Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft (raw, json)
Hash identifier:          r+26r7Qc6ZblmUtT5GVA7oFIfIg6SMIy3LAWlMJLGKI=
Subject key identifier:   03:9A:B9:0D:B7:D0:EA:01:B8:7B:9D:51:58:3D:9C:25:72:82:07:13
Authority key identifier: BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Certificate issuer:       /CN=F36E084CAF/serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
Certificate serial:       09AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
Manifest number:          09A4
Signing time:             Sun 21 Jun 2026 01:39:32 +0000
Manifest this update:     Sun 21 Jun 2026 01:39:31 +0000
Manifest next update:     Tue 23 Jun 2026 01:39:31 +0000
Files and hashes:         1: u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl (hash: w8oBNFJBTgQg/vjOct3xwejEBoEq4BfXWKOhPwsxvfY=)
                          2: 86921EA0A38311EBBE2DD613F8AEA228.roa (hash: Qdm1jwSuwMkCRXEjG6ft+SApHF6cYD5AROgyucfXjCM=)
                          3: C2A79C94A38311EB9FD81C14F8AEA228.roa (hash: wCi/saeIICAwOHNLZFRK/7Rxl1hUxRkLtU6ihyqYm9U=)
                          4: 09404144A38211EB9403A411F8AEA228.roa (hash: XszKqqcugifGQ7P7cFMGaXWJ1rKb7154oh90pRoXSnM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Validity
            Not Before: Jun 21 01:39:31 2026 GMT
            Not After : Jun 23 01:39:31 2026 GMT
        Subject: CN=6a3740d3-ae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:d7:3b:54:99:f4:a5:94:52:ca:5b:e1:c3:
                    f6:f3:3d:cc:20:e0:11:8c:db:51:9f:5c:3b:11:20:
                    e8:58:bb:44:f3:e4:84:cc:c3:ce:73:24:83:af:55:
                    9a:78:15:10:37:2a:1a:9f:86:77:0c:2e:cd:4d:e5:
                    2d:85:dd:3d:8c:a3:2e:74:d1:dd:43:22:59:cd:f8:
                    8c:6c:df:17:6e:6b:81:7d:87:6a:fb:71:6e:c9:92:
                    8f:ee:20:e5:31:48:b3:05:aa:9f:5d:8d:53:39:95:
                    7f:55:03:ee:8e:bc:bb:48:14:64:1c:78:65:47:57:
                    cb:a2:aa:ec:ec:5a:5b:45:8b:ef:af:ab:65:34:15:
                    cd:eb:22:2f:8c:6c:b1:86:e4:2f:d3:12:c7:1d:fd:
                    42:67:32:d7:82:f1:dc:db:4b:06:4d:0a:01:79:79:
                    b9:33:67:0f:9f:78:e8:26:b8:f0:19:73:d9:ab:ef:
                    6a:fa:51:c2:91:d7:d1:6d:26:23:02:c7:40:72:85:
                    51:0d:65:3c:e1:46:38:32:91:c4:29:b5:55:8b:66:
                    81:72:83:7f:19:3f:57:a8:de:45:30:03:d7:e7:5a:
                    1c:c3:07:80:5e:34:c8:21:68:a3:09:c7:54:b7:80:
                    ab:e6:7a:0c:24:97:4c:3a:a3:13:19:ab:24:32:17:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9A:B9:0D:B7:D0:EA:01:B8:7B:9D:51:58:3D:9C:25:72:82:07:13
            X509v3 Authority Key Identifier:
                keyid:BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:79:8a:56:f6:1a:0c:2c:4c:bf:75:22:6e:83:6a:47:0f:
         ec:46:d9:a9:67:aa:4a:4e:52:c9:5a:69:f3:32:47:be:b3:c7:
         f6:2e:d8:16:00:ec:0e:67:92:8e:5b:37:9a:14:e5:ba:7f:b3:
         0c:8d:6c:83:47:5e:d2:ff:08:ee:49:21:3c:02:90:d6:cb:fe:
         ae:be:92:cb:56:bd:68:db:c7:de:cf:88:bf:5a:17:45:92:d4:
         f9:24:ed:09:14:e7:87:1a:fb:32:09:c4:7d:36:9c:a3:21:14:
         6e:77:e1:51:f8:15:4e:99:be:54:29:53:a3:7c:04:8f:58:c7:
         a7:0a:47:3a:25:74:99:a9:74:47:43:b4:9e:e3:1c:ff:5c:d7:
         cb:d0:08:80:a8:29:72:99:cb:1f:f1:ea:6b:cc:c8:c5:f5:9c:
         14:b3:bd:90:19:5d:e9:95:1c:02:48:93:53:3e:5c:0e:e5:e1:
         a1:1f:9c:99:05:09:6f:07:d3:ab:5d:49:a4:1e:87:be:52:8d:
         6e:fc:44:67:da:80:73:5d:57:78:6b:78:e7:f9:0c:f6:ab:b6:
         4e:29:28:2f:42:95:61:7a:02:7d:7b:e4:e7:ed:f0:41:d9:83:
         7e:77:9b:32:d3:a4:04:d9:99:1f:30:69:3c:f6:1d:05:23:0e:
         c8:fc:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:57 2026 by rpki-client