Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
File:                     -HlTHl-cqfSLcTODpQCBDVDy0kQ.mft (raw, json)
Hash identifier:          94+NCEyWDUA0CMxqkLP/Ri7Ohe9DiG3h/SDXGnW2X6Q=
Subject key identifier:   29:BD:58:7B:F1:B1:90:FF:18:8C:BA:20:7C:69:CD:CB:55:5D:4A:AC
Authority key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
Certificate issuer:       /CN=F361950AAF/serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Certificate serial:       01A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
Manifest number:          01A4
Signing time:             Tue 28 Jul 2026 04:56:09 +0000
Manifest this update:     Tue 28 Jul 2026 04:56:09 +0000
Manifest next update:     Thu 30 Jul 2026 04:56:09 +0000
Files and hashes:         1: -HlTHl-cqfSLcTODpQCBDVDy0kQ.crl (hash: VeNPvZCkWeMl4VN8h0V+D7XcFdSW+oCIwRskWEGrAJI=)
                          2: 7B6F3054478411F0B371B7DADAE4EC9C.roa (hash: w5E8JBOJdrFnCHufU8YUVNcTyXQmMdg4vF0OTc1n9B4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
        Validity
            Not Before: Jul 28 04:56:09 2026 GMT
            Not After : Jul 30 04:56:09 2026 GMT
        Subject: CN=6a683669-a9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:34:95:f2:cf:db:7b:a4:a9:4d:84:dd:11:
                    11:3b:ec:98:9e:77:3f:75:f0:e5:c0:d6:9c:58:04:
                    b9:c7:02:35:bd:4e:f9:82:d3:47:90:27:1d:c0:38:
                    db:88:77:92:8b:b3:28:27:24:16:65:4e:76:78:b8:
                    35:5f:29:3b:52:53:93:ba:4e:39:2b:27:02:43:7a:
                    86:04:c0:1b:07:c6:3f:d8:a6:03:27:af:ee:c3:92:
                    41:04:d1:69:11:90:c8:f3:25:81:b3:23:97:a2:11:
                    d4:02:9f:78:9b:c0:10:b9:4c:8e:60:f5:ae:7f:15:
                    d5:7a:22:38:a7:0a:09:c6:5d:56:cc:fd:58:24:79:
                    0d:05:0f:70:c3:07:03:a2:a2:b8:00:7b:33:e9:56:
                    8b:48:12:60:8f:aa:f6:35:ec:fc:4b:c6:db:2d:76:
                    ec:15:63:18:92:79:5a:cc:58:c8:d1:26:40:c2:ed:
                    8a:a4:b3:bf:f1:d7:29:e9:76:96:e1:06:10:94:b8:
                    64:1c:32:f3:6b:5e:3d:69:0b:8e:06:2d:a2:fd:f9:
                    50:96:9b:8a:ae:3f:9b:a0:24:eb:1c:74:0a:13:e1:
                    f5:c0:61:df:79:3f:22:f3:00:ee:ae:5b:e7:a6:26:
                    f6:ba:19:69:d7:c6:63:ef:38:53:df:59:01:22:23:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BD:58:7B:F1:B1:90:FF:18:8C:BA:20:7C:69:CD:CB:55:5D:4A:AC
            X509v3 Authority Key Identifier:
                keyid:F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:2a:59:c4:28:1f:9b:ab:b5:b6:f3:69:53:25:e8:ed:5a:
         74:71:84:82:ea:b5:70:10:5f:26:06:de:9e:54:fe:b9:ed:6a:
         ce:b3:c2:1e:42:9d:17:c6:0a:8b:a7:51:04:6a:b0:27:db:70:
         c7:8f:ba:8c:c8:29:71:38:61:7f:e0:eb:65:85:d1:e8:ec:68:
         37:92:1a:d1:ec:88:69:fd:f2:0e:52:65:6f:3f:b6:1c:cb:2e:
         14:04:90:8a:bd:67:e0:23:3c:d5:c4:98:cd:0e:e6:04:9f:bb:
         76:1d:22:36:1b:df:42:00:5d:b3:11:c8:12:91:ff:80:eb:b9:
         c8:87:c9:9d:da:d9:48:5b:6e:7a:24:36:f3:5d:56:ca:63:9a:
         22:49:45:c1:17:ed:b7:82:b1:2e:58:29:f9:a6:05:95:68:4a:
         1c:a2:ec:43:de:c8:c0:fb:e1:7e:10:a8:eb:15:2c:e1:07:50:
         cd:57:e6:53:33:aa:46:3d:4d:39:e7:96:7d:c2:5a:31:31:f5:
         5a:f5:e1:65:1c:21:42:87:09:7f:75:fd:de:2a:04:a4:2b:71:
         5c:81:62:b6:03:68:3d:55:c4:ba:9f:5e:3c:00:1d:df:fe:f9:
         80:a2:88:fb:ab:7d:74:7d:47:00:8b:95:ad:5a:91:1d:68:78:
         04:8c:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:19:10 2026 by rpki-client