Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          DD27KijgyyqRza6LGoWdM3VZxm3l51zITf/Ejqlnl0s=
Subject key identifier:   59:6D:A2:86:22:65:CE:00:83:A4:9D:A8:B9:66:F3:9A:2D:15:D2:E1
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       01A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          01A8
Signing time:             Sun 21 Jun 2026 04:52:08 +0000
Manifest this update:     Sun 21 Jun 2026 04:52:07 +0000
Manifest next update:     Tue 23 Jun 2026 04:52:07 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: mDExn1vOnP+Il+HmA39OAoNy/iV0WJmB6jYPcQjqR5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: Jun 21 04:52:07 2026 GMT
            Not After : Jun 23 04:52:07 2026 GMT
        Subject: CN=6a376df8-722c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:6d:18:c0:18:32:cc:51:04:48:30:dd:00:
                    b3:3c:eb:b6:67:c6:cd:d5:20:28:aa:73:9d:90:c1:
                    75:2a:bb:cf:b9:07:4d:15:56:39:a2:f7:a1:55:ad:
                    1a:77:b4:96:56:08:30:28:a2:96:22:3c:9b:f8:66:
                    29:a2:38:5a:7e:a1:29:f5:67:a2:67:8e:c6:cf:33:
                    4e:f8:72:6a:80:fc:ec:77:72:b2:a6:c6:11:85:60:
                    fd:b0:fa:15:59:eb:02:e3:7e:e8:5a:d0:60:c0:15:
                    4d:00:ac:f0:10:dc:0e:58:a3:4a:1c:1c:47:b6:38:
                    1e:ae:fe:23:c3:b5:31:29:23:70:1e:b7:6a:85:4f:
                    e0:03:ba:ce:f0:71:50:3e:76:32:9d:92:72:6f:4c:
                    78:ee:06:0c:3c:9d:ac:90:b8:76:eb:e5:1f:8d:97:
                    1c:7c:88:ac:8e:dd:f2:d1:42:cb:c9:02:ec:72:06:
                    d9:71:9f:15:4f:24:8c:7c:1b:d2:7c:a5:e7:b9:3e:
                    79:53:c3:de:41:7b:66:8c:9a:d9:cf:ac:39:c5:e5:
                    6e:fd:ce:52:b7:0c:7e:35:37:11:77:75:f8:ff:e0:
                    8e:79:1a:b1:81:c4:d2:a6:ef:ee:0e:52:5f:4e:e9:
                    ec:ac:a6:05:f8:d4:1a:27:c2:4b:16:bd:20:e8:3e:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6D:A2:86:22:65:CE:00:83:A4:9D:A8:B9:66:F3:9A:2D:15:D2:E1
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9c:5b:8e:d6:07:dd:c6:c2:47:cb:dd:8c:19:ba:ae:48:eb:
         4d:17:eb:d3:0d:34:cf:7e:e5:11:41:f5:8e:41:73:e9:30:ed:
         81:db:75:da:db:cf:b4:08:80:c1:16:1c:4b:fc:d4:40:1e:ad:
         0f:de:ca:49:39:12:7f:e1:fa:0d:5b:37:0c:f1:28:7c:ec:4d:
         fc:f0:d7:1b:31:0e:98:77:4c:f8:b0:89:c9:66:92:97:a2:ba:
         d2:5b:23:b2:97:06:f3:39:17:54:e2:70:71:c6:14:bf:57:36:
         f8:8a:6b:7b:4e:49:5e:1f:bf:88:d3:5c:d4:92:c6:b9:b7:c7:
         35:d9:9f:0c:96:17:9f:90:72:2c:50:58:fd:ae:55:e6:44:fe:
         56:72:3d:c6:eb:54:54:5e:32:a6:b1:9b:ba:ad:4c:bf:96:f9:
         3f:82:95:3e:40:f9:76:86:ac:eb:56:a9:da:50:12:a6:86:e7:
         82:e0:8b:64:d8:73:79:b2:1e:09:70:04:da:97:90:3c:2d:e3:
         69:05:0d:b0:cc:72:53:40:5a:54:b8:5d:fc:aa:3f:48:6f:43:
         be:11:6c:1a:d0:86:51:17:46:b6:fb:4a:20:79:c1:a5:11:c5:
         cd:09:09:4b:15:b8:b5:91:1b:3a:9b:77:cd:14:d7:d3:e4:b7:
         dc:34:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:48 2026 by rpki-client