Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
File:                     zFDm0Igy-da0ktsaCun0dMNadjo.mft (raw, json)
Hash identifier:          Ur2wBew28SUR+DY3OlK600/CaJrZdYd/yCuQGD0LNIM=
Subject key identifier:   92:94:9C:B9:D6:DF:1C:07:D9:57:C1:D4:DF:73:1C:AC:76:68:2C:96
Authority key identifier: CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A
Certificate issuer:       /CN=F36EBB83AF/serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
Certificate serial:       CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
Manifest number:          CE
Signing time:             Thu 06 Aug 2026 05:23:57 +0000
Manifest this update:     Thu 06 Aug 2026 05:23:56 +0000
Manifest next update:     Sat 08 Aug 2026 05:23:56 +0000
Files and hashes:         1: zFDm0Igy-da0ktsaCun0dMNadjo.crl (hash: l0RJhsRXAwjjF6ilUSpNtAixmMQou2ueHeNxBxsTSm8=)
                          2: 890714D6F13C11F0A8B5B8EEDAE4EC9C.roa (hash: jpMzBp+XA2OT7GpKVUf61L9TEAnmUra8ZP6BY3MSD60=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBB83AF, serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
        Validity
            Not Before: Aug  6 05:23:56 2026 GMT
            Not After : Aug  8 05:23:56 2026 GMT
        Subject: CN=6a741a6d-cb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:74:71:7d:e5:d6:5e:00:0b:02:df:27:ad:
                    c2:31:85:e4:8e:50:ff:9d:85:77:aa:c5:f9:f3:5e:
                    27:9e:df:3f:97:d1:90:14:cb:d8:7c:24:96:b1:6b:
                    0a:8f:70:59:bc:d8:d0:c7:68:13:b4:33:c2:4a:81:
                    76:a3:36:ba:7f:02:19:f0:13:39:2f:5a:b0:fb:5f:
                    59:75:3f:fa:ed:8e:8c:75:b3:ed:ed:54:a5:79:b5:
                    77:35:55:e9:9f:96:85:67:2f:1e:64:41:3e:76:fd:
                    26:ed:60:98:f0:7d:c4:bd:1f:e0:f0:a7:71:a4:06:
                    a2:e2:0e:ae:66:b3:cf:26:94:2e:f9:e1:77:dd:63:
                    9d:b7:e2:23:9b:99:91:8d:1d:47:06:8e:46:86:64:
                    30:d5:7a:b1:f9:66:81:f4:83:ca:1d:28:30:f3:0b:
                    c6:9b:a2:f4:e4:ab:b7:e0:eb:24:f3:80:90:03:5c:
                    e7:ca:ef:2e:5f:48:94:9e:bf:40:cc:92:42:17:9c:
                    45:62:0f:ee:92:0e:ff:91:38:93:e8:34:bb:61:35:
                    33:5f:53:56:6f:84:3d:a4:7b:b4:f0:58:79:03:73:
                    7d:cb:6e:2e:21:f7:c2:71:43:af:7b:93:14:5b:1a:
                    2a:6a:f3:1a:91:22:3a:67:1e:06:7c:02:95:31:a4:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:94:9C:B9:D6:DF:1C:07:D9:57:C1:D4:DF:73:1C:AC:76:68:2C:96
            X509v3 Authority Key Identifier:
                keyid:CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:6b:3e:a1:c8:68:58:6c:fd:98:ae:06:8a:59:02:29:bf:
         33:2d:bc:85:ad:49:8f:46:08:c6:ab:c6:20:e9:70:22:3c:cf:
         78:77:6a:80:be:d6:9c:8a:64:76:26:60:55:9b:46:db:52:ae:
         06:e4:eb:e9:5e:d9:ba:98:e7:b3:2f:2f:5d:56:09:ef:09:f8:
         85:d8:1b:8f:7d:55:93:0e:fa:51:34:d0:46:cf:f6:0e:df:f6:
         a0:c3:54:d1:ac:97:db:b4:99:01:2e:ca:fb:b6:ff:85:2c:61:
         eb:38:e2:f8:5d:20:ec:48:fe:dd:10:4e:e4:c9:69:bc:21:2c:
         c8:57:b3:14:b7:b2:19:91:13:86:f2:54:60:aa:b8:3c:ce:3a:
         64:80:f4:cc:93:ff:a4:3f:af:84:98:e6:6c:67:5b:76:56:77:
         6d:e3:23:94:aa:2e:00:de:51:7e:4f:e8:99:08:9d:74:dc:ab:
         da:5d:77:84:df:2e:ae:37:d0:6d:e9:41:79:49:71:e1:fa:5a:
         42:68:3b:e3:27:46:dc:ae:af:9b:76:89:fd:f5:10:90:ea:25:
         b0:f9:30:fa:4f:37:64:36:6f:ab:f0:c1:cc:3b:e5:48:78:6e:
         5a:1d:c3:7a:39:b8:77:e9:2c:71:3c:30:45:da:47:fe:e5:a2:
         e1:db:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:59 2026 by rpki-client