
         d5:bd:3c:80:a4:86:bd:8b:4f:7a:4b:c0:96:83:94:68:ac:65:
         1c:63:6a:a0:59:d1:8f:18:a7:7e:26:5e:ab:37:d8:3f:f9:fb:
         29:a6:8e:ef:76:ac:eb:a9:2e:05:0a:98:14:76:da:49:49:77:
         7a:1f:5e:9f:07:3e:6b:f8:53:c3:4f:69:60:c4:f7:8c:75:4b:
         e1:fb:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:22 2026 by rpki-client