Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
File:                     I78EX4uOm-g4553TEsyV7LjMYQs.mft (raw, json)
Hash identifier:          J+K7MEkQmIfAyQdVDor4MJ7AE386S9gfsKZ311KRNA8=
Subject key identifier:   98:CA:96:2E:CE:DF:68:FB:9E:B7:F6:09:EE:FE:02:61:C8:66:50:47
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Certificate issuer:       /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial:       0A89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
Manifest number:          0A7A
Signing time:             Sun 21 Jun 2026 01:21:59 +0000
Manifest this update:     Sun 21 Jun 2026 01:21:59 +0000
Manifest next update:     Tue 23 Jun 2026 01:21:59 +0000
Files and hashes:         1: I78EX4uOm-g4553TEsyV7LjMYQs.crl (hash: 9+i6eiZarm1iSGp71TLNlArJ4iUrYkqdqwbfq8YG8x0=)
                          2: D8C79F3E1B8211F18515F8AADAE4EC9C.roa (hash: mvotxfQuCAYVtuvZF60nRPCy3L7GuZHseVrsuaXjoeU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2697 (0xa89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369671EAF, serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
        Validity
            Not Before: Jun 21 01:21:59 2026 GMT
            Not After : Jun 23 01:21:59 2026 GMT
        Subject: CN=6a373cb7-195d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:24:b7:1b:2f:81:fd:e1:6b:5e:7e:b9:54:
                    8e:9e:c4:3a:74:39:47:fe:00:86:5f:42:ec:ea:0a:
                    70:38:9b:f0:b5:44:37:1f:4c:e8:c0:1a:6f:29:05:
                    48:95:9d:27:bd:62:bc:91:59:5f:30:02:7f:cd:96:
                    ca:eb:39:1a:8c:22:c2:5f:d4:d9:04:8f:77:cb:0b:
                    dc:1f:64:9f:84:8f:7f:ae:f3:27:8f:9e:d8:4a:e7:
                    06:15:17:15:8b:a0:06:42:4c:a9:89:77:37:bc:0b:
                    c3:c7:24:ce:5a:d5:85:71:39:9b:08:85:41:9a:a1:
                    6f:1e:61:04:06:6c:fd:ab:e2:a5:2c:01:67:53:b2:
                    96:62:be:52:01:46:51:96:7e:5a:ab:16:15:f1:67:
                    6b:4b:aa:ba:26:6f:56:94:2d:4a:ec:d6:22:15:35:
                    94:f1:85:85:f4:4f:27:b5:e8:3a:6a:27:9b:7f:dc:
                    19:76:69:1c:32:96:1a:64:ec:bd:bb:02:04:7d:2d:
                    45:47:6c:12:ed:a1:aa:8b:8e:fc:d9:6c:1c:64:11:
                    7f:c3:11:b3:ef:de:31:40:4b:1a:43:ab:02:1d:5b:
                    18:99:00:7c:e7:4b:8c:4d:20:ca:b9:a3:ef:cd:ac:
                    4b:75:53:e0:f8:e1:81:76:c5:07:e2:6e:ab:ca:73:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CA:96:2E:CE:DF:68:FB:9E:B7:F6:09:EE:FE:02:61:C8:66:50:47
            X509v3 Authority Key Identifier:
                keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:13:f8:b0:b1:20:65:94:50:f0:76:83:4f:82:f0:fb:e0:
         6e:80:96:fa:ee:93:67:a3:79:30:e1:e2:04:93:ea:bd:b9:d9:
         59:3f:04:4a:22:72:36:8f:68:f3:dc:89:d6:65:3a:06:92:36:
         75:68:25:d2:a0:6e:c7:3f:c6:e9:af:eb:b7:78:83:96:8e:e9:
         40:9e:43:a8:a0:5a:fc:35:23:ef:f1:06:ea:39:68:82:98:a4:
         3c:49:42:73:ca:5e:95:0d:6a:0b:ac:2d:09:f9:1f:d6:0a:ff:
         ac:09:dc:bf:4e:82:71:10:30:b6:2e:cf:b2:76:da:87:24:6b:
         84:93:0c:2e:95:b1:d6:83:e1:46:d6:63:09:4e:66:d1:3c:fc:
         fe:46:7b:40:78:27:7d:7f:cb:8e:86:13:38:d8:52:00:42:c5:
         c7:27:6c:53:88:cf:98:16:76:c1:46:60:d4:e6:33:54:18:6d:
         f9:f7:02:fa:a2:42:e5:02:3b:9c:66:c0:8d:ce:5d:25:38:65:
         98:d1:ba:fc:b6:71:96:c5:42:11:df:0f:bf:6d:43:bc:79:28:
         e7:48:68:51:71:94:56:56:43:9e:01:cd:eb:13:32:13:d4:75:
         28:3b:ff:fb:6e:df:4f:14:33:79:d0:d2:79:39:f3:48:2c:70:
         b2:6a:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:48 2026 by rpki-client