Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
File:                     Mh-BR7LBGZaoFo69bpeb7goWDSg.mft (raw, json)
Hash identifier:          W+IV60RxL913FCkvADgaWlDCBWNYliyweCD0jMiXIpQ=
Subject key identifier:   50:47:1E:03:2C:BE:35:91:28:23:B8:B0:20:E6:52:09:F3:EE:C5:EC
Authority key identifier: 32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28
Certificate issuer:       /CN=F36C5799AF/serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
Certificate serial:       4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
Manifest number:          4D
Signing time:             Sun 21 Jun 2026 05:33:16 +0000
Manifest this update:     Sun 21 Jun 2026 05:33:15 +0000
Manifest next update:     Tue 23 Jun 2026 05:33:15 +0000
Files and hashes:         1: Mh-BR7LBGZaoFo69bpeb7goWDSg.crl (hash: XY6nqdNERMBJaTdR6IPpeKIiH41PMgTeQ28bf2y1HLM=)
                          2: 6EB787A833E211F19A2B66F0CE1D38B0.roa (hash: khl45c9kCg+cPXJc6/8UvAcq1OtRKhjfiq9hfCULuv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5799AF, serialNumber=321F8147B2C11996A8168EBD6E979BEE0A160D28
        Validity
            Not Before: Jun 21 05:33:15 2026 GMT
            Not After : Jun 23 05:33:15 2026 GMT
        Subject: CN=6a37779c-37f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:16:24:db:02:0b:a2:e4:e7:9e:74:3e:13:
                    8e:f1:9d:9a:33:4a:24:60:aa:d4:36:64:76:01:46:
                    9d:b0:f6:d7:16:e3:00:eb:b8:66:f5:31:8f:81:3e:
                    b6:d2:b5:02:f9:32:3a:27:ad:35:d5:10:a7:ad:a6:
                    f7:21:24:eb:74:18:43:45:ce:1c:a3:40:f4:a9:49:
                    5c:a7:a3:28:4d:61:b5:e1:f3:5e:2d:91:32:31:2b:
                    c7:62:1d:6e:9f:27:68:b3:29:21:9b:52:91:76:38:
                    a9:c0:76:65:26:e0:e4:18:40:54:44:4e:fd:aa:2b:
                    55:ab:fd:70:24:68:4b:15:b0:76:ea:a3:da:1c:fb:
                    62:0c:88:c5:eb:61:38:ff:fa:db:5f:ea:58:0f:70:
                    9d:cd:8f:34:52:b3:f9:ea:d1:f6:e5:78:dc:5f:19:
                    bb:a1:d1:4e:40:a0:8e:d4:19:1f:ea:8b:a4:39:74:
                    5f:1f:5b:c5:10:4b:5e:9b:f6:43:c7:d7:bf:8a:c6:
                    a9:7f:ad:8e:23:fc:88:79:ce:22:93:dd:4b:b2:81:
                    f5:86:46:14:48:3f:bd:d8:44:39:d9:fc:d5:01:8d:
                    8e:07:30:32:da:ae:49:e4:4c:89:18:3f:68:d3:5f:
                    17:a9:7f:32:c6:cc:cc:90:fb:27:76:db:2f:ad:36:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:1E:03:2C:BE:35:91:28:23:B8:B0:20:E6:52:09:F3:EE:C5:EC
            X509v3 Authority Key Identifier:
