Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File:                     iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier:          f8W6diaUn7nBgJ27tjrIB/9xDw/Zs04rVX516oR/XQM=
Subject key identifier:   EC:78:94:A2:DF:E7:75:A5:5A:EB:98:F6:2C:9D:2F:D2:63:17:76:99
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer:       /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial:       012A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number:          012A
Signing time:             Sun 21 Jun 2026 05:08:59 +0000
Manifest this update:     Sun 21 Jun 2026 05:08:58 +0000
Manifest next update:     Tue 23 Jun 2026 05:08:58 +0000
Files and hashes:         1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: 2ErTVBHy4cRkmDEy8xn9wwlE+qX6P6nZwn1p36oVq2g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
        Validity
            Not Before: Jun 21 05:08:58 2026 GMT
            Not After : Jun 23 05:08:58 2026 GMT
        Subject: CN=6a3771eb-b014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:c2:4b:c2:e9:ff:e2:84:c5:68:e2:b0:c2:
                    4e:72:82:a2:53:fa:e4:c0:c7:fe:bd:fb:cd:ed:6e:
                    46:48:37:7d:d3:8d:5b:c0:8c:7a:28:cd:ab:7e:8d:
                    07:cb:cc:e0:06:49:5e:5c:3a:19:e7:04:63:49:70:
                    d2:60:88:67:68:75:33:50:78:c8:8a:7b:13:35:fa:
                    03:bd:6c:f1:18:05:01:fa:bd:64:f3:6c:ee:b9:09:
                    c1:e1:ac:01:c9:b2:a6:67:fa:4e:90:55:f3:90:5b:
                    7e:3f:d0:ea:d2:2d:f5:42:60:11:aa:38:ee:c9:c5:
                    5b:28:24:09:e3:c0:c8:c9:09:eb:60:9b:ed:f1:4b:
                    b4:69:45:70:d0:37:c8:cc:e5:ad:cd:b2:82:0a:1e:
                    11:5f:a8:30:51:46:1e:4b:da:04:b2:e6:ca:c9:8a:
                    e8:94:50:b9:3e:fc:11:6c:b2:d8:4a:c8:08:40:f3:
                    49:b0:89:50:9a:1f:a3:30:c6:b0:a9:38:88:3a:85:
                    f9:56:f4:9e:6f:f1:c7:b9:56:23:d9:5e:ac:03:d8:
                    9e:75:42:1c:3a:39:bd:7e:ae:e2:34:c2:d8:71:3c:
                    cc:20:37:d7:b2:a1:e0:05:2c:10:d2:ef:f8:22:d8:
                    99:d9:fa:89:58:41:20:fa:3d:ff:d3:37:32:ca:11:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:94:A2:DF:E7:75:A5:5A:EB:98:F6:2C:9D:2F:D2:63:17:76:99
            X509v3 Authority Key Identifier:
                keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:bc:03:83:fb:5b:56:87:2b:67:cd:ad:31:59:e3:e1:99:
         3a:8b:1e:f9:f5:ca:8e:e7:50:e1:46:81:03:85:29:bd:05:91:
         74:52:bc:35:c2:ed:a6:6b:b2:84:69:6a:b6:b4:77:2b:f9:24:
         da:06:03:59:b4:52:72:70:7b:e4:8e:21:3c:a0:06:22:98:51:
         70:e3:56:fd:53:0c:5c:42:fc:da:03:bd:3b:0d:df:8d:e6:21:
         68:db:9c:70:f1:af:b7:89:d2:88:63:1e:4d:ff:76:d5:a8:bd:
         60:7c:09:43:b8:72:10:5b:a8:10:28:7f:e7:60:1b:06:b1:64:
         8a:66:0b:fd:19:d2:37:07:16:c7:68:23:14:e1:c8:1b:88:a6:
         4a:a3:1b:d9:00:7a:1b:ed:40:e0:2f:59:c5:ec:96:82:f6:70:
         ed:d8:ab:69:f7:03:dc:86:2d:db:e6:17:7c:6e:02:26:ce:b6:
         b3:45:76:97:8f:84:6d:71:cf:59:b3:e3:9b:79:73:c7:25:a5:
         ba:75:d3:ef:a2:4a:e4:68:82:5b:cd:b7:97:1b:a9:23:1a:63:
         2a:a5:82:53:3a:56:db:02:bb:fb:88:c6:a6:1c:e3:2b:07:6e:
         47:49:3c:45:e8:32:e5:8b:16:8c:42:84:3a:6a:d1:da:02:48:
         8f:7b:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:27 2026 by rpki-client