Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File:                     Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier:          DTnnfIysBkS7aRtGA7JMRTo0/YV4ku7QRXDcaQDKO2I=
Subject key identifier:   78:86:AD:96:E7:D8:6D:E3:89:47:F6:6A:B3:24:6D:AE:E6:A3:3B:6E
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer:       /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial:       0679
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number:          0670
Signing time:             Tue 21 Jul 2026 02:38:53 +0000
Manifest this update:     Tue 21 Jul 2026 02:38:52 +0000
Manifest next update:     Thu 23 Jul 2026 02:38:52 +0000
Files and hashes:         1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: N5H4r86DUbRpFzmKn47h/FC6uzDGmrsyGG6UCTR6WD0=)
                          2: B483DD5260AD11F186FE20D2CE1D38B0.roa (hash: N08HMzaJrPQG98yF1dW42tjXRI8KTIgg1jSIS0yuaAc=)
                          3: 139A49B660AE11F1B99DE7D5CE1D38B0.roa (hash: rarFIEocrc0sUeZ7yyVNoX9GlR16ogXiHgAmgUr4kRc=)
                          4: 50EB151660AE11F1946459D6CE1D38B0.roa (hash: 3jYVZX446QMMMo1B09+QFtsPNpHJUqVfEGEWSu2C7qM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 02:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
        Validity
            Not Before: Jul 21 02:38:52 2026 GMT
            Not After : Jul 23 02:38:52 2026 GMT
        Subject: CN=6a5edbbd-8a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:2f:e8:6b:d6:72:88:5e:12:a9:bb:fd:78:
                    0d:48:fa:4e:d3:b9:54:4f:cf:36:f9:1c:cb:9d:30:
                    68:90:8d:41:e2:bd:a6:59:85:3f:a5:3b:21:6e:91:
                    ee:46:60:77:22:19:cd:4a:87:c4:e3:bf:e9:d7:8d:
                    7a:0a:62:ac:9e:7c:0b:bd:cd:64:f3:30:87:65:45:
                    b0:7f:36:93:2b:09:b2:82:d3:85:cb:a0:de:4c:d0:
                    39:27:58:c7:8d:39:00:33:ba:3a:b2:75:a7:ee:49:
                    62:d8:c8:38:80:22:53:af:a1:a2:c9:71:8c:55:92:
                    d1:51:a7:ed:9d:ad:13:a7:0f:b0:cf:9f:82:23:81:
                    b8:b1:e2:9c:b0:f3:3b:71:16:ee:bb:d3:44:51:11:
                    f2:90:22:60:7a:44:2f:d0:d6:99:74:76:55:db:4c:
                    a9:4c:be:51:4e:07:e3:f1:aa:cd:ca:13:ca:95:89:
                    ed:e6:f6:96:cb:75:ef:ec:82:21:25:a5:31:68:d2:
                    dd:cb:5f:5e:ae:72:e4:b3:c4:4e:14:aa:76:d8:4c:
                    67:1c:d8:5d:6b:48:d1:e0:81:a3:03:79:ea:c3:ed:
                    ad:55:58:20:d1:6c:ff:f6:15:05:1f:b0:36:ed:bb:
                    e9:1e:27:71:43:ba:6b:74:a4:65:a0:1c:44:dd:e0:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:AD:96:E7:D8:6D:E3:89:47:F6:6A:B3:24:6D:AE:E6:A3:3B:6E
            X509v3 Authority Key Identifier:
                keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:05:a6:29:16:48:f1:66:a9:ac:8a:4d:1d:ed:99:05:1a:b7:
         98:59:e8:a9:37:f2:31:ee:b3:11:76:35:8a:8a:45:cf:14:80:
         1b:f4:93:bd:18:27:23:da:b1:f2:f7:10:f0:2d:6e:0d:11:6c:
         9e:8f:15:48:66:22:92:94:0c:15:fd:3f:8d:88:a6:63:cd:ae:
         33:1b:8c:49:c3:07:c2:b6:33:84:1f:fd:ed:02:80:67:46:c1:
         1b:a2:77:b7:71:ca:25:a1:b2:84:53:90:6b:e0:ef:00:42:e5:
         86:7a:08:3a:4a:e3:a3:45:cd:eb:07:d9:12:97:7e:de:6d:0c:
         40:a2:d4:b5:48:a3:80:67:5b:d8:0a:8e:36:a2:be:ce:22:41:
         60:d5:81:0c:8e:71:4b:48:d5:4e:88:30:ce:04:07:d6:a5:08:
         cc:9a:e4:dd:5e:19:49:38:ec:20:e7:ad:ee:69:df:5b:cd:29:
         1b:00:a2:9f:c1:1e:8c:54:fd:79:ee:57:c1:e0:81:bf:68:3c:
         7a:bc:6c:67:29:49:07:e4:7e:d5:65:be:9b:9e:67:7a:81:97:
         d6:46:68:d5:2b:66:fa:6d:f2:12:e1:78:09:0f:9d:1d:0c:77:
         3f:46:56:49:72:20:09:19:68:9a:12:98:c5:cc:49:72:f5:e8:
         56:7b:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:13 2026 by rpki-client