Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          /VoWSDfAdTz9erHnj37vlqugJsNbSusLopcuzhUuLJE=
Subject key identifier:   29:D0:18:AC:B2:82:E1:D4:D4:6B:C9:89:21:1E:F5:25:73:DF:71:93
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       01D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          01D7
Signing time:             Thu 06 Aug 2026 04:52:48 +0000
Manifest this update:     Thu 06 Aug 2026 04:52:47 +0000
Manifest next update:     Sat 08 Aug 2026 04:52:47 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: Ct2xu4nG56qMatoPakxIU772K9Q0tO4/pNBOHr8UJPM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: Aug  6 04:52:47 2026 GMT
            Not After : Aug  8 04:52:47 2026 GMT
        Subject: CN=6a741320-336a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:5a:b1:14:c2:06:44:58:5b:41:50:8d:aa:
                    ca:18:4c:ba:59:3f:57:69:7d:f9:8c:50:f1:41:84:
                    11:83:00:59:65:8c:f3:1f:d3:7b:18:7e:3e:e8:58:
                    05:a0:f4:74:bb:3a:8f:25:0b:df:cd:79:8a:f8:44:
                    d9:60:a0:88:4b:7f:75:1f:bd:40:8e:14:53:fb:87:
                    34:4f:04:8b:e6:5d:93:5e:63:c1:f5:fa:ac:9f:9f:
                    b4:8c:d5:a2:36:20:c0:4a:2c:c9:39:4e:8e:06:ba:
                    44:63:f2:8f:ed:f4:aa:83:25:f5:e1:9e:cb:21:0a:
                    e3:e7:c6:9d:2c:3b:98:32:aa:cd:97:a1:0d:64:2e:
                    4a:85:db:54:56:9e:fc:bd:52:5a:26:c7:00:b2:f1:
                    25:89:9b:8c:bf:4d:87:d2:10:31:a3:9c:da:d7:7a:
                    c4:f5:2c:ca:0f:1c:a2:09:7d:32:b6:5d:1e:28:cb:
                    71:68:57:02:2b:ed:10:6a:ff:22:9c:f9:92:6a:43:
                    89:f5:d3:e2:bb:d5:b7:a9:37:0e:d2:3a:94:73:b4:
                    ba:c0:f0:91:b8:0e:15:5c:95:c0:10:15:29:ec:2b:
                    5d:56:4c:33:b8:ad:ac:9e:2f:94:7b:c1:54:41:11:
                    c6:cf:04:ce:37:08:11:52:7b:47:1a:03:9e:4f:06:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:18:AC:B2:82:E1:D4:D4:6B:C9:89:21:1E:F5:25:73:DF:71:93
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:c7:78:1e:46:c8:cd:c7:c5:3f:03:8f:55:7c:63:a5:8b:
         09:42:ae:c9:60:a7:91:4f:ee:78:dd:8c:83:5d:5a:92:91:52:
         0d:c9:a3:8b:68:e6:ce:56:6b:7d:d7:4b:a4:a4:5e:65:69:87:
         2f:28:21:ed:c5:1d:0b:bb:0b:85:fb:37:89:5f:22:78:9b:97:
         3c:5f:29:ff:37:74:be:e8:9d:6a:f6:7c:93:7a:74:ad:84:ac:
         a3:4c:8a:ae:9c:0a:b0:3b:ca:84:cf:99:15:90:89:5d:09:12:
         4b:ad:cb:da:90:04:e8:80:41:a5:0e:94:f0:9a:d4:51:c1:d1:
         17:46:f7:96:5a:fd:0b:b7:09:fe:32:f7:5b:e3:4c:4c:3d:4d:
         23:cb:47:53:14:ae:ce:87:38:2a:9e:21:72:03:ed:3b:55:31:
         62:32:fd:36:15:96:8b:df:3d:c8:8e:95:8a:aa:1a:45:7c:f8:
         91:97:36:0e:25:8a:df:60:ff:8a:72:ec:ab:4f:1b:b5:ba:d6:
         49:b3:b3:22:7f:63:2e:4a:fc:0a:17:e6:78:49:03:17:c9:1b:
         a5:35:d4:c8:b2:09:1f:f1:c3:c4:89:7b:af:29:af:0f:43:bd:
         7c:43:1c:70:e8:66:4c:ae:73:e9:da:0c:b7:eb:81:84:7e:af:
         8f:f6:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:26 2026 by rpki-client