Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File:                     IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier:          pk25h+cJ4YXy5dtuJ9IriAbVvQPJXsgjU47M3kJG+vc=
Subject key identifier:   A8:D8:99:2A:44:79:69:57:8C:9E:DC:90:D5:BC:07:35:5E:B9:87:EA
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer:       /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial:       0283
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number:          0282
Signing time:             Thu 06 Aug 2026 04:38:57 +0000
Manifest this update:     Thu 06 Aug 2026 04:38:57 +0000
Manifest next update:     Sat 08 Aug 2026 04:38:57 +0000
Files and hashes:         1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: WR/+dhoO2YH/gfnLRMLSDAP6gXfxTVc74U5DzFizNrE=)
                          2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
        Validity
            Not Before: Aug  6 04:38:57 2026 GMT
            Not After : Aug  8 04:38:57 2026 GMT
        Subject: CN=6a740fe1-8e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:27:84:d7:21:b7:29:29:80:65:7f:10:e5:
                    98:77:96:d1:2d:4e:96:73:a5:78:6a:6a:69:ab:ac:
                    83:62:62:e2:9b:a5:2f:f7:54:a5:ee:47:5e:80:bf:
                    99:24:5b:90:6b:26:b8:81:0b:bb:16:a5:8a:57:58:
                    29:e9:ce:f2:f6:1b:08:f1:ee:8a:4d:96:7f:a7:85:
                    aa:66:d4:a6:6f:75:9c:d5:cd:a2:b3:76:db:3c:64:
                    b5:6a:3b:42:ad:58:ff:77:28:44:92:af:1e:df:e0:
                    f6:22:18:2d:8a:d0:c2:59:cc:83:68:74:24:09:9d:
                    87:1f:43:0f:4e:7d:b9:c0:64:78:38:47:50:6f:7a:
                    4b:38:32:a7:4e:33:4d:99:69:15:06:ad:be:b4:e4:
                    88:05:4f:37:51:65:5e:78:16:c3:7a:d1:21:90:5b:
                    f1:d3:f5:05:69:01:d4:35:0f:d9:74:f0:db:1e:4e:
                    37:38:e0:8a:a3:5b:d5:c8:ba:4b:55:33:68:09:69:
                    1e:9d:4b:c2:17:c0:0d:03:01:8e:8b:6b:d3:0c:2c:
                    48:1d:29:c0:9a:20:21:92:43:b3:a9:9a:80:24:3b:
                    99:26:af:fe:ce:2d:54:a8:0d:a0:e2:9f:6f:41:63:
                    6a:88:cb:63:4f:a5:3d:38:23:fc:a6:53:e6:0d:ef:
                    0d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:99:2A:44:79:69:57:8C:9E:DC:90:D5:BC:07:35:5E:B9:87:EA
            X509v3 Authority Key Identifier:
                keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:01:a5:be:15:3a:1d:c9:2a:3f:52:e0:6f:10:40:4c:bb:26:
         b0:d2:2f:b2:be:4a:82:21:05:f7:39:6e:be:98:c1:57:c1:9d:
         c0:81:d7:9f:1b:d8:ab:9e:7d:66:2d:8b:21:e8:d8:de:09:c9:
         67:30:be:fa:82:7a:d9:aa:2c:24:06:89:c1:f0:e5:e5:f6:4a:
         37:9f:de:eb:0d:74:7d:ca:08:ac:b0:56:c1:d1:7a:f4:e2:08:
         8a:fe:16:12:63:95:99:e6:8f:5b:af:db:3c:a3:62:0f:ea:c0:
         b5:78:a9:b0:5e:2c:e6:8a:9f:6c:77:c9:04:f7:f1:39:27:af:
         9a:02:cd:20:93:1c:39:c9:38:0e:b2:18:88:a3:b9:aa:c5:29:
         95:af:49:3f:cf:f2:83:42:4c:57:86:0d:4e:57:c9:2d:83:d4:
         86:e8:b1:43:1e:d9:1f:bc:fe:90:ba:69:cc:ac:e5:cd:25:e2:
         ad:7e:1a:9e:a7:ce:51:70:77:72:ad:1b:0d:27:4c:8e:27:08:
         4e:f7:54:0e:f7:93:ea:e8:9c:8a:15:dd:1b:d5:b9:06:d1:f2:
         18:e4:06:18:3f:44:74:28:3b:1c:07:00:75:da:ae:74:6f:52:
         a0:f7:74:0d:b1:5d:a4:1b:c0:62:94:e2:72:c1:3e:db:e5:ea:
         36:b4:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:57 2026 by rpki-client