Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File:                     h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier:          XWhq65dUiDiCX/aqyX9BqAkgo/zWVQbFif31/P52mqg=
Subject key identifier:   AC:FE:C4:34:91:BE:59:94:75:DC:D6:32:80:88:46:4A:68:66:41:DC
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       05D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number:          05C9
Signing time:             Tue 28 Jul 2026 03:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 03:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:56 +0000
Files and hashes:         1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: 7d10s1HHSmIKSXgo1QQ/CaTndRp1UASLzPknP0oEg5I=)
                          2: E930883CF5D411F08C13D08DDAE4EC9C.roa (hash: YuF0ZPXUrP/FErIbO1oG0qOrgfIUEuuBoE3/Li8gUZQ=)
                          3: 59AD6094F5D511F09117C492DAE4EC9C.roa (hash: tLC9mn7iIAWuyL5bTuMUM+l8+nADm3agRNyvn61Vsk4=)
                          4: D747D6E2F5D511F0B2621493DAE4EC9C.roa (hash: 4ZH2ONvWHUC5OJAskoe/2/7FyCm6fCYTywg5B4ILlVo=)
                          5: 548EDFBAD41611F09F8A6C9FDAE4EC9C.roa (hash: k8FRmBKTxWl53FchMRaZBeBDbnAPcS6cvBX3aUVupmA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Jul 28 03:00:57 2026 GMT
            Not After : Jul 30 03:00:56 2026 GMT
        Subject: CN=6a681b69-10b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:eb:a1:ee:f7:27:6c:f0:47:85:b8:4f:c5:
                    6c:60:e0:d5:b4:72:90:28:10:47:69:d4:9f:ab:de:
                    c3:fb:3b:a8:09:89:af:96:57:48:5a:f2:40:50:a1:
                    20:23:4e:01:27:e5:7c:0a:83:06:a5:32:69:2f:82:
                    b2:83:e9:57:e0:1d:c1:37:fa:aa:1a:c9:f7:45:f0:
                    bb:a7:50:85:df:f5:c4:ca:d9:1e:0b:3c:8f:d9:ff:
                    37:df:4e:2d:63:4a:3a:f0:19:df:82:c5:3a:df:de:
                    4b:64:55:43:8f:80:a6:ef:fe:2a:22:93:22:17:51:
                    b3:17:85:f2:a1:df:bd:b5:2a:bf:79:15:8f:8f:72:
                    7c:ea:25:04:b3:c3:50:c5:17:23:51:26:1d:b6:ea:
                    34:4e:64:a9:22:33:95:75:9c:79:86:6b:69:f3:54:
                    08:9f:55:1d:8d:15:c3:f4:bb:ba:0f:bc:53:9c:af:
                    c3:85:50:8e:31:f1:f0:26:2a:e5:ce:74:f8:1f:b4:
                    1d:41:a2:ea:b9:02:ba:74:aa:d2:15:c0:7e:3e:54:
                    33:70:00:74:fe:b4:90:e5:72:79:2b:d3:cd:10:a9:
                    9a:e8:36:1f:73:5c:ac:da:28:7b:99:02:bc:08:7f:
                    fa:6a:cd:66:f9:b4:8b:62:d2:0a:b4:9a:f8:7d:87:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FE:C4:34:91:BE:59:94:75:DC:D6:32:80:88:46:4A:68:66:41:DC
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:e9:db:ad:c3:f8:d6:de:45:7b:a2:8c:1b:16:39:9e:09:
         a9:f8:07:74:fe:2c:9c:ac:60:ae:ea:32:54:73:a9:b8:2d:31:
         dd:95:93:5a:eb:bc:f4:d7:6d:cc:e7:25:6e:ea:23:1a:96:9f:
         03:ab:6c:5b:94:d0:34:0c:0e:5d:99:ff:77:30:2c:7c:44:a4:
         53:57:ea:ab:61:07:f9:b7:f0:f1:75:e0:a1:b5:90:1f:9a:d9:
         f4:c6:6d:79:ce:d0:ad:71:c4:30:b6:98:c6:fb:6c:79:72:b5:
         e2:8c:83:70:73:b4:39:40:29:39:5a:80:ff:1b:18:7e:a9:28:
         2c:14:17:67:05:8e:fb:42:41:70:07:8a:7b:5f:9f:9a:51:d4:
         04:bd:38:91:fe:a1:2a:4c:20:2a:2b:4d:08:74:22:e4:e8:d4:
         59:3c:f2:d9:dd:4d:b4:6c:d7:12:db:a2:fc:81:34:a6:6c:09:
         26:40:63:6e:74:00:38:52:ce:3b:59:fe:d6:9c:ca:e2:a9:31:
         93:91:9b:8f:6a:9e:31:98:83:e8:60:ba:e5:bd:73:72:e4:ca:
         42:bf:11:45:08:f4:9e:8d:75:d2:10:b6:b6:5d:f4:38:18:75:
         d5:d7:99:81:b3:45:68:b0:39:1a:69:77:e6:38:2e:fb:ec:b4:
         db:09:3c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:19 2026 by rpki-client