Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          toKCtmzd+4s7ZbXgaxqr2fCfhUCcZ/vN2JMsSR3875E=
Subject key identifier:   80:EF:BC:FF:24:12:A7:49:3E:E9:E4:40:39:B6:22:E9:B0:18:D7:28
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          0260
Signing time:             Mon 02 Mar 2026 02:59:15 +0000
Manifest this update:     Mon 02 Mar 2026 02:59:15 +0000
Manifest next update:     Wed 04 Mar 2026 02:59:15 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: PO2yOEOitAm5BtEuPchs4fhRxjBqc/sdKn+dpQMBSlE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF, serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
        Validity
            Not Before: Mar  2 02:59:15 2026 GMT
            Not After : Mar  4 02:59:15 2026 GMT
        Subject: CN=69a4fd03-2dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:3a:9a:b5:1d:f7:a0:72:46:de:34:2b:6e:
                    9b:ad:c5:72:52:75:12:e9:24:bd:ca:52:bf:6e:de:
                    55:ff:d5:a9:a4:44:87:06:46:d3:d7:fe:ca:32:de:
                    a0:fd:21:07:47:a2:f9:cc:5a:40:26:59:52:2b:6d:
                    21:dd:30:16:f8:14:46:bd:78:66:fd:de:81:de:84:
                    88:dc:07:47:b1:83:54:7b:b1:d8:9c:3b:9b:53:c7:
                    4e:24:ce:b3:ed:e5:af:ca:36:54:94:07:bb:4e:44:
                    9c:f5:0f:27:17:16:ff:8e:fa:9c:fc:84:11:7f:4f:
                    4f:16:d7:11:c1:05:7f:6d:17:16:85:2b:f0:47:1a:
                    0c:82:ad:ce:71:19:e8:82:e0:28:ff:f7:65:8a:10:
                    b6:8c:3d:6f:82:b7:e6:76:70:ba:80:ca:12:cd:34:
                    40:09:48:f5:01:34:47:6c:23:e1:c7:8d:c0:7c:0a:
                    71:81:3e:36:f7:15:b5:b0:2f:29:65:73:06:63:b0:
                    2e:8f:15:2a:e7:8e:50:01:f6:2f:3a:e5:ef:41:4b:
                    46:94:7a:e6:7c:6f:25:c7:69:53:5e:d5:d9:b0:e1:
                    14:a1:05:ca:a8:6b:5a:fb:10:4b:2c:9b:9c:41:94:
                    6c:7c:f9:22:c8:86:a0:7f:f9:9b:69:e9:5c:b3:69:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EF:BC:FF:24:12:A7:49:3E:E9:E4:40:39:B6:22:E9:B0:18:D7:28
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ff:ee:f7:18:02:4b:29:03:72:4c:ab:25:4f:25:ea:c8:01:
         74:10:84:3d:ac:1e:89:ad:37:bd:a5:9e:8f:84:87:eb:4f:0f:
         c9:e1:bb:12:40:65:1f:ca:f8:6a:79:8f:70:6e:07:70:18:4d:
         a4:22:c6:e5:43:85:c1:ec:00:55:ee:e4:c7:c3:a4:8d:82:e1:
         bf:39:b5:b0:8d:33:11:9e:aa:fe:5c:e8:fa:df:c1:40:bf:31:
         5b:5c:f9:bd:25:41:33:1d:4f:d3:c5:e2:8e:e6:50:bf:af:f8:
         78:78:52:8d:60:02:67:de:d5:70:d2:a9:ba:d4:5c:8b:d0:52:
         f2:11:5b:44:a5:05:54:cf:7e:b7:be:8d:6d:ef:26:dc:2e:35:
         f4:17:09:ac:f6:98:72:50:0a:8a:82:e6:b5:02:e4:1b:b6:8c:
         6c:0f:09:4a:4b:2d:01:94:11:99:e5:61:23:df:92:59:79:66:
         8f:c6:5c:9a:67:6c:2d:5e:c5:3c:0d:46:95:69:40:d9:a9:1c:
         26:f6:12:a6:f8:74:1e:9b:73:82:72:c3:ff:b1:9c:d5:e3:bd:
         82:22:2c:9e:25:33:19:41:d1:85:25:6f:d1:2f:bf:03:42:bb:
         a2:2f:5c:48:ec:5d:ba:ad:46:21:e4:53:33:73:13:a4:0a:e9:
         43:7f:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:02 2026 by rpki-client