Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File:                     zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier:          5XCOefEuM5TbdtV6BwTMCjwq8MTomEMw+huW93VV50s=
Subject key identifier:   62:5C:A1:63:A7:B3:36:2C:6C:59:63:E9:C0:BF:7B:CA:0C:6E:E0:E3
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer:       /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial:       03D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number:          03D1
Signing time:             Thu 06 Aug 2026 03:55:59 +0000
Manifest this update:     Thu 06 Aug 2026 03:55:58 +0000
Manifest next update:     Sat 08 Aug 2026 03:55:58 +0000
Files and hashes:         1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: Y0Ebb4Icrvn6RU8sPicHkTmQxpAS96cs4OhFRss5V5U=)
                          2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4A3BAF, serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
        Validity
            Not Before: Aug  6 03:55:58 2026 GMT
            Not After : Aug  8 03:55:58 2026 GMT
        Subject: CN=6a7405cf-7baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:ca:2d:4f:b0:06:41:a8:d9:98:07:b4:83:
                    ef:9d:4d:e2:9d:aa:57:31:bf:1d:29:48:06:d6:85:
                    78:23:5b:92:40:1e:10:8d:1c:4b:d7:69:4a:70:64:
                    1f:60:e4:d8:19:ed:f1:04:72:8e:c9:66:17:c0:d9:
                    a2:85:d7:fb:0d:72:24:5a:0f:89:44:cc:e5:dc:01:
                    0d:d0:7d:77:a8:03:97:f5:0b:8e:ff:a2:df:4d:58:
                    6a:ff:7f:ed:e8:b6:6c:07:d6:17:e1:6d:f1:ad:07:
                    cf:8e:a5:fb:7b:2a:ea:43:a4:78:b5:1c:f6:79:5c:
                    81:7f:48:2e:76:6b:83:d6:97:05:00:0d:03:97:6e:
                    f5:29:ca:de:3b:67:0f:e7:47:b3:93:23:b6:34:d8:
                    f1:b3:fe:13:d8:f9:80:17:99:10:48:88:df:a8:01:
                    74:5e:33:ae:26:eb:63:04:08:73:cf:f5:8e:cc:c3:
                    cb:67:2a:9c:01:fc:a4:a8:2f:d3:cc:ff:91:b9:11:
                    9d:94:5c:3c:3f:36:a9:6d:d4:5f:e3:7e:8b:4c:75:
                    5d:52:96:7c:1f:7c:1d:73:6a:48:d0:cb:00:aa:a2:
                    4f:7b:66:a1:55:3c:56:ad:7f:3f:18:12:ed:a5:c9:
                    b9:97:bf:d0:6e:f5:39:87:81:18:47:ec:48:a8:3d:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5C:A1:63:A7:B3:36:2C:6C:59:63:E9:C0:BF:7B:CA:0C:6E:E0:E3
            X509v3 Authority Key Identifier:
                keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:91:4b:85:d0:c0:38:8e:08:2d:a0:5e:ca:6c:08:25:fc:e2:
         fa:fe:df:06:fb:d7:0f:cb:cc:7a:2f:f9:95:fb:31:cd:f4:3b:
         9b:6f:94:11:5b:af:f9:fe:37:fb:05:35:b9:d5:60:4b:70:81:
         3a:10:d4:e6:7c:04:8d:58:c5:13:d4:b9:55:e8:0b:39:45:fa:
         29:76:43:78:e6:5e:0f:27:87:93:04:80:df:1e:b3:29:70:44:
         85:4c:d6:e1:66:f0:67:e1:23:03:32:fb:2f:a9:92:80:9d:e4:
         55:fe:fa:5f:6e:be:f4:24:f3:67:90:c8:fe:db:bd:64:be:01:
         c7:95:37:47:70:5e:0b:2b:44:17:d9:41:ab:d5:43:f9:53:e4:
         33:18:04:a5:9c:f5:ce:7d:88:80:52:8d:71:b6:94:3c:9a:98:
         32:67:c5:07:ca:04:46:09:19:d6:34:34:e0:0e:60:a4:fc:f9:
         e8:1e:ec:6d:5e:75:58:be:a2:29:c9:aa:98:78:02:0c:df:19:
         c2:4e:ba:41:bf:28:3c:f2:52:0a:92:7c:1d:53:94:cc:9b:4d:
         08:a0:db:51:ef:c1:0e:66:f5:d1:b7:85:4d:71:1c:23:37:bc:
         74:29:76:af:11:88:1d:f8:12:1c:0d:e1:db:59:ed:ef:c5:9f:
         66:9f:02:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzRBM0JBRjExMC8GA1UEBRMoQ0VCRTk5RUVCMEJFM0NFOERCMTlCQTQ0NzY2Q0Ez
RTNDODA3QTk4OTAeFw0yNjA4MDYwMzU1NThaFw0yNjA4MDgwMzU1NThaMBgxFjAU
BgNVBAMTDTZhNzQwNWNmLTdiYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRzMotT7AGQajZmAe0g++dTeKdqlcxvx0pSAbWhXgjW5JAHhCNHEvXaUpw
ZB9g5NgZ7fEEco7JZhfA2aKF1/sNciRaD4lEzOXcAQ3QfXeoA5f1C47/ot9NWGr/
f+3otmwH1hfhbfGtB8+Opft7KupDpHi1HPZ5XIF/SC52a4PWlwUADQOXbvUpyt47
Zw/nR7OTI7Y02PGz/hPY+YAXmRBIiN+oAXReM64m62MECHPP9Y7Mw8tnKpwB/KSo
L9PM/5G5EZ2UXDw/Nqlt1F/jfotMdV1SlnwffB1zakjQywCqok97ZqFVPFatfz8Y
Eu2lybmXv9Bu9TmHgRhH7EioPc6vAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYlyh
Y6ezNixsWWPpwL97ygxu4OMwHwYDVR0jBBgwFoAUzr6Z7rC+POjbGbpEdmyj48gH
qYkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM0QTNCLzRGQUZGREFFQTQ4RDExRUU4OENCODc2M0QyNUJFNDY1L3pyNlo3
ckMtUE9qYkdicEVkbXlqNDhnSHFZay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pyNlo3ckMtUE9qYkdicEVkbXlqNDhnSHFZay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzRBM0IvNEZBRkZEQUVBNDhEMTFFRTg4Q0I4NzYzRDI1
QkU0NjUvenI2WjdyQy1QT2piR2JwRWRteWo0OGdIcVlrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCkUuF0MA4jggtoF7KbAgl/OL6/t8G
+9cPy8x6L/mV+zHN9Dubb5QRW6/5/jf7BTW51WBLcIE6ENTmfASNWMUT1LlV6As5
RfopdkN45l4PJ4eTBIDfHrMpcESFTNbhZvBn4SMDMvsvqZKAneRV/vpfbr70JPNn
kMj+271kvgHHlTdHcF4LK0QX2UGr1UP5U+QzGASlnPXOfYiAUo1xtpQ8mpgyZ8UH
ygRGCRnWNDTgDmCk/PnoHuxtXnVYvqIpyaqYeAIM3xnCTrpBvyg88lIKknwdU5TM
m00IoNtR78EOZvXRt4VNcRwjN7x0KXavEYgd+BIcDeHbWe3vxZ9mnwI1
-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:24 2026 by rpki-client