Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File:                     sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier:          vQ+8zqzNlBncHGHX4pGUEr/bLvsAga4R6qTjgOBvzao=
Subject key identifier:   84:29:C3:4A:27:DB:A3:F1:B2:B5:78:13:25:94:4D:EB:08:B6:6C:4E
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer:       /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial:       01AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number:          01AA
Signing time:             Thu 06 Aug 2026 04:56:51 +0000
Manifest this update:     Thu 06 Aug 2026 04:56:51 +0000
Manifest next update:     Sat 08 Aug 2026 04:56:51 +0000
Files and hashes:         1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: J2YZ0E+TN0CF3Sk1wUiGGw5tIdGbtkpPxZSWvrHX7g8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
        Validity
            Not Before: Aug  6 04:56:51 2026 GMT
            Not After : Aug  8 04:56:51 2026 GMT
        Subject: CN=6a741413-4713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:2d:db:76:45:94:cf:68:3b:a4:6b:8c:14:
                    d6:0b:7d:31:3e:f4:ad:98:9a:ce:a0:10:2d:76:65:
                    01:b9:ea:31:f7:16:bb:09:01:3d:71:70:dc:55:49:
                    59:76:fb:f2:3d:26:79:eb:26:8f:6e:bf:ed:51:46:
                    ac:7a:c4:df:b7:eb:e3:7f:2d:5e:51:7f:81:83:8b:
                    7c:07:ed:67:a3:18:a1:c4:5e:43:bd:13:90:8d:16:
                    d3:d8:12:59:65:74:46:47:df:03:3b:31:28:e0:a8:
                    18:e3:69:33:4e:3c:d1:f3:fb:50:77:38:a8:5c:d4:
                    13:47:da:07:13:11:95:aa:80:03:34:7e:65:89:0c:
                    52:23:83:63:0e:56:58:5c:e0:ee:3e:c7:6c:2c:92:
                    54:89:40:0c:b5:ac:d7:9a:0e:cc:50:16:db:ee:c0:
                    78:f0:8a:ea:33:c2:61:67:df:ab:43:99:be:6c:86:
                    a2:66:6d:e6:d4:a2:5d:4c:4c:1c:21:59:31:23:cc:
                    fc:8a:78:64:5a:2a:c9:82:e7:46:79:dd:0f:fa:12:
                    f5:75:65:d9:0b:42:86:4c:92:c6:85:e4:30:31:e8:
                    9a:24:48:fe:dc:ab:54:9b:37:63:b9:bd:a1:bc:d2:
                    be:e4:66:13:5e:e1:2e:51:f8:08:37:1d:ae:5c:82:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:C3:4A:27:DB:A3:F1:B2:B5:78:13:25:94:4D:EB:08:B6:6C:4E
            X509v3 Authority Key Identifier:
                keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c2:84:f7:86:c8:22:9f:e1:8e:65:58:7c:91:30:a3:8a:91:
         8f:b6:70:30:75:d5:e0:20:95:fa:6f:5a:69:ae:80:b9:18:1e:
         63:b5:52:cb:79:4b:cc:80:c2:0b:45:70:21:5b:92:b4:7e:c1:
         79:0c:62:80:a5:b5:24:bf:ad:b8:1e:c4:3f:92:4f:a4:81:2b:
         45:3e:4d:21:b4:53:d3:69:b1:59:69:08:94:10:63:db:49:b4:
         a1:c2:40:85:b1:0f:03:22:95:43:ad:e7:5b:cd:ed:de:52:8b:
         a1:ec:7a:a8:62:39:34:c5:1f:95:a1:ae:0c:d2:8d:83:91:e9:
         44:e2:01:21:fc:39:6e:ae:c3:af:49:a0:8d:4d:e4:80:45:42:
         5b:ef:26:71:fc:bf:21:f2:76:39:2a:9f:e9:2a:2e:a4:aa:55:
         f9:7e:04:b7:3b:de:98:45:cd:b7:d4:d9:1c:fd:38:1f:a8:21:
         a0:f4:7f:e7:ba:27:7b:44:87:e4:70:46:e1:d5:fd:7a:2d:a1:
         42:88:e0:0b:f1:08:37:25:4d:84:0a:ac:b9:3f:c5:e3:70:ad:
         e6:61:a0:54:51:7b:43:a5:04:2c:b0:a9:95:67:d0:c8:14:88:
         98:cb:3d:79:78:13:85:23:ac:e9:b7:1c:d3:3c:3a:e0:30:e0:
         62:8c:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:38:08 2026 by rpki-client