Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          D9aRJaVbsZCTAEh+SnZAjld+8A6VT26A0VzBv0uN/Go=
Subject key identifier:   3D:D1:1B:27:AB:9B:DF:19:25:3B:0E:A5:AC:D3:39:C4:AB:75:72:32
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       028D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          028C
Signing time:             Thu 06 Aug 2026 04:38:33 +0000
Manifest this update:     Thu 06 Aug 2026 04:38:33 +0000
Manifest next update:     Sat 08 Aug 2026 04:38:33 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: wJh6C6Q7Bl72LWDU1ABIht7OqkNt219vdvE2auQcyVw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Aug  6 04:38:33 2026 GMT
            Not After : Aug  8 04:38:33 2026 GMT
        Subject: CN=6a740fc9-b76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:e7:54:b0:69:a6:33:de:be:28:f0:c6:e2:
                    25:ed:2b:9d:72:83:e2:fb:db:d3:b4:86:6a:e9:e3:
                    57:ea:35:ea:2b:f1:ae:39:56:e5:12:83:bc:b2:fa:
                    38:41:62:30:23:72:b3:12:8a:45:cb:ff:7d:91:56:
                    57:51:f0:af:17:7b:92:f0:e2:5d:4b:b4:40:f5:c7:
                    6f:5e:7f:85:49:c6:fa:75:0e:31:95:f3:80:a2:fd:
                    d7:8a:51:ea:6f:91:a8:70:0a:1e:32:d7:b1:09:9a:
                    5b:a0:ad:f6:10:d3:85:c1:59:f1:86:0d:32:24:bb:
                    48:36:43:4b:26:0b:8c:81:2f:fb:f2:ce:52:ce:4f:
                    62:ce:c3:61:90:94:19:05:7b:a7:3f:01:a6:3d:60:
                    62:d3:d2:32:52:7a:6d:e9:be:01:4d:5e:a8:80:33:
                    fe:28:c8:f8:39:9e:9f:e4:79:15:fd:94:a2:d1:f5:
                    54:a5:82:cb:56:17:fc:85:d5:3c:c9:6b:4f:d0:71:
                    6a:60:ad:4a:40:86:b5:88:d5:b4:73:71:27:0e:41:
                    07:eb:3a:3a:f9:b1:4b:9f:32:a5:b8:b2:77:64:84:
                    e2:02:1d:c6:1a:44:7d:d5:b9:93:03:03:88:91:91:
                    58:76:f4:e4:37:b6:cd:40:a9:17:34:e5:59:be:62:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D1:1B:27:AB:9B:DF:19:25:3B:0E:A5:AC:D3:39:C4:AB:75:72:32
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:d8:95:32:25:ee:d3:5c:9b:87:29:01:8c:20:b3:2a:6b:
         89:15:d8:0e:46:7f:09:d0:0d:68:0e:0e:fb:73:13:a4:f6:3e:
         c1:ed:1c:b3:a4:8b:7d:0a:2f:37:15:e4:36:27:85:98:01:f6:
         b3:2e:10:3a:5b:43:d3:fc:18:46:8b:fa:6b:c4:87:6b:5b:6d:
         d2:2b:d5:c9:76:19:e3:ff:56:61:3c:b7:f0:ab:0d:bc:6d:14:
         f9:98:88:b9:95:1a:e1:e8:90:45:03:fa:d8:c8:ef:5a:e4:6c:
         71:37:86:5e:f0:4e:5b:9a:d1:8a:61:c2:3d:69:c1:a3:37:15:
         e0:16:32:5c:d9:35:b1:a7:f2:a3:b7:28:49:05:43:bc:97:f4:
         3c:f6:eb:f5:00:60:6b:6b:c6:90:c9:b9:2f:21:cf:8f:d2:eb:
         a8:2f:32:42:7b:d9:41:c2:00:f6:86:46:b6:d4:be:4d:5a:ca:
         bf:0d:f5:21:b7:9b:ee:54:bf:07:88:be:2e:8a:46:d5:e2:b9:
         f2:4e:72:e8:b1:ba:2d:cd:f8:ae:fc:86:f9:db:27:5f:73:d4:
         b8:b8:fb:5d:ef:0b:38:dc:a6:8f:47:dd:cb:6f:66:38:5a:0c:
         e7:ee:bf:cc:f4:ce:5e:6f:74:35:91:be:fd:d9:d1:88:43:5b:
         ce:71:49:2b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM5ODNBRjExMC8GA1UEBRMoOEExRkNGMjgxRjNBMzdBNTUwRTY0MTM3RDkwODU1
MEFFODkwMjMzQTAeFw0yNjA4MDYwNDM4MzNaFw0yNjA4MDgwNDM4MzNaMBgxFjAU
BgNVBAMTDTZhNzQwZmM5LWI3NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDc8+dUsGmmM96+KPDG4iXtK51yg+L729O0hmrp41fqNeor8a45VuUSg7yy
+jhBYjAjcrMSikXL/32RVldR8K8Xe5Lw4l1LtED1x29ef4VJxvp1DjGV84Ci/deK
UepvkahwCh4y17EJmlugrfYQ04XBWfGGDTIku0g2Q0smC4yBL/vyzlLOT2LOw2GQ
lBkFe6c/AaY9YGLT0jJSem3pvgFNXqiAM/4oyPg5np/keRX9lKLR9VSlgstWF/yF
1TzJa0/QcWpgrUpAhrWI1bRzcScOQQfrOjr5sUufMqW4sndkhOICHcYaRH3VuZMD
A4iRkVh29OQ3ts1AqRc05Vm+Yh19AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPdEb
J6ub3xklOw6lrNM5xKt1cjIwHwYDVR0jBBgwFoAUih/PKB86N6VQ5kE32QhVCuiQ
IzowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzOTgzLzA5QjgxODNFOUI5QzExRUZBMDEyRjk0Rjc2MkU5NTFBL2loX1BL
Qjg2TjZWUTVrRTMyUWhWQ3VpUUl6by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2loX1BLQjg2TjZWUTVrRTMyUWhWQ3VpUUl6by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTM5ODMvMDlCODE4M0U5QjlDMTFFRkEwMTJGOTRGNzYy
RTk1MUEvaWhfUEtCODZONlZRNWtFMzJRaFZDdWlRSXpvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqntiVMiXu01ybhykBjCCzKmuJFdgO
Rn8J0A1oDg77cxOk9j7B7RyzpIt9Ci83FeQ2J4WYAfazLhA6W0PT/BhGi/prxIdr
W23SK9XJdhnj/1ZhPLfwqw28bRT5mIi5lRrh6JBFA/rYyO9a5GxxN4Ze8E5bmtGK
YcI9acGjNxXgFjJc2TWxp/KjtyhJBUO8l/Q89uv1AGBra8aQybkvIc+P0uuoLzJC
e9lBwgD2hka21L5NWsq/DfUht5vuVL8HiL4uikbV4rnyTnLosbotzfiu/Ib52ydf
c9S4uPtd7ws43KaPR93Lb2Y4Wgzn7r/M9M5eb3Q1kb792dGIQ1vOcUkr
-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:45 2026 by rpki-client