Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          CmV8nctdhiGJNoXN5maJXlaJPHsrJqF4iult7Wkx26o=
Subject key identifier:   34:F9:35:3F:A0:9D:95:F1:C1:07:1A:52:E4:0B:F8:5D:97:47:99:5D
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       0427
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          0426
Signing time:             Thu 11 Jun 2026 03:38:38 +0000
Manifest this update:     Thu 11 Jun 2026 03:38:37 +0000
Manifest next update:     Sat 13 Jun 2026 03:38:37 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: 7nuaO8Y9+jOtyhjRKi5JnHcnxTWlHrGOoM94MfaeJYc=)
                          2: FC67525472E011F0A5185D9CDAE4EC9C.roa (hash: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Jun 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Jun 11 03:38:37 2026 GMT
            Not After : Jun 13 03:38:37 2026 GMT
        Subject: CN=6a2a2dbe-f3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:6b:9f:02:83:26:7c:8f:1e:a8:d2:f6:54:
                    4a:e8:14:8e:09:a0:db:5b:0f:7e:88:b1:6a:8d:04:
                    8e:a0:29:e8:9a:01:bb:cf:9e:8b:21:fe:f4:03:8e:
                    c7:b1:7f:f4:3e:7d:b4:9c:d6:55:fa:f7:b0:92:bb:
                    97:2c:35:2a:40:e4:ee:c3:1e:f2:9a:29:e2:ef:a8:
                    29:ea:15:03:cd:f5:65:0b:95:73:34:6a:62:15:34:
                    db:c4:b9:d0:04:89:dc:76:7d:ba:85:1e:eb:ec:f1:
                    4a:65:a3:62:73:97:a3:e6:36:c8:89:03:fa:c0:b8:
                    b2:4c:9c:7a:17:73:e5:04:4e:e3:89:d6:3e:2d:7b:
                    b6:47:b4:c3:59:cb:ea:36:76:df:87:98:71:43:9b:
                    12:3d:da:7c:2d:86:06:d6:8b:9a:44:0a:5c:30:4f:
                    1a:5d:89:7b:a9:c1:77:cc:15:ac:a3:fb:e9:5c:44:
                    a3:fb:94:6d:c0:56:e3:4a:b5:a7:64:1c:c6:46:4a:
                    d4:21:22:31:0b:32:63:a0:9c:02:ca:d6:77:e0:4a:
                    65:4e:2d:31:1e:7b:f5:48:eb:75:3c:db:38:aa:3c:
                    bd:95:6a:ac:ef:27:fb:8f:f2:6c:75:30:f4:e9:6e:
                    88:04:fe:cc:cb:26:60:cf:07:7e:c2:da:eb:f0:eb:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F9:35:3F:A0:9D:95:F1:C1:07:1A:52:E4:0B:F8:5D:97:47:99:5D
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:35:84:95:4d:a7:c3:d0:aa:c0:f8:a6:db:7a:dc:9e:f0:7b:
         1d:28:16:26:81:49:f3:d0:25:ca:73:fa:a0:61:37:7c:7b:cb:
         ab:49:48:08:9c:82:0b:63:ce:1b:04:b3:8a:e8:75:e5:f5:21:
         bc:1c:c7:e4:3e:95:ab:48:c2:50:1e:18:25:c3:dc:d4:c5:2f:
         e8:be:cf:63:fa:e8:6c:20:3a:77:81:ef:07:bd:55:a0:2c:2d:
         e1:dc:f8:76:23:34:dd:92:27:78:5f:54:57:33:97:2e:40:83:
         f3:db:d2:01:c0:94:91:d1:74:cf:0a:50:29:9d:f3:c2:7e:2f:
         6a:70:70:8f:f6:6e:04:90:5c:df:e2:27:b5:ff:ee:c9:5f:c1:
         64:6f:32:b6:b3:f7:49:a9:98:25:ca:f9:8c:f4:33:fe:28:8c:
         3b:1f:f6:ea:79:41:13:87:55:43:1e:e0:a1:0b:45:94:2c:0c:
         f6:96:7a:cb:8b:37:ba:f1:28:0d:96:80:97:b0:46:e9:34:30:
         ce:32:76:84:35:e9:7f:36:23:12:d7:35:58:87:5a:09:c7:6b:
         80:29:97:a1:a6:52:07:80:f1:ef:b6:e5:ae:eb:d9:26:34:4d:
         67:40:c5:54:84:ac:4d:a7:1e:c1:31:3b:0d:f6:cd:08:24:6a:
         38:3a:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:26:15 2026 by rpki-client