Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          atl7KCK2KP8dzEFo8s/5YkXDeBt244aUSEYm0KwDN8E=
Subject key identifier:   04:3B:47:D5:2A:C1:43:86:7A:F8:B6:00:BF:2C:91:D2:DE:CF:C9:69
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       0355
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          0352
Signing time:             Tue 28 Jul 2026 04:10:28 +0000
Manifest this update:     Tue 28 Jul 2026 04:10:27 +0000
Manifest next update:     Thu 30 Jul 2026 04:10:27 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: nocqvWLjabxFvXWvQBSQwARpV25b+UDMHqZAMi5B6MQ=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853 (0x355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: Jul 28 04:10:27 2026 GMT
            Not After : Jul 30 04:10:27 2026 GMT
        Subject: CN=6a682bb3-8fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:2f:6f:c4:31:f9:f9:e2:3b:58:66:3d:49:
                    8b:cf:87:19:eb:b7:8c:29:c7:3f:a8:53:e7:31:5c:
                    d6:89:7e:e5:5a:da:93:68:63:c9:a6:f0:b3:fe:20:
                    6f:b2:56:30:74:83:84:e0:35:60:cd:93:0e:c9:64:
                    79:7b:a7:5e:da:6e:c6:79:74:68:52:0d:e5:49:05:
                    e7:bc:69:b0:14:5a:64:fc:a3:1e:53:00:44:e2:c0:
                    2a:df:10:1f:57:40:1c:cc:11:e5:0e:98:b8:98:3a:
                    19:f2:62:3a:bf:b6:7f:4e:63:c1:fd:ab:36:09:18:
                    ff:4c:2f:60:b5:63:28:9e:13:5d:a4:ee:12:18:d4:
                    38:84:cd:47:f2:12:76:8f:4f:2c:63:8a:b1:c1:a9:
                    3b:d1:7e:b6:c8:28:75:7b:2d:d9:29:70:48:50:d6:
                    cb:f9:01:48:d4:34:1a:77:37:58:4a:d5:74:47:a5:
                    b8:f5:5e:ac:6a:e3:e2:5c:14:4b:4c:72:ae:f4:4d:
                    79:df:02:78:3a:49:d8:b5:fd:b5:ce:81:c4:a0:4c:
                    a6:90:67:22:db:f9:93:b1:39:f3:36:af:b5:f9:c1:
                    3a:b2:10:f4:01:81:10:e1:73:46:63:94:1a:95:46:
                    a6:21:b7:1f:94:b1:bc:d6:27:fe:22:af:58:99:cc:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:47:D5:2A:C1:43:86:7A:F8:B6:00:BF:2C:91:D2:DE:CF:C9:69
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:96:19:ae:df:53:c9:b2:7e:d0:93:22:68:48:27:b6:88:
         f2:9b:f7:ab:11:6e:78:66:2a:2e:ac:6f:ae:4c:2e:19:a8:52:
         67:b4:2e:cd:54:8c:73:08:fc:04:67:93:b9:d1:4f:c6:80:b6:
         18:27:24:ca:75:24:e0:ae:b9:0c:77:85:60:1f:39:30:e3:b5:
         9a:d2:db:64:e0:40:45:a8:07:b6:9f:ce:a8:12:de:2a:f3:01:
         8d:8e:a7:77:c2:8d:c1:9d:91:d6:81:dc:4b:6a:c1:9a:cb:e5:
         cc:d7:d5:00:b9:bb:9e:e4:51:a3:44:7f:36:e3:83:68:53:36:
         37:28:7b:9a:93:d2:03:13:77:54:56:f8:c2:54:3f:4c:30:5e:
         d4:2f:a5:47:74:63:c9:cf:cb:4a:af:20:71:02:1d:99:bb:b4:
         af:67:43:92:ba:cc:cc:e9:e1:0f:3c:5b:74:22:5b:5b:6a:bc:
         2d:4e:16:45:5c:77:0f:ee:ac:f6:d2:e9:8b:26:ec:14:18:50:
         39:92:fc:57:cf:4a:a1:84:be:7c:f2:d3:84:22:91:88:fe:5c:
         73:20:0a:df:89:f4:60:fb:3e:d0:67:f8:90:c6:97:b6:8e:8a:
         a6:f8:2e:94:5b:6b:44:6d:f4:0e:e6:3a:7f:78:59:3a:9d:66:
         64:88:52:96
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTMyNTRBRjExMC8GA1UEBRMoMUY0MEZDQzU3QzI2QTZEREI2MDVGNzc5OEE0QjUz
QzA5RDJCNjIyMDAeFw0yNjA3MjgwNDEwMjdaFw0yNjA3MzAwNDEwMjdaMBgxFjAU
BgNVBAMTDTZhNjgyYmIzLThmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdWS9vxDH5+eI7WGY9SYvPhxnrt4wpxz+oU+cxXNaJfuVa2pNoY8mm8LP+
IG+yVjB0g4TgNWDNkw7JZHl7p17absZ5dGhSDeVJBee8abAUWmT8ox5TAETiwCrf
EB9XQBzMEeUOmLiYOhnyYjq/tn9OY8H9qzYJGP9ML2C1YyieE12k7hIY1DiEzUfy
EnaPTyxjirHBqTvRfrbIKHV7LdkpcEhQ1sv5AUjUNBp3N1hK1XRHpbj1Xqxq4+Jc
FEtMcq70TXnfAng6Sdi1/bXOgcSgTKaQZyLb+ZOxOfM2r7X5wTqyEPQBgRDhc0Zj
lBqVRqYhtx+UsbzWJ/4ir1iZzO3tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBDtH
1SrBQ4Z6+LYAvyyR0t7PyWkwHwYDVR0jBBgwFoAUH0D8xXwmpt22Bfd5iktTwJ0r
YiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEzMjU0L0M5MDEyQURFMDIzNDExRUZBMDk2NTA1RjAxNzAwMUIxL0gwRDh4
WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwRDh4WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTMyNTQvQzkwMTJBREUwMjM0MTFFRkEwOTY1MDVGMDE3
MDAxQjEvSDBEOHhYd21wdDIyQmZkNWlrdFR3SjByWWlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjs5YZrt9TybJ+0JMiaEgntojym/er
EW54ZiourG+uTC4ZqFJntC7NVIxzCPwEZ5O50U/GgLYYJyTKdSTgrrkMd4VgHzkw
47Wa0ttk4EBFqAe2n86oEt4q8wGNjqd3wo3BnZHWgdxLasGay+XM19UAubue5FGj
RH8244NoUzY3KHuak9IDE3dUVvjCVD9MMF7UL6VHdGPJz8tKryBxAh2Zu7SvZ0OS
uszM6eEPPFt0IltbarwtThZFXHcP7qz20umLJuwUGFA5kvxXz0qhhL588tOEIpGI
/lxzIArfifRg+z7QZ/iQxpe2joqm+C6UW2tEbfQO5jp/eFk6nWZkiFKW
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:52 2026 by rpki-client