Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File:                     iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier:          zBeTjrcSdbrNIm0s5hBdhr9g3xmQ3dxzv/e7rqYP8io=
Subject key identifier:   0E:33:FA:1F:91:11:84:7E:24:E2:00:F2:B6:09:21:3A:E9:88:F9:9F
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer:       /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial:       0FB3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number:          0FB1
Signing time:             Sun 21 Jun 2026 00:56:54 +0000
Manifest this update:     Sun 21 Jun 2026 00:56:54 +0000
Manifest next update:     Tue 23 Jun 2026 00:56:54 +0000
Files and hashes:         1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: BvshNNb9OnCvIup7qGzq49x93Snp8jdBPG61ahQrNA4=)
                          2: D1595E92479F11F1955B4AE8CE1D38B0.roa (hash: rIbLa5rpV4WAj/sqUqpq18W5uZz1OXNKu6ZwE1OKxqg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4019 (0xfb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AF, serialNumber=895527C77E201446673090F081648F186127B1BA
        Validity
            Not Before: Jun 21 00:56:54 2026 GMT
            Not After : Jun 23 00:56:54 2026 GMT
        Subject: CN=6a3736d6-5311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:f9:75:62:fc:8f:39:b3:6b:d8:14:c8:3a:
                    80:f0:5c:8b:93:b2:be:c3:08:f4:b7:4f:be:36:ac:
                    eb:3e:20:28:28:65:e8:78:5b:33:98:f4:15:fb:0c:
                    a8:06:04:c6:c9:cb:3d:bd:ce:f9:33:fb:e9:4b:69:
                    1c:06:19:33:2b:5a:33:ea:1d:29:43:50:53:40:97:
                    c5:9c:00:e4:06:b9:fd:80:14:70:66:90:1a:24:bd:
                    d0:36:3a:a5:9b:71:9a:a3:d4:2b:b8:c2:36:57:2d:
                    14:93:d0:a9:e9:fc:3b:8e:8c:f8:c5:7e:78:ac:95:
                    bf:db:6d:a6:35:45:da:28:92:0b:79:9a:4e:82:03:
                    48:0b:63:65:02:07:a0:1e:42:03:d0:76:53:22:f1:
                    b1:7c:43:71:83:66:6a:e5:fb:3d:31:ec:46:6e:91:
                    e3:41:c4:73:80:c3:62:c9:72:fd:e8:a4:fe:23:4b:
                    c1:f6:d5:d8:ad:77:39:13:e8:85:ab:27:0d:27:81:
                    a9:af:98:02:b3:0d:35:f1:ee:18:a0:ef:6d:ba:97:
                    af:96:e5:f1:fb:ba:7d:a5:8d:f8:cb:07:10:fc:b4:
                    32:88:01:4f:2c:8b:ee:89:a0:36:0d:8f:f7:ce:c0:
                    28:66:35:c9:d8:c0:e8:4f:b3:41:6c:35:0c:70:3a:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:FA:1F:91:11:84:7E:24:E2:00:F2:B6:09:21:3A:E9:88:F9:9F
            X509v3 Authority Key Identifier:
                keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:b2:49:df:8c:ee:a2:32:a6:01:7e:9f:df:7d:a5:d9:a4:
         5b:ae:b1:2d:df:d8:7f:42:30:f7:9f:1f:b1:fa:f5:b3:5c:b6:
         66:ed:18:a3:e3:af:3a:a1:59:0b:30:7d:4a:b7:ad:02:9d:13:
         06:6d:df:bc:54:8b:bc:7e:25:ef:6c:ce:b3:d9:9d:bd:a2:50:
         b2:93:13:a0:b3:27:33:19:b1:d8:2b:79:3a:24:c1:76:77:87:
         88:67:b3:15:69:5d:ba:8b:39:02:23:34:82:a2:46:d3:94:3b:
         89:e0:91:52:f0:de:92:ab:e4:c6:29:cc:ed:07:f8:f9:b7:f0:
         22:b4:e7:85:3c:0e:e7:f1:15:25:d6:aa:a3:57:dd:bb:5e:25:
         e7:bc:7e:11:32:a2:39:16:23:d1:3b:21:9b:b3:cf:70:32:c5:
         d5:68:4f:84:7d:92:30:2a:be:38:c1:10:90:23:12:93:aa:9d:
         86:25:0d:4a:92:38:0c:45:7a:40:86:2b:f9:ce:de:4b:6f:4c:
         2f:bf:1a:50:23:56:89:ed:0d:e1:76:7b:91:3a:e8:66:53:93:
         30:d5:c5:91:94:cb:1c:1e:e2:99:c8:91:25:de:cb:b6:01:82:
         0d:95:7c:16:32:37:76:6d:20:6f:6a:45:4e:97:64:a5:df:2e:
         14:54:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:41:01 2026 by rpki-client