Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          Im+WPbEaMBkOa/RdAu0tOZh4ugXVyR8k++bxIVP7bis=
Subject key identifier:   48:6C:E4:59:BD:F2:94:04:4D:EF:56:1D:B4:8A:48:31:3E:AC:08:02
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       0365
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          035F
Signing time:             Thu 06 Aug 2026 04:10:17 +0000
Manifest this update:     Thu 06 Aug 2026 04:10:16 +0000
Manifest next update:     Sat 08 Aug 2026 04:10:16 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: g1u4AkrKY7s6QTc3w1jehfn3ckf4gA36nG/1PBfb1vw=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Aug  6 04:10:16 2026 GMT
            Not After : Aug  8 04:10:16 2026 GMT
        Subject: CN=6a740929-dbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:9a:eb:dc:0c:24:68:c7:30:45:c5:4f:0e:
                    ed:4a:f8:d0:d2:81:b7:bf:ed:2a:9b:4a:6b:1f:d6:
                    ab:0a:fa:8d:18:e3:5d:22:21:e4:7f:5a:a9:0b:fd:
                    d1:89:15:eb:92:80:91:fa:be:a6:34:a8:fb:e8:c5:
                    fd:24:3d:a1:bb:87:66:58:d6:b1:8a:43:f3:11:41:
                    e7:1a:2f:bd:a9:6a:34:1d:d9:b2:1b:f7:00:cc:f4:
                    57:b9:42:16:38:f8:ed:04:9e:bd:4c:c8:e9:03:ed:
                    24:20:0d:40:5c:1e:5d:38:77:1b:8c:a6:9e:e5:22:
                    a7:b7:40:42:be:6e:be:04:4e:95:0c:63:71:9e:94:
                    2f:7a:d9:71:65:e6:53:5d:a7:8f:87:3d:c1:09:b2:
                    18:70:19:78:7e:24:bb:ba:bf:ae:36:ae:6f:86:14:
                    30:0e:83:14:45:ca:39:18:60:66:f4:64:1a:e3:24:
                    b5:ee:7b:25:2d:2d:bb:b2:ec:55:89:20:81:cf:a8:
                    5e:93:b6:24:71:9d:f2:05:9b:18:97:c2:d0:f1:2d:
                    96:73:cb:01:7e:dd:7f:df:d1:a4:e9:64:b6:66:d3:
                    6f:9f:c5:e1:2a:0d:52:c7:d3:43:c8:18:61:49:45:
                    43:46:84:7c:9f:85:a9:c5:b0:f6:b7:11:b4:d4:2e:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:E4:59:BD:F2:94:04:4D:EF:56:1D:B4:8A:48:31:3E:AC:08:02
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:13:8c:51:3d:c1:e0:aa:61:cf:85:ac:a6:e2:ea:89:45:4e:
         12:e4:1e:4d:df:33:0e:29:18:5c:ac:69:15:15:5d:ee:9c:6b:
         f3:5d:0d:aa:d0:cd:3c:71:2c:7f:2b:25:fa:e2:5e:41:53:47:
         57:68:31:e4:c8:df:51:1f:28:45:8f:b0:3f:c7:e6:aa:a1:99:
         9e:b2:76:b5:56:1e:18:bb:a3:c7:9c:fa:73:4a:32:57:6c:15:
         53:d2:c6:67:96:ec:a1:d8:2d:90:d9:a0:f4:a2:c5:b5:34:8b:
         c2:de:de:03:5f:24:7f:0a:ea:5d:fc:50:ff:d4:54:d0:8c:bb:
         14:98:08:72:0e:40:87:c5:7e:84:83:f1:67:bf:a3:98:37:5c:
         2e:31:c9:f2:10:ed:8b:a0:5e:42:91:51:13:fd:c6:9c:f1:a7:
         7d:4b:f0:8c:30:ec:1f:f9:74:07:14:d3:49:c2:84:dd:98:a1:
         74:bb:d8:4f:2a:8c:a1:de:f8:6f:44:65:52:3d:57:c0:78:ef:
         f6:71:e1:e6:e3:0b:b0:d9:b2:fe:02:c6:e4:de:67:f7:49:69:
         7b:e2:72:6a:d1:03:49:a3:e2:fe:68:8e:d3:7c:a2:70:d6:0f:
         ba:42:6d:49:f5:d9:cb:8b:96:a9:2a:41:34:55:e0:58:c9:b2:
         b9:0e:65:13
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTNBRTBBRjExMC8GA1UEBRMoMDlCMzRFMTMzNjM5RDNCNEVFMzUxNjEzQjhBNjBE
NkIxOTAyQUQ2MzAeFw0yNjA4MDYwNDEwMTZaFw0yNjA4MDgwNDEwMTZaMBgxFjAU
BgNVBAMTDTZhNzQwOTI5LWRiYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6GJrr3AwkaMcwRcVPDu1K+NDSgbe/7SqbSmsf1qsK+o0Y410iIeR/WqkL
/dGJFeuSgJH6vqY0qPvoxf0kPaG7h2ZY1rGKQ/MRQecaL72pajQd2bIb9wDM9Fe5
QhY4+O0Enr1MyOkD7SQgDUBcHl04dxuMpp7lIqe3QEK+br4ETpUMY3GelC962XFl
5lNdp4+HPcEJshhwGXh+JLu6v642rm+GFDAOgxRFyjkYYGb0ZBrjJLXueyUtLbuy
7FWJIIHPqF6TtiRxnfIFmxiXwtDxLZZzywF+3X/f0aTpZLZm02+fxeEqDVLH00PI
GGFJRUNGhHyfhanFsPa3EbTULuPlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSGzk
Wb3ylARN71YdtIpIMT6sCAIwHwYDVR0jBBgwFoAUCbNOEzY507TuNRYTuKYNaxkC
rWMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzQUUwL0JCRTUyRkYyMDBFMTExRUZBRjg0RDYwNzAxNzAwMUIxL0NiTk9F
elk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NiTk9Felk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3
MDAxQjEvQ2JOT0V6WTUwN1R1TlJZVHVLWU5heGtDcldNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXE4xRPcHgqmHPhaym4uqJRU4S5B5N
3zMOKRhcrGkVFV3unGvzXQ2q0M08cSx/KyX64l5BU0dXaDHkyN9RHyhFj7A/x+aq
oZmesna1Vh4Yu6PHnPpzSjJXbBVT0sZnluyh2C2Q2aD0osW1NIvC3t4DXyR/Cupd
/FD/1FTQjLsUmAhyDkCHxX6Eg/Fnv6OYN1wuMcnyEO2LoF5CkVET/cac8ad9S/CM
MOwf+XQHFNNJwoTdmKF0u9hPKoyh3vhvRGVSPVfAeO/2ceHm4wuw2bL+Asbk3mf3
SWl74nJq0QNJo+L+aI7TfKJw1g+6Qm1J9dnLi5apKkE0VeBYybK5DmUT
-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:45 2026 by rpki-client