Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
File:                     h-G7jI0reZLqTr7rMz_hQp5w7po.mft (raw, json)
Hash identifier:          i688zZ/4X/Ta9ul0eIJnjs5duL8cCNapuY+OShySW0E=
Subject key identifier:   AF:FA:58:A1:33:B2:16:5F:B9:5D:FC:F0:1C:B4:F1:C3:18:D9:0A:3E
Authority key identifier: 87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
Certificate issuer:       /CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Certificate serial:       0626
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
Manifest number:          0626
Signing time:             Sat 13 Jun 2026 02:39:19 +0000
Manifest this update:     Sat 13 Jun 2026 02:39:19 +0000
Manifest next update:     Mon 15 Jun 2026 02:39:19 +0000
Files and hashes:         1: h-G7jI0reZLqTr7rMz_hQp5w7po.crl (hash: 5a1k+Edq46JjM8UNp6yiIqNccsGgU01DCEoIxdLRD4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1574 (0x626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAF, serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
        Validity
            Not Before: Jun 13 02:39:19 2026 GMT
            Not After : Jun 15 02:39:19 2026 GMT
        Subject