Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
File:                     AjFjgfORycHBtlB5K7N-_nj13ZM.mft (raw, json)
Hash identifier:          wcmowjajq2jkQTIheESQJVapGrcB3obS7rA004zY2cI=
Subject key identifier:   A8:D5:79:B8:EE:08:9C:29:FE:5A:6B:95:4C:8E:E6:09:21:82:F8:2B
Authority key identifier: 02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
Certificate issuer:       /CN=F36C684FAF/serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Certificate serial:       0A13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
Manifest number:          0A13
Signing time:             Thu 06 Aug 2026 01:34:46 +0000
Manifest this update:     Thu 06 Aug 2026 01:34:46 +0000
Manifest next update:     Sat 08 Aug 2026 01:34:46 +0000
Files and hashes:         1: AjFjgfORycHBtlB5K7N-_nj13ZM.crl (hash: ++iYsy0Ywk2lWd29R6Nd2YF6JepqbgIDMMx8DMZgOZw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579 (0xa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FAF, serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
        Validity
            Not Before: Aug  6 01:34:46 2026 GMT
            Not After : Aug  8 01:34:46 2026 GMT
        Subject: CN=6a73e4b6-bad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:a2:31:b9:07:9a:0e:aa:c6:8b:cd:cc:70:
                    3a:cf:9b:2c:8b:0a:25:66:d5:e4:cb:08:15:8d:7d:
                    f5:15:27:64:4c:c0:94:50:4f:30:bb:63:21:9e:02:
                    0b:df:c9:11:84:68:95:a5:7a:f2:39:b1:e6:2e:2a:
                    26:4a:5e:4d:c1:1e:ca:a2:6f:6a:ca:8c:7b:78:72:
                    ab:d9:54:9d:56:53:a2:9f:a1:71:9e:d9:31:43:72:
                    58:59:97:8c:51:e8:e7:67:9c:18:27:a1:d8:38:d2:
                    d5:36:63:fd:88:de:1a:da:33:b2:ad:f9:aa:74:53:
                    bd:a5:5e:50:89:71:d8:15:fd:be:06:90:19:67:d9:
                    e2:fd:ce:25:ab:c9:9d:72:64:19:a5:dd:76:f5:d4:
                    cd:b2:9b:4e:47:9e:fa:77:4f:3b:d6:8a:1d:8b:df:
                    40:75:cd:3a:b2:bf:2e:94:cd:9a:47:7e:6d:e2:33:
                    8c:01:9e:ec:60:87:d2:85:1a:de:f9:22:e5:75:79:
                    a6:da:5e:51:4c:c3:1a:8b:67:1d:6b:ec:ab:a0:66:
                    46:b8:ee:9e:09:b4:db:d3:8f:13:e5:60:8a:e7:52:
                    24:ff:f9:c1:60:61:95:a0:6c:5b:10:41:33:0b:14:
                    39:1d:f8:d0:8a:77:23:0e:80:fa:cb:01:50:84:fc:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D5:79:B8:EE:08:9C:29:FE:5A:6B:95:4C:8E:E6:09:21:82:F8:2B
            X509v3 Authority Key Identifier:
                keyid:02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:db:b4:d4:83:57:a6:8a:be:b7:43:4b:60:2d:3b:9c:e3:
         7c:cf:5b:3f:b9:21:41:64:3f:be:0c:1d:a0:ed:b5:bd:32:2e:
         14:2c:d8:15:26:1f:cd:1e:72:85:7d:fb:73:8e:07:ca:f5:db:
         fb:ba:ba:76:eb:9e:e7:4d:f6:a7:85:47:20:8a:64:9f:f8:4a:
         d1:f0:0f:68:ba:1b:a2:56:1e:23:a1:14:3b:22:86:77:b5:9a:
         fb:07:e3:e3:49:66:9b:68:85:85:26:f0:ab:63:b5:9f:14:97:
         7d:05:8c:42:f1:03:eb:05:78:a4:99:06:7e:1c:f9:32:46:33:
         88:00:7f:41:b2:b5:0e:6b:42:9c:fe:c5:e1:ec:71:4b:40:f8:
         54:eb:1e:47:d1:b5:7a:01:74:db:a0:b1:25:51:a9:a2:e8:ec:
         2b:aa:65:c5:e6:c2:60:e5:d2:5f:b8:da:75:d0:13:ec:c4:87:
         f8:d6:c2:bc:14:d1:49:ef:8b:e7:ad:60:fd:01:98:be:db:80:
         7b:b6:0e:23:b6:c8:e1:df:b4:19:7a:8d:74:06:2f:4a:5c:a1:
         ea:b2:6a:87:2b:71:b4:f0:17:3e:b0:fc:bf:f6:d3:69:02:63:
         a8:22:4e:57:fa:f8:70:05:7c:84:a8:b2:55:55:41:29:5d:ba:
         58:5e:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:40:46 2026 by rpki-client