Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
File:                     HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft (raw, json)
Hash identifier:          RKCUIjN/qbkGU8XtHYt7k7KiesTfT7J6Q+NLFFzC7fI=
Subject key identifier:   98:5A:95:B4:B1:A8:FD:B8:9F:7B:67:06:D4:F1:CD:A1:8E:51:16:43
Authority key identifier: 1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09
Certificate issuer:       /CN=F362D462AR/serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
Certificate serial:       DE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
Manifest number:          DC
Signing time:             Sat 13 Jun 2026 05:14:44 +0000
Manifest this update:     Sat 13 Jun 2026 05:14:43 +0000
Manifest next update:     Mon 15 Jun 2026 05:14:43 +0000
Files and hashes:         1: HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl (hash: ToILZNK/DJOCsGOAtMRilQ31bbVq5Y60S7ZhU4V+RCA=)
                          2: 4040C74AC52E11F0B05A368DDAE4EC9C.roa (hash: g29ZcN62OuQIybrymKKsA2XNqXJfFk2KbrGYZddauWU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                          rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AR, serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
        Validity
            Not Before: Jun 13 05:14:43 2026 GMT
            Not After : Jun 15 05:14:43 2026 GMT
        Subject: CN=6a2ce744-a6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:71:61:10:dc:3b:14:0f:a4:c2:fe:00:44:
                    68:08:fc:bc:5d:7b:da:b5:4e:97:d2:4d:1a:93:5f:
                    f4:50:83:d2:ce:2c:25:d9:bf:d4:07:9b:44:be:a1:
                    93:a0:f7:70:ed:ba:cc:7e:a0:1c:38:d0:e8:c1:4e:
                    cb:c5:b0:b5:1b:a8:02:52:6b:81:c3:6d:03:e5:ca:
                    73:4e:1e:b4:8f:5b:5a:e8:cf:fc:8f:af:96:15:72:
                    3d:67:ca:22:52:f8:10:b4:b0:18:2f:ce:a6:b0:85:
                    fe:3a:ae:e3:8e:4d:ce:1b:bf:18:57:2b:90:bc:e4:
                    bd:6e:d1:38:cb:ac:6a:c2:1a:d2:10:e5:8f:e0:10:
                    ac:6e:84:3c:c1:d9:f3:41:0b:7e:d3:1c:89:0c:64:
                    b0:4d:14:92:d9:07:88:b7:4a:5e:1b:b5:bf:82:cb:
                    32:39:d7:60:7f:34:47:cc:a5:ed:3b:c5:eb:cc:5d:
                    66:13:f9:8a:19:62:36:09:21:f4:1c:72:c5:3c:0f:
                    49:99:80:1b:ac:8c:00:24:73:84:e0:1d:16:02:68:
                    5f:6b:8a:83:e3:2a:6c:dc:c8:82:c6:fa:90:cf:d0:
                    bc:a8:f4:cb:92:ed:57:9c:b2:0f:af:35:9d:ca:7a:
                    49:85:23:73:e1:75:4b:c8:0d:4d:04:42:08:4a:72:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5A:95:B4:B1:A8:FD:B8:9F:7B:67:06:D4:F1:CD:A1:8E:51:16:43
            X509v3 Authority Key Identifier:
                keyid:1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:c3:56:58:52:d3:8a:48:98:3a:2f:5a:e7:0f:eb:3e:c9:
         24:9a:90:4f:71:21:a3:95:47:4a:b2:9a:90:d5:dd:63:0a:2c:
         03:25:5f:9e:0f:72:93:38:4a:90:e8:99:71:09:37:8e:28:ef:
         7b:c1:12:65:2d:ca:1d:33:a7:6b:29:a1:b4:54:a2:51:09:3c:
         8f:36:70:37:dd:65:bf:8b:33:30:42:73:e7:d8:37:91:4e:30:
         f2:b2:f4:27:22:6b:9e:a6:9a:2a:b4:b8:22:6d:db:3f:59:55:
         4f:0f:e5:7b:78:c2:e7:1a:f5:29:24:d5:03:40:90:cf:ae:8b:
         92:d5:03:ef:d7:c4:00:86:98:d3:b7:11:b9:fb:6d:ee:34:90:
         86:d9:fd:7f:50:11:cb:6d:8c:84:73:49:a1:f7:37:fc:a3:79:
         9b:2e:67:30:4e:cd:7e:90:dc:53:ce:d1:e8:5c:08:55:dd:ac:
         60:b3:88:35:d7:a2:9a:cf:d4:cf:8b:ac:7e:bc:82:5d:78:b2:
         40:5f:bd:16:b3:71:4d:ce:78:25:e1:56:08:0e:c1:cb:16:54:
         06:e5:62:e0:8f:a4:e6:a8:fe:0f:f6:e0:c6:8b:78:48:1f:b7:
         17:2d:a1:a6:63:fc:7e:21:40:5e:91:fa:89:ad:08:a8:ad:63:
         69:bd:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:33 2026 by rpki-client