Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
File:                     ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft (raw, json)
Hash identifier:          /slt5X1Ac9Hc5Clk52ZPkTVvlI8p72RPyHW4M61PIOc=
Subject key identifier:   B3:08:B1:29:3E:FB:65:A3:0D:63:F3:88:42:43:E0:72:7B:11:64:6B
Authority key identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74
Certificate issuer:       /CN=F36DD266AF/serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
Certificate serial:       CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
Manifest number:          CD
Signing time:             Thu 06 Aug 2026 05:24:33 +0000
Manifest this update:     Thu 06 Aug 2026 05:24:32 +0000
Manifest next update:     Sat 08 Aug 2026 05:24:32 +0000
Files and hashes:         1: ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl (hash: 2wR9JBYUIzS7uRMNWXX2dQz8H8eVbbKkng0HG1f3PsI=)
                          2: CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa (hash: i/Wi+caUXTG32H1sLXk5LlvkMGbjcNs/nOtlDeXv2gQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD266AF, serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
        Validity
            Not Before: Aug  6 05:24:32 2026 GMT
            Not After : Aug  8 05:24:32 2026 GMT
        Subject: CN=6a741a91-736f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:28:bf:bb:72:9e:16:1d:58:13:cd:d9:52:
                    85:33:d3:44:d3:b9:a8:08:d8:0b:ca:aa:eb:e2:c7:
                    1b:31:26:23:e2:96:af:68:e0:57:3d:cf:40:ca:78:
                    31:8b:06:61:15:d2:66:5e:2f:38:d2:da:aa:58:ba:
                    d7:37:99:c0:3c:ab:14:dd:eb:31:f8:9b:2e:03:04:
                    12:b1:10:49:a5:ab:96:fd:c1:b3:b3:c3:3a:08:ab:
                    d1:bb:a7:91:d6:cd:92:47:c1:cb:3f:21:0d:88:c0:
                    22:51:85:d2:3c:4c:ef:e7:8f:e8:e5:7b:78:1b:f2:
                    08:95:6b:13:15:ec:5e:ab:f2:d9:4d:67:f4:70:92:
                    ae:eb:53:9a:6b:ac:09:08:8a:0c:3a:f2:39:b4:35:
                    a5:5a:fe:fe:59:6a:80:16:ee:2b:ad:09:04:53:98:
                    9b:b9:75:66:d2:3b:ca:01:f8:3b:46:69:22:12:9b:
                    e8:40:3b:72:ab:21:02:bc:4d:87:38:a4:cc:b1:77:
                    92:2f:de:33:0c:70:2b:3e:10:c3:78:10:e1:d8:e1:
                    35:83:0b:77:97:e2:e6:9d:59:90:65:b0:6d:41:ee:
                    8b:80:b9:65:d3:fd:d3:f9:6d:fb:5e:d3:ad:08:64:
                    11:97:34:05:e4:a3:d8:5b:7f:78:c4:9f:3b:11:0c:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:08:B1:29:3E:FB:65:A3:0D:63:F3:88:42:43:E0:72:7B:11:64:6B
            X509v3 Authority Key Identifier:
                keyid:22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:29:7f:47:2a:2a:72:bb:3b:44:d6:8c:19:ff:4b:72:88:
         76:c4:42:67:47:37:9c:d4:48:fb:e9:3c:4e:57:e8:cc:35:01:
         76:28:2c:b3:f9:88:80:93:0e:1d:71:e4:e2:c5:e9:47:66:da:
         9f:29:19:8f:1a:aa:7b:8e:20:06:df:af:9f:c6:d2:01:8f:7d:
         ec:c4:41:57:ae:4b:d1:4e:53:36:11:f3:58:70:63:d6:84:52:
         79:55:61:91:da:fd:cd:42:a2:b8:7a:0b:46:8e:cb:c1:f5:96:
         9e:70:98:8c:a6:87:04:97:bf:70:b4:d1:97:1b:40:50:6b:c0:
         03:e0:cd:d2:85:09:a7:79:c2:86:cb:7e:d3:7a:a7:a7:cc:4c:
         54:a1:02:16:42:58:34:44:42:b6:c8:6c:72:74:a9:64:2c:44:
         36:1d:6e:21:57:39:2e:ca:bb:15:17:e7:2c:21:9a:c6:77:da:
         69:8b:79:b9:60:34:b9:7a:06:b2:48:10:e8:22:42:bd:aa:e3:
         3e:6c:4e:89:fb:f6:92:e8:8c:75:b0:ef:23:b8:0b:8e:fe:8c:
         db:65:bf:54:69:72:42:a5:0d:94:f0:b5:b5:0f:e0:88:a7:43:
         bd:82:3c:d9:54:3c:f0:05:95:c6:00:78:a7:62:99:82:2e:f4:
         dd:8c:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:40:46 2026 by rpki-client