                keyid:32:1F:81:47:B2:C1:19:96:A8:16:8E:BD:6E:97:9B:EE:0A:16:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Mh-BR7LBGZaoFo69bpeb7goWDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5799/0CA10C04331C11F18D401AB9CE1D38B0/Mh-BR7LBGZaoFo69bpeb7goWDSg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:82:91:18:2c:75:e3:0d:8a:89:94:57:17:89:04:35:c2:
         52:e1:f3:1d:1e:8b:e4:57:df:a4:a1:59:19:c4:f2:25:41:3f:
         d3:d7:be:13:47:b7:41:93:5a:48:8d:12:e0:8f:19:df:b0:96:
         62:87:cc:37:21:54:90:88:30:21:43:0a:50:80:7c:e4:80:3a:
         32:63:35:f8:86:5b:cd:31:76:08:08:aa:8c:7c:1d:b9:4b:96:
         28:2a:49:82:be:90:fa:47:bb:f5:36:30:1a:d6:60:10:21:89:
         3d:9c:b0:21:d0:12:5f:4e:ae:e8:f7:eb:4f:45:f8:06:8e:ef:
         19:74:51:5c:86:bf:1a:e1:bb:19:a1:5e:b3:e4:dc:ab:0c:33:
         d7:01:bd:af:80:85:38:67:e9:c1:18:84:26:26:28:84:a2:18:
         d1:a1:8f:df:4e:3f:87:db:47:d9:3f:b3:57:04:33:f9:ee:72:
         38:3a:41:61:8c:c3:0e:a3:38:6a:5c:bf:6e:62:55:cd:8a:09:
         77:e6:ad:4d:58:9c:87:b7:4e:28:7a:44:9a:7e:6b:5c:3d:65:
         81:64:01:a6:31:78:e3:1f:7f:b1:47:ce:9a:ca:49:86:b0:a4:
         f2:80:e4:0c:89:ce:be:b3:b8:d7:55:4e:77:6a:14:ce:c1:b2:
         75:fa:b2:18
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBTjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NTc5OUFGMTEwLwYDVQQFEygzMjFGODE0N0IyQzExOTk2QTgxNjhFQkQ2RTk3OUJF
RTBBMTYwRDI4MB4XDTI2MDYyMTA1MzMxNVoXDTI2MDYyMzA1MzMxNVowGDEWMBQG
A1UEAxMNNmEzNzc3OWMtMzdmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2iFiTbAgui5OeedD4TjvGdmjNKJGCq1DZkdgFGnbD21xbjAOu4ZvUxj4E+
ttK1AvkyOietNdUQp62m9yEk63QYQ0XOHKNA9KlJXKejKE1hteHzXi2RMjErx2Id
bp8naLMpIZtSkXY4qcB2ZSbg5BhAVERO/aorVav9cCRoSxWwduqj2hz7YgyIxeth
OP/621/qWA9wnc2PNFKz+erR9uV43F8Zu6HRTkCgjtQZH+qLpDl0Xx9bxRBLXpv2
Q8fXv4rGqX+tjiP8iHnOIpPdS7KB9YZGFEg/vdhEOdn81QGNjgcwMtquSeRMiRg/
aNNfF6l/MsbMzJD7J3bbL602oVMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRQRx4D
LL41kSgjuLAg5lIJ8+7F7DAfBgNVHSMEGDAWgBQyH4FHssEZlqgWjr1ul5vuChYN
KDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzU3OTkvMENBMTBDMDQzMzFDMTFGMThENDAxQUI5Q0UxRDM4QjAvTWgtQlI3
TEJHWmFvRm82OWJwZWI3Z29XRFNnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTWgtQlI3TEJHWmFvRm82OWJwZWI3Z29XRFNnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDNTc5OS8wQ0ExMEMwNDMzMUMxMUYxOEQ0MDFBQjlDRTFE
MzhCMC9NaC1CUjdMQkdaYW9GbzY5YnBlYjdnb1dEU2cubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABpGgpEYLHXjDYqJlFcXiQQ1wlLh8x0e
i+RX36ShWRnE8iVBP9PXvhNHt0GTWkiNEuCPGd+wlmKHzDchVJCIMCFDClCAfOSA
OjJjNfiGW80xdggIqox8HblLligqSYK+kPpHu/U2MBrWYBAhiT2csCHQEl9Oruj3
609F+AaO7xl0UVyGvxrhuxmhXrPk3KsMM9cBva+AhThn6cEYhCYmKISiGNGhj99O
P4fbR9k/s1cEM/nucjg6QWGMww6jOGpcv25iVc2KCXfmrU1YnIe3Tih6RJp+a1w9
ZYFkAaYxeOMff7FHzprKSYawpPKA5AyJzr6zuNdVTndqFM7BsnX6shg=
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:16 2026 by rpki-client