Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
File:                     4-72W1UWm_HGaNKpYbla8vKIf90.mft (raw, json)
Hash identifier:          775vf1Tv+OtWG8rXyQ5Iz3llmRVWm6kKDg8NPO+osqc=
Subject key identifier:   48:E1:4E:E5:0B:21:88:8E:6E:B3:BD:90:36:25:1A:52:D2:02:98:23
Authority key identifier: E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD
Certificate issuer:       /CN=F36FE55FAF/serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
Certificate serial:       3B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
Manifest number:          3B
Signing time:             Sun 21 Jun 2026 05:37:19 +0000
Manifest this update:     Sun 21 Jun 2026 05:37:18 +0000
Manifest next update:     Tue 23 Jun 2026 05:37:18 +0000
Files and hashes:         1: 4-72W1UWm_HGaNKpYbla8vKIf90.crl (hash: MO99ibfYQtxe2AXzV0IkTQFArgWGsDiNXrPc/uxYTEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE55FAF, serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
        Validity
            Not Before: Jun 21 05:37:18 2026 GMT
            Not After : Jun 23 05:37:18 2026 GMT
        Subject: CN=6a37788f-1d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:8c:80:81:4f:26:fb:0f:e3:ab:ae:fd:ed:
                    61:69:f1:af:e0:3e:f6:67:ed:5c:b2:20:cd:1d:e8:
                    8f:a8:59:3e:ad:b7:f8:dc:3e:1a:fa:a6:a9:3f:31:
                    58:5d:92:b3:66:fe:6d:f1:ac:fb:55:9c:c1:42:31:
                    dd:dd:9c:c1:f6:f4:d2:03:25:fb:69:0e:c4:17:77:
                    8a:69:f8:e9:e0:cb:08:7e:85:5f:22:04:f3:e2:2e:
                    be:82:4d:f9:ed:10:84:c4:3f:8f:b4:7b:31:d6:72:
                    46:93:83:26:63:dd:72:84:36:8f:d9:3d:b5:9c:f8:
                    26:6f:4a:8d:e3:d1:2e:9f:02:b6:1c:34:5f:ed:46:
                    63:5f:ee:15:1d:88:16:fa:37:06:bc:27:cd:a4:af:
                    bb:89:7e:61:e4:53:00:0c:a4:9b:f2:51:d1:f6:d5:
                    5a:91:79:ec:e7:79:78:9b:d4:48:2d:bc:5d:e8:81:
                    b0:39:46:9e:d2:9f:41:a2:25:22:54:15:f7:a4:cc:
                    df:82:a4:95:5a:e8:b2:ba:e3:ed:68:cf:f7:c8:1b:
                    59:0f:c2:18:68:bf:f9:11:cf:82:7c:f4:8d:75:68:
                    b0:25:35:db:25:90:3c:dd:ce:d6:31:49:95:87:7d:
                    49:66:c9:c5:23:f5:c7:81:76:16:e8:22:e1:cb:6e:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E1:4E:E5:0B:21:88:8E:6E:B3:BD:90:36:25:1A:52:D2:02:98:23
            X509v3 Authority Key Identifier:
                keyid:E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:41:11:a9:16:cc:e8:24:e6:4c:92:70:55:6e:90:67:05:
         4e:96:e8:4c:d3:4f:9c:b4:28:a4:8c:19:13:c1:4f:2b:e8:4d:
         91:80:43:f2:80:43:b1:47:c6:89:62:bd:e2:3d:11:d3:26:65:
         7e:5f:21:4c:c7:f3:53:dd:b3:3d:f6:f2:69:7f:21:fb:66:94:
         53:d3:19:f5:84:27:15:bd:43:0d:40:64:39:27:bb:6e:5e:e0:
         a3:32:56:83:71:a6:50:b2:8b:24:dc:61:5f:f1:c5:d9:87:02:
         b8:6f:c1:37:2d:ac:e9:41:04:ed:e9:ab:6e:77:8f:62:42:67:
         5a:48:1f:e5:08:31:96:23:1b:63:ee:42:09:08:d9:6a:2a:51:
         5e:c2:72:1d:6c:8d:83:c2:aa:41:f1:f3:51:15:ad:53:20:4b:
         3e:20:44:0e:cb:77:84:9c:b9:ec:44:26:82:61:ef:b0:98:1f:
         95:eb:f7:4d:df:69:80:1e:8f:c5:89:41:1a:e7:18:6a:f5:ce:
         4b:cd:88:66:d3:47:9f:6e:4a:1a:bf:e4:24:02:47:ec:57:fe:
         4d:ec:58:09:81:8a:d4:0c:07:93:48:bf:4d:b1:ca:f7:07:c4:
         bd:ac:f6:27:f3:eb:9a:87:46:80:d2:69:86:1a:e7:59:d4:f9:
         63:0c:9c:7d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBOzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
RTU1RkFGMTEwLwYDVQQFEyhFM0VFRjY1QjU1MTY5QkYxQzY2OEQyQTk2MUI5NUFG
MkYyODg3RkREMB4XDTI2MDYyMTA1MzcxOFoXDTI2MDYyMzA1MzcxOFowGDEWMBQG
A1UEAxMNNmEzNzc4OGYtMWQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3vjICBTyb7D+Orrv3tYWnxr+A+9mftXLIgzR3oj6hZPq23+Nw+GvqmqT8x
WF2Ss2b+bfGs+1WcwUIx3d2cwfb00gMl+2kOxBd3imn46eDLCH6FXyIE8+IuvoJN
+e0QhMQ/j7R7MdZyRpODJmPdcoQ2j9k9tZz4Jm9KjePRLp8Cthw0X+1GY1/uFR2I
Fvo3BrwnzaSvu4l+YeRTAAykm/JR0fbVWpF57Od5eJvUSC28XeiBsDlGntKfQaIl
IlQV96TM34KklVrosrrj7WjP98gbWQ/CGGi/+RHPgnz0jXVosCU12yWQPN3O1jFJ
lYd9SWbJxSP1x4F2Fugi4ctu98sCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRI4U7l
CyGIjm6zvZA2JRpS0gKYIzAfBgNVHSMEGDAWgBTj7vZbVRab8cZo0qlhuVry8oh/
3TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkU1NUYvRDdGREUwQ0EzRkIwMTFGMTk5RkEyQTE5Q0YxRDM4QjAvNC03Mlcx
VVdtX0hHYU5LcFlibGE4dktJZjkwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNC03MlcxVVdtX0hHYU5LcFlibGE4dktJZjkwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZGRTU1Ri9EN0ZERTBDQTNGQjAxMUYxOTlGQTJBMTlDRjFE
MzhCMC80LTcyVzFVV21fSEdhTktwWWJsYTh2S0lmOTAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGpkQRGpFszoJOZMknBVbpBnBU6W6EzT
T5y0KKSMGRPBTyvoTZGAQ/KAQ7FHxoliveI9EdMmZX5fIUzH81Pdsz328ml/Iftm
lFPTGfWEJxW9Qw1AZDknu25e4KMyVoNxplCyiyTcYV/xxdmHArhvwTctrOlBBO3p
q253j2JCZ1pIH+UIMZYjG2PuQgkI2WoqUV7Cch1sjYPCqkHx81EVrVMgSz4gRA7L
d4ScuexEJoJh77CYH5Xr903faYAej8WJQRrnGGr1zkvNiGbTR59uShq/5CQCR+xX
/k3sWAmBitQMB5NIv02xyvcHxL2s9ifz65qHRoDSaYYa51nU+WMMnH0=
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:27 2026 by rpki-client