Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          5tpU+nikisS12B6gjnufv0jkSTEqld9aD+zjh9y+hsE=
Subject key identifier:   9A:2F:CF:A7:72:3E:34:86:43:7A:A3:43:FB:43:D1:71:14:82:FA:EA
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       1008
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          1006
Signing time:             Sun 21 Jun 2026 00:51:35 +0000
Manifest this update:     Sun 21 Jun 2026 00:51:34 +0000
Manifest next update:     Tue 23 Jun 2026 00:51:34 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: 61znpHssphGsln/XoJEYpURwJXhruC7MIxIJqoFJzGo=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4104 (0x1008)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: Jun 21 00:51:34 2026 GMT
            Not After : Jun 23 00:51:34 2026 GMT
        Subject: CN=6a373597-9264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:aa:6f:a7:aa:76:51:f3:c9:7e:ce:7c:09:
                    5e:c0:a4:db:45:94:9d:41:83:f9:cc:37:64:80:1f:
                    8e:c9:9d:65:01:2c:bb:11:a2:1a:f3:be:4a:4d:23:
                    25:d7:0f:f0:8b:b9:bb:f4:f9:78:8a:5d:e3:c2:12:
                    b8:0f:93:92:32:3c:73:54:58:08:bc:d0:cd:41:26:
                    d6:3d:81:02:ea:3a:5d:c4:a4:7e:3b:2b:9f:ff:e9:
                    3e:43:c7:5d:11:27:b2:02:c0:8f:bf:19:33:3a:59:
                    d7:8f:55:bd:bc:23:6a:fb:3b:56:21:72:99:6a:9e:
                    61:80:d1:8a:bf:45:6a:8d:a8:42:ee:5a:2a:dd:46:
                    ce:6c:0d:41:1f:9e:c8:96:fb:d9:e8:3c:40:f6:07:
                    d1:33:e3:02:11:35:98:af:1d:d0:8c:d6:95:3a:dd:
                    6b:bb:55:2b:e4:af:68:ba:e4:90:6a:ca:e6:bd:db:
                    bb:2c:25:b8:1d:0a:79:dd:f3:31:b4:23:2e:34:57:
                    4c:7f:b0:68:19:38:37:54:0e:bf:c6:b2:37:46:49:
                    3c:31:47:cc:7e:61:5e:11:66:56:e0:93:68:30:af:
                    48:34:fe:23:6f:b5:16:60:ed:8b:d9:28:13:8f:10:
                    47:34:e5:f9:17:98:75:89:bd:42:18:6b:e5:69:88:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2F:CF:A7:72:3E:34:86:43:7A:A3:43:FB:43:D1:71:14:82:FA:EA
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:c8:f2:71:6d:bc:bf:b8:e3:84:54:36:af:34:a1:80:69:
         38:a3:c5:36:73:6f:54:ad:da:44:2d:40:b8:73:b2:b8:bd:d5:
         7b:7a:c2:82:b2:87:4f:30:c3:22:46:b6:a0:d1:36:b7:1b:e4:
         ff:b0:87:a2:33:45:f0:a0:c1:92:c9:ea:ef:e4:33:1d:9e:96:
         81:b2:b7:40:68:53:47:50:d1:95:90:9d:8d:f8:74:18:ff:87:
         f2:d0:05:83:27:7d:0f:85:57:65:49:87:f0:d5:a3:f7:a8:1d:
         99:78:42:ac:db:03:f3:17:2d:1b:12:e0:37:3b:6b:45:0d:22:
         7e:87:80:6f:e9:cf:0c:6c:fa:f4:ef:04:6d:ea:a2:59:97:4a:
         a7:4e:07:93:be:5c:d1:d5:b6:17:ca:0b:04:e2:52:6f:27:f8:
         bd:57:a4:a0:72:e6:2d:80:b6:6a:42:8d:1e:f2:9a:90:6e:b3:
         58:e2:bd:e8:00:48:ab:c0:4c:58:d2:43:e0:68:06:67:c9:6e:
         8f:48:26:87:d1:57:bd:7d:a7:75:1f:54:4c:05:e2:49:45:8e:
         55:d3:f9:ff:db:cb:3f:69:18:3c:eb:26:51:a6:08:3d:21:a3:
         df:8e:c3:b1:41:71:aa:63:16:42:c2:a9:b5:ea:65:e5:d7:95:
         60:85:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:47 2026 by rpki-client