Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          h0d/Y7dhVJDebbFXjv6d+aroakaREHf0u2mlpaGA5BM=
Subject key identifier:   3F:2C:E4:B5:5E:43:54:61:F7:9B:BA:0E:84:A1:86:58:5D:F3:D0:3F
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       0759
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          0757
Signing time:             Thu 06 Aug 2026 02:17:17 +0000
Manifest this update:     Thu 06 Aug 2026 02:17:16 +0000
Manifest next update:     Sat 08 Aug 2026 02:17:16 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: 7VdXkv8lrf+Boee8/+WRfwec6ZBPAeYuSr91n+4uCNg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Aug  6 02:17:16 2026 GMT
            Not After : Aug  8 02:17:16 2026 GMT
        Subject: CN=6a73eead-3775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:b6:a9:c0:63:3b:db:18:9f:dd:3e:2d:89:
                    ba:e2:ae:13:7e:d4:4c:dc:8d:34:b6:ed:6c:ac:a0:
                    48:f1:1b:01:f0:08:b4:2b:bc:5a:15:d9:28:d1:85:
                    1d:39:d1:ac:70:7d:90:80:7e:02:7e:f8:de:1f:51:
                    4e:40:a2:58:e0:32:2b:0c:03:b0:f7:15:ee:3a:c1:
                    06:5a:ae:95:ad:01:c0:3c:f8:b8:89:43:86:b9:e3:
                    4d:67:e2:ad:32:9b:52:92:3d:4b:f6:e6:03:ec:f4:
                    4c:0d:34:87:d6:68:ab:6b:85:4f:5d:58:e2:a1:db:
                    a8:e4:fa:8a:53:fc:7f:54:2b:45:5b:8e:76:83:7b:
                    4f:36:57:80:ff:dc:b4:f0:9f:8a:46:95:10:1b:50:
                    bb:43:21:5a:38:3f:a1:b5:9e:cc:12:9b:46:56:97:
                    38:d3:c9:b0:8f:16:e7:65:d2:a2:45:41:1c:77:6d:
                    38:aa:38:3a:cf:4e:fd:82:c5:1c:cf:dd:66:b4:2b:
                    2d:c8:51:4f:71:63:b5:2e:ca:0c:be:3a:f4:3b:0e:
                    b5:c9:05:56:5d:eb:9c:b3:7e:3d:be:c3:40:9f:aa:
                    8d:f4:1d:1f:43:96:50:1b:d8:6e:25:1a:59:b6:bc:
                    ba:19:67:f5:6f:79:bb:ad:b2:30:24:98:67:73:03:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:E4:B5:5E:43:54:61:F7:9B:BA:0E:84:A1:86:58:5D:F3:D0:3F
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:2b:15:1c:ba:c0:0f:0a:0a:77:2d:e6:24:60:8e:5f:b6:
         98:96:b9:ee:a0:73:37:37:e6:07:c4:7c:a4:87:b4:5c:2b:65:
         0a:63:72:a2:5a:88:e4:e8:d8:1a:49:a6:d5:0f:14:c7:f5:f4:
         83:61:25:2b:d1:1a:a2:8e:32:c1:66:2c:c0:10:5a:e8:8c:72:
         3d:9b:1b:cb:c9:b8:df:91:05:e4:91:48:ff:62:fe:d8:43:d7:
         0d:dd:05:24:ec:50:80:fc:46:6e:b3:25:2a:4e:9e:f1:4e:60:
         9e:54:bf:b9:fe:cd:71:d4:1b:2e:3b:66:5a:2b:d4:9a:dc:99:
         f6:fa:78:ce:67:7e:0d:eb:4b:65:58:31:8a:b7:e7:46:16:3b:
         07:91:52:46:88:b0:0e:57:bc:4e:c7:dc:2c:08:91:c9:1c:98:
         77:e6:3f:d9:14:e9:3f:00:23:41:77:81:df:87:a6:13:1d:04:
         35:d0:d5:a9:30:0f:20:36:0a:4a:6f:82:2f:c9:c7:bd:20:17:
         65:7e:8b:ba:f8:61:ad:65:f1:bc:4e:a1:88:41:36:bc:30:9b:
         b8:9e:3c:25:16:66:49:1b:e5:13:10:64:cf:df:3a:38:5c:53:
         fd:d1:69:0d:f7:f7:97:66:e3:3e:8d:94:5e:0c:80:71:da:b5:
         5a:10:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:38:05 2026 by rpki-client