Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
File:                     aFg2dgHVM90hnMnjOq3p4BLA070.mft (raw, json)
Hash identifier:          tD8hn6/0XSoJkLoh0/nF5Im2z0UqleDwRVoYR7Fga44=
Subject key identifier:   77:EE:4D:1E:FF:D4:55:83:FC:BB:02:C2:DB:B0:F4:73:AD:9A:15:A6
Authority key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Certificate issuer:       /CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Certificate serial:       059D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
Manifest number:          059B
Signing time:             Sun 21 Jun 2026 02:55:10 +0000
Manifest this update:     Sun 21 Jun 2026 02:55:09 +0000
Manifest next update:     Tue 23 Jun 2026 02:55:09 +0000
Files and hashes:         1: aFg2dgHVM90hnMnjOq3p4BLA070.crl (hash: ea+fKnY8ee3DJPje5BywwkJgqNKx0i6d9QmDbKEKmK8=)
                          2: F8655580279C11ED8AC3E690F1222468.roa (hash: x+l5je5hrDHkIdSRJfbUPuD6coe8HjIrW/1dz5GPwZg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0522AF, serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
        Validity
            Not Before: Jun 21 02:55:09 2026 GMT
            Not After : Jun 23 02:55:09 2026 GMT
        Subject: CN=6a37528e-ab19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:2f:ee:fd:0d:b6:a1:72:81:87:a7:12:70:
                    e0:6c:24:85:8e:0c:17:1a:6d:10:d9:5b:20:5a:27:
                    77:18:9b:12:f7:0f:ee:65:a7:ff:93:8c:ab:5f:f8:
                    bd:b7:00:3e:56:26:fc:7c:26:39:72:8f:8d:95:e9:
                    32:8c:0c:77:80:d4:0a:fb:0e:85:f4:2f:d4:b3:22:
                    b4:9c:6f:a0:05:5e:22:7b:0a:9c:82:f0:7c:0b:4b:
                    f6:c4:04:7e:05:ec:cd:cf:2c:7f:a2:96:4b:82:36:
                    1f:fe:61:ae:ec:65:6f:e7:f9:cf:ff:48:55:51:b7:
                    13:b6:6c:28:57:7f:5a:42:78:88:e8:7c:b7:96:e4:
                    86:a4:2e:71:f4:05:ba:06:29:ef:b7:1f:aa:b7:25:
                    cc:dd:87:b4:f8:36:69:74:9c:e1:33:1f:f3:0f:9d:
                    67:ac:34:13:86:30:ba:a1:08:54:1d:32:76:ca:68:
                    ed:cb:71:9f:da:41:bb:8c:25:1f:c6:17:0d:b2:c9:
                    14:54:1b:6b:54:e8:8c:be:43:a6:b1:00:5c:2e:37:
                    0f:28:a0:c4:3d:2d:ef:19:3a:55:26:46:69:b4:44:
                    66:45:db:5f:81:5b:cb:61:99:29:42:46:1c:59:88:
                    cc:b4:9b:82:7f:a9:1a:87:5f:ed:3d:5c:76:d4:9f:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:4D:1E:FF:D4:55:83:FC:BB:02:C2:DB:B0:F4:73:AD:9A:15:A6
            X509v3 Authority Key Identifier:
                keyid:68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:10:60:3d:2c:cd:00:bc:e8:ba:49:ea:35:ef:b9:90:72:da:
         15:96:ba:79:43:b1:f2:27:24:64:bf:52:a2:a5:c4:6f:d7:92:
         4b:2c:f9:41:4c:29:26:3a:53:d0:43:c5:88:46:21:65:93:17:
         63:bb:89:3d:94:9d:3d:04:44:57:95:30:d9:16:f0:d8:96:1c:
         d6:bf:ae:58:e0:6c:9d:4e:ef:7b:ca:46:91:3e:f0:84:18:57:
         9d:19:30:29:c1:88:8c:55:61:1e:f3:d5:ab:05:c7:36:b6:fc:
         6f:44:85:01:5d:b5:44:cf:c6:7f:cf:1a:1c:29:28:1e:23:2f:
         83:9e:01:a4:38:7c:7e:ee:58:29:42:96:6c:c8:46:10:a2:6f:
         69:25:8a:7d:af:07:b5:8e:02:3b:fd:d0:f6:bb:a9:cb:32:3b:
         aa:da:74:2c:89:8d:b5:62:75:f5:a5:08:77:87:29:34:e9:9b:
         1e:d8:94:39:53:f0:e1:73:df:92:6c:6e:13:4a:44:f3:99:3f:
         8e:7f:0b:21:df:82:27:1f:eb:a2:00:bd:e5:75:48:ea:b1:4c:
         89:e7:c6:67:d2:f4:d7:c5:83:69:48:71:96:aa:fa:fd:77:15:
         b7:b3:a2:88:90:08:c6:d7:1b:2e:65:a9:83:f6:91:6f:e8:dd:
         42:58:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:39:33 2026 by rpki-client