Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
File:                     5U9enM9-t26XkK6VM_5KhMiy_Lw.mft (raw, json)
Hash identifier:          3glLRs+IsHsAr2oA1MlcRg5DztBtniKbP5sZWF1RTKs=
Subject key identifier:   36:0A:A2:B6:00:E9:52:B2:CC:9E:44:56:C4:C9:3E:1C:DC:E8:37:66
Authority key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
Certificate issuer:       /CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
Certificate serial:       02CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
Manifest number:          02CB
Signing time:             Thu 06 Aug 2026 04:29:17 +0000
Manifest this update:     Thu 06 Aug 2026 04:29:16 +0000
Manifest next update:     Sat 08 Aug 2026 04:29:16 +0000
Files and hashes:         1: 5U9enM9-t26XkK6VM_5KhMiy_Lw.crl (hash: mGnQJKrHZDVVxDmuJwyI2rGDUTjBFuyUqDkHw1oYr+g=)
                          2: 690AD7B26C3111EF81B16842762E951A.roa (hash: rHzjxo/eO2fqIELNKfmN3/VjzzeCb8hHN9sTo2VjXI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CACCCAF, serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
        Validity
            Not Before: Aug  6 04:29:16 2026 GMT
            Not After : Aug  8 04:29:16 2026 GMT
        Subject: CN=6a740d9d-b733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:34:6c:b7:3e:f1:18:06:00:ba:68:b1:16:
                    3f:a4:cf:28:fc:10:9d:a4:8c:69:8d:d9:92:ed:f7:
                    9d:1d:6e:03:00:5f:20:3e:d0:1b:a1:8a:ea:77:65:
                    41:4b:cb:d7:78:5c:86:9b:0a:bd:aa:03:d5:5a:34:
                    4b:fa:ee:44:fb:b5:64:51:1d:19:9c:3a:be:2a:14:
                    85:bb:82:89:ec:4f:94:76:1d:bb:4d:d8:ff:7e:9e:
                    af:c2:50:e6:f4:48:31:4b:d4:9a:a1:9d:b3:85:82:
                    9e:a3:34:4c:c6:36:d6:06:3a:b2:2c:68:f8:50:5b:
                    25:10:e1:48:a0:37:9d:ce:f8:d8:06:a5:4d:83:24:
                    28:53:08:61:8f:99:c1:d9:2d:f8:49:cf:d0:ea:75:
                    f0:05:3c:54:41:9f:4c:0a:6a:e1:07:48:08:89:50:
                    e4:51:39:61:12:ff:ad:bf:ae:d4:db:c7:29:99:96:
                    1e:5e:2b:d4:9f:c9:e3:72:63:86:05:d5:59:20:db:
                    31:cf:49:6f:82:4c:9c:39:a3:ce:38:5c:a2:2b:bc:
                    9c:02:e9:47:e6:1c:64:5a:f4:62:3e:f2:88:62:98:
                    3f:01:e2:7e:ba:b6:f0:60:7c:e8:c4:ba:d5:07:64:
                    34:4f:e8:96:b8:a2:99:ca:a2:2f:bf:b3:6d:ed:6f:
                    79:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:A2:B6:00:E9:52:B2:CC:9E:44:56:C4:C9:3E:1C:DC:E8:37:66
            X509v3 Authority Key Identifier:
                keyid:E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:55:3f:1c:37:04:01:1c:85:b3:7b:f1:dd:95:9c:07:85:e4:
         7d:d7:04:c2:83:fe:58:f4:ed:70:34:03:cc:17:80:1b:98:15:
         32:36:3d:f1:86:0f:36:3b:34:be:55:dd:75:ef:bf:4f:59:ab:
         8a:15:f0:e3:61:a9:30:63:aa:ac:4c:44:4d:d7:42:f2:55:4d:
         3e:df:4f:45:aa:ff:c0:9c:50:2d:1a:8f:87:25:06:f1:d8:35:
         9c:7d:8b:02:e3:ad:69:94:77:c7:e2:70:dd:12:d9:57:8e:ac:
         9e:11:4b:a2:2d:64:30:3b:2d:30:98:61:85:dc:7e:7a:52:8b:
         cc:df:2e:74:04:7f:93:98:05:79:01:8d:dd:09:18:8d:27:d0:
         e4:17:f7:93:0c:98:ca:d5:c7:b1:fd:6c:af:7f:1c:8c:7e:48:
         39:03:ae:bc:72:7b:b2:45:31:10:11:6e:ff:90:cf:d8:01:cb:
         8e:e1:46:26:32:a8:e1:9d:ff:4a:16:21:8d:cc:2f:91:08:6c:
         07:ac:ab:19:84:e3:a7:ce:88:8b:78:ad:65:1f:b4:b6:46:0c:
         f8:a2:03:13:dc:c5:ca:ca:88:d1:9a:03:62:03:99:64:93:3f:
         5f:c8:f0:7d:59:0c:fe:50:21:05:de:5a:9f:9e:69:e0:79:36:
         83:73:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:40:48 2026 by rpki-client