Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          G9rlFkqWL/Cfou6flH/AginGBKrckiIm4tNEolr9YHQ=
Subject key identifier:   EB:0F:0E:A8:66:44:5F:72:AC:37:4C:19:22:51:22:A5:D0:8C:1D:0F
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       02EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          02EB
Signing time:             Fri 17 Apr 2026 04:08:29 +0000
Manifest this update:     Fri 17 Apr 2026 04:08:28 +0000
Manifest next update:     Sun 19 Apr 2026 04:08:28 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: LwUvpjtnktgiYPT0t0YZbf49/AYLdhEMCQuv0puYO0g=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: Apr 17 04:08:28 2026 GMT
            Not After : Apr 19 04:08:28 2026 GMT
        Subject: CN=69e1b23d-11dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:ba:e8:43:13:5d:8c:8f:b6:c4:79:60:cb:
                    7d:f4:e6:1a:8a:a9:9f:16:62:06:e0:31:3e:56:45:
                    63:ed:1a:4e:cc:80:76:ef:00:57:5f:31:35:c8:da:
                    2c:9f:99:ad:d1:16:70:df:5c:07:40:42:a6:b2:25:
                    7b:06:fe:42:9c:49:97:97:8c:23:03:fa:63:7f:c3:
                    76:bc:1a:f1:93:09:c6:bd:d9:5d:32:5a:f9:d1:dc:
                    df:a6:1d:3f:64:07:9c:0d:c5:0d:05:c3:79:08:a0:
                    ff:bf:33:83:ac:00:2d:62:8f:7a:27:df:02:b1:1f:
                    5e:b5:45:81:65:f1:bf:3f:9a:a0:c1:0b:28:17:65:
                    d9:5c:06:b6:ff:1d:ab:f7:b1:bc:65:ce:fc:d9:0d:
                    9e:ad:26:bb:93:db:f3:db:cf:ac:6f:35:aa:96:7c:
                    c1:c8:a7:b8:e6:49:4f:e0:c9:10:de:1e:03:0c:c1:
                    8d:81:17:3a:75:8a:81:ea:68:18:2f:cc:2b:e3:9b:
                    89:97:bf:cd:d3:46:26:41:73:ba:ab:45:c3:af:fe:
                    28:66:cc:3d:3f:7b:8b:90:fa:1f:38:5c:25:4a:bf:
                    b2:9b:07:46:de:78:9f:59:de:09:9d:53:a7:80:40:
                    6c:46:09:e7:5e:6f:21:47:83:7b:b1:62:36:b8:21:
                    12:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0F:0E:A8:66:44:5F:72:AC:37:4C:19:22:51:22:A5:D0:8C:1D:0F
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:77:41:b3:d0:b4:73:c2:e9:ba:0b:ca:b7:27:44:3c:f3:
         94:f1:61:5d:a3:00:d8:af:ae:cb:6f:f0:67:bd:09:77:81:e4:
         24:bc:c8:42:c8:70:50:57:21:b9:48:e4:4c:1a:cb:b6:97:01:
         5d:15:88:82:a8:c4:a6:8a:60:5c:4b:17:1c:fe:8b:44:22:7a:
         eb:26:bc:33:10:9c:63:aa:f4:81:20:b8:dc:51:fc:75:a3:e6:
         e2:8d:a5:80:ad:d2:1d:07:89:ac:b4:3d:23:c2:a6:6c:7e:f7:
         62:64:45:1b:89:7b:d4:03:87:2a:52:fd:c8:9a:5e:33:22:6e:
         61:df:a5:09:b2:af:f3:8a:2b:01:25:33:22:e4:21:57:c3:92:
         92:2f:51:93:79:9a:88:e8:fe:02:c5:39:83:ba:e5:74:09:6c:
         1a:c5:c4:52:d5:a9:44:15:c9:ee:11:8a:43:f7:e0:f9:5a:44:
         50:f8:26:b0:a5:65:79:a0:5c:08:2c:01:6a:0f:4f:c3:52:ba:
         6d:97:1a:5e:f8:61:ac:15:35:54:0e:77:65:83:d0:b7:89:e3:
         ee:16:a1:ff:b1:f4:5a:3d:44:21:b2:c2:7e:a1:c6:ef:a6:55:
         3a:39:ee:59:89:e9:2f:0f:21:80:f4:c1:3d:c8:97:03:a0:95:
         d4:9d:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:38 2026 by rpki-client