Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          LDIew5n0tJAag0XKmdPtmSSEVpGemHyi/I2GpEoyw9U=
Subject key identifier:   F1:37:A4:30:D4:2D:4B:CE:F3:CA:C4:2B:72:3D:FF:95:A4:9E:13:64
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       0A22
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          0A20
Signing time:             Thu 11 Jun 2026 01:31:50 +0000
Manifest this update:     Thu 11 Jun 2026 01:31:50 +0000
Manifest next update:     Sat 13 Jun 2026 01:31:50 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: r6sdQ98MLcXA4EmsUMqfVx/CE4rku1Denl1aUCPF+xs=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Jun 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594 (0xa22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI, serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Validity
            Not Before: Jun 11 01:31:50 2026 GMT
            Not After : Jun 13 01:31:50 2026 GMT
        Subject: CN=6a2a1006-468d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e1:ef:2b:e1:ef:74:13:78:0f:5c:f8:33:11:
                    e0:9e:27:dd:06:ad:28:4f:b0:98:20:10:d1:00:f3:
                    7e:f2:35:8f:9c:97:65:a3:fd:cc:a4:29:9e:19:98:
                    48:f5:e0:54:b5:15:99:84:f2:be:66:8d:2f:ba:b9:
                    8d:02:cd:a0:3a:ab:88:1a:25:ed:a4:3f:41:d4:9a:
                    0f:e3:c0:8e:4f:32:52:67:98:09:f3:79:50:4e:34:
                    2e:e3:00:53:6c:97:28:80:98:4c:f1:1a:c3:57:9d:
                    f2:91:15:4a:50:ff:8c:79:9b:51:81:6e:5a:2a:93:
                    95:5a:8f:c9:d7:86:0d:d4:e2:9b:c3:aa:ca:93:e0:
                    a7:85:f6:75:2d:ef:1b:06:e1:77:4e:dc:88:68:37:
                    86:28:68:23:c2:2e:11:bf:a4:fb:93:98:8a:21:76:
                    58:be:9a:ec:7c:64:a6:03:ac:95:c4:e6:6f:75:44:
                    2a:61:2d:48:85:04:56:73:30:43:4a:03:ec:eb:06:
                    f9:4b:9c:8d:c9:3a:0d:5d:47:9a:60:b4:0c:7f:db:
                    34:69:18:8c:9d:ac:90:37:31:a6:df:ec:c9:65:87:
                    e1:8d:56:78:4b:eb:70:4a:89:53:63:89:95:75:63:
                    cf:e5:38:a6:c4:73:1f:38:e1:85:f4:53:21:86:90:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:37:A4:30:D4:2D:4B:CE:F3:CA:C4:2B:72:3D:FF:95:A4:9E:13:64
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:be:00:04:a7:a8:a9:df:6b:f3:a1:db:0a:2c:ce:3b:e6:
         66:9b:c8:1d:a0:ba:7f:35:73:99:31:5b:1a:c1:be:e2:00:07:
         e4:2d:66:b1:81:59:c3:65:17:99:4b:57:35:0f:19:30:24:55:
         62:c5:4e:84:5f:f7:21:9e:36:19:d8:4d:55:e9:ff:e1:a5:46:
         c3:bd:2f:33:b0:c5:7e:96:ba:c1:ea:b1:24:20:45:cc:34:50:
         e2:ad:58:2d:4e:ce:1a:78:ea:88:0f:d1:e4:34:93:70:36:87:
         3f:7d:14:c2:b6:12:4f:14:ad:95:fa:b6:f8:01:31:f0:85:73:
         13:a8:ff:6c:42:7a:1a:97:bd:41:8f:e7:03:d6:fb:e7:be:99:
         c7:d2:90:e5:72:54:47:83:da:ee:e2:42:f4:f7:cb:27:42:fd:
         3c:f4:69:74:24:8b:0e:af:43:e0:ff:a6:ee:4e:e6:f6:6c:11:
         7c:38:24:8d:da:54:46:0b:95:29:bf:c6:06:5f:dc:a9:f3:45:
         2a:3f:0a:68:38:01:92:df:4a:8d:61:82:b4:6e:d2:94:e4:ce:
         dd:d9:e3:c8:de:f5:f9:13:9b:87:84:24:a8:cd:1d:2f:bc:e7:
         d0:2c:64:7e:75:3d:61:8f:2d:e7:f8:bb:7e:bf:fc:35:ea:61:
         a4:f1:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:37:21 2026 by rpki-client