Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          4KkZtSY6BXeYLFpY754D+ZtU9ClADgClXmevdna3zGU=
Subject key identifier:   70:C5:13:D8:DD:F8:F5:D4:80:07:74:54:E0:B2:05:84:65:8D:B4:F4
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       0634
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          0634
Signing time:             Thu 06 Aug 2026 02:43:04 +0000
Manifest this update:     Thu 06 Aug 2026 02:43:04 +0000
Manifest next update:     Sat 08 Aug 2026 02:43:04 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: Va0q3ABPJ6EQsfeEQrEsEAxiA1tcOZZF0kkUtsho5BE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Aug  6 02:43:04 2026 GMT
            Not After : Aug  8 02:43:04 2026 GMT
        Subject: CN=6a73f4b8-1bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:88:03:c5:9e:e1:65:42:53:80:66:92:0b:
                    78:ee:fd:12:a7:95:6c:c4:66:5f:91:1a:97:fb:77:
                    96:4f:0a:47:44:30:10:32:4b:ee:55:53:ed:5f:91:
                    a4:51:e5:9d:5a:31:f2:2c:00:03:31:10:fc:b7:74:
                    35:72:26:bb:02:89:02:59:f2:af:6c:ac:0d:e8:15:
                    f9:6e:5c:01:bb:c9:0e:f9:f6:58:30:4e:c8:e9:b1:
                    a3:62:e5:62:3f:ec:04:dc:fd:b8:b7:f3:76:07:82:
                    e4:dc:bc:a7:2a:97:d6:f5:28:21:9f:0d:99:ae:04:
                    97:b2:0f:ba:a5:10:d1:f4:d2:de:05:f3:a8:7c:a3:
                    11:9b:57:54:9b:1c:7b:92:a3:ae:55:ca:13:27:61:
                    43:9e:d0:cc:86:b4:26:27:2b:1d:1c:0b:82:de:16:
                    18:98:a7:68:61:4a:3b:85:54:68:d2:e7:5b:7e:d0:
                    a5:d4:46:63:7c:ad:07:68:4d:b7:a0:95:27:b1:46:
                    3d:d3:e7:07:97:96:35:3c:85:a6:75:5a:bc:44:b7:
                    b0:c1:24:05:85:27:38:ea:46:17:67:19:98:52:fb:
                    de:e8:18:45:38:a0:d7:f2:13:c1:a5:dc:42:d8:c1:
                    b5:a7:9e:76:4d:8a:6f:de:c8:05:ad:23:4e:f3:b0:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:13:D8:DD:F8:F5:D4:80:07:74:54:E0:B2:05:84:65:8D:B4:F4
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:82:88:8f:02:42:c6:19:8d:42:41:8e:87:1f:78:01:e0:a8:
         71:2a:a7:6a:de:fd:01:ca:e7:7d:be:39:68:b0:3c:9a:62:1b:
         f3:ce:79:e8:80:42:8a:f3:56:c8:75:96:a7:44:dd:f7:17:da:
         42:8b:80:6a:28:24:ef:ab:c6:20:45:1a:43:a9:05:06:8c:80:
         56:f1:af:e5:c1:9a:a5:fa:42:d9:09:4b:f4:72:47:8e:3a:10:
         d6:c4:7f:74:34:05:42:92:9b:ae:d4:e0:4b:0c:fa:6d:18:4a:
         22:51:a7:25:f0:95:ba:21:41:87:0a:27:f0:51:d9:3e:f9:d4:
         b5:b5:ef:16:00:bf:79:4a:d9:c0:a2:0b:3b:1e:1b:20:b9:9d:
         b7:7b:6a:9b:b1:b8:7e:b2:d9:70:b3:13:d8:d2:d6:62:80:10:
         a1:82:76:72:d6:59:42:70:22:d3:02:e3:41:92:2e:19:07:f3:
         70:ce:08:48:73:59:f1:32:0b:12:41:c4:38:5a:76:79:19:d7:
         70:32:f9:33:a8:cc:7d:c4:ff:56:c8:27:bc:9d:8a:61:48:cc:
         36:70:79:b3:b1:24:d5:73:60:6e:53:42:b2:14:c8:07:45:01:
         22:f5:58:1b:b0:39:bf:cb:18:a5:02:da:59:72:49:99:8e:44:
         2e:4f:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:45 2026 by rpki-client