Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
File:                     pM4k_g7il2reULOd__0tfkLA8oo.mft (raw, json)
Hash identifier:          XNvSjIog1FbYBnrUHdHlw3Av9ikJRT+tMIGC+gL206Y=
Subject key identifier:   60:34:F9:72:3E:F2:5D:61:C2:60:67:D3:2A:36:2E:92:D7:46:01:79
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Certificate issuer:       /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial:       083E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
Manifest number:          083C
Signing time:             Thu 06 Aug 2026 01:57:19 +0000
Manifest this update:     Thu 06 Aug 2026 01:57:18 +0000
Manifest next update:     Sat 08 Aug 2026 01:57:18 +0000
Files and hashes:         1: pM4k_g7il2reULOd__0tfkLA8oo.crl (hash: vpdY//LM8qEH62Q/x1kEvzdOGB815OZ0r9nP3admK4I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36987B2AF, serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
        Validity
            Not Before: Aug  6 01:57:18 2026 GMT
            Not After : Aug  8 01:57:18 2026 GMT
        Subject: CN=6a73e9ff-c381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:2b:bd:fa:08:97:6e:c6:cf:ae:29:06:cf:
                    f3:d5:58:d3:de:ef:3c:41:8a:3d:f1:98:6f:d0:88:
                    37:c3:f9:7a:d0:e3:4a:b4:79:24:68:c7:f5:df:56:
                    bb:1a:3c:60:f6:41:37:c6:8e:02:9e:a8:a1:7d:dd:
                    ad:ae:7b:fe:85:c3:05:0b:97:a0:a0:74:a4:f3:84:
                    00:e5:13:e7:2e:61:8b:fe:06:b2:a6:b4:fd:1f:3a:
                    a9:15:d5:2e:a0:45:59:d7:98:37:23:2e:a4:e0:75:
                    48:de:ab:69:c0:0f:22:64:ac:71:63:d2:94:38:77:
                    24:d6:a3:6c:09:9f:25:d4:0e:04:c2:52:7c:28:b8:
                    e3:a2:8e:5f:74:47:b0:df:23:1d:40:38:d1:d5:7e:
                    64:00:30:78:7d:78:ba:a1:31:cc:df:75:83:fe:0b:
                    b1:e7:09:8c:ee:96:a1:bb:19:10:1f:c0:31:78:cb:
                    2d:4c:1a:70:c1:1f:ce:dc:03:ed:95:1d:46:1d:b8:
                    dc:e0:ed:02:58:06:dc:cb:d3:67:ac:c2:58:c5:d4:
                    b1:a9:f5:20:cc:0d:47:72:7b:3e:0d:e5:e7:e4:b2:
                    60:25:fa:60:e6:22:86:ff:eb:a5:d6:a8:71:b2:a3:
                    55:10:f6:3c:c1:54:74:a2:29:eb:c9:5b:e0:25:bc:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:F9:72:3E:F2:5D:61:C2:60:67:D3:2A:36:2E:92:D7:46:01:79
            X509v3 Authority Key Identifier:
                keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4f:74:d9:9d:dc:ed:ac:35:14:b3:45:44:33:ed:dc:8f:be:
         ef:d4:14:17:81:08:15:2c:e3:c9:b3:9e:fb:2b:a6:b7:4a:b9:
         7d:b0:d1:43:a9:28:76:44:88:0f:71:d5:05:62:36:4f:d5:5a:
         00:de:b5:33:ee:61:e6:a3:2c:72:fe:4e:8c:be:71:ae:ba:fb:
         82:54:2e:c0:06:d8:da:ae:61:57:9e:a3:8a:2a:3f:84:7b:10:
         5b:44:9e:0a:4c:f9:a6:50:5c:e1:e5:56:c4:ad:9d:77:28:8e:
         6d:b3:28:07:9d:5a:16:9f:c1:c2:6d:b4:e2:a5:03:e5:ec:75:
         75:c5:46:1b:5a:0e:49:f2:10:9d:2b:22:f1:da:c2:1e:08:d3:
         fb:47:63:53:eb:81:e9:22:93:35:c7:92:90:3d:17:f5:2e:7d:
         1b:23:20:65:2a:4f:49:46:76:cb:81:e2:e4:90:cd:cb:a7:d8:
         d6:2a:03:27:64:ec:ca:39:77:f5:0f:3f:95:35:38:5d:d1:f7:
         17:80:92:6b:4c:c1:63:fa:35:8b:64:94:67:82:f4:bb:88:56:
         42:24:c6:e4:fa:04:b4:c8:3c:37:f7:d9:4e:ff:56:a6:64:90:
         21:4f:f4:41:4a:fe:f9:4d:f3:de:c8:61:93:d2:42:39:11:57:
         db:f5:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:40:18 2026 by rpki-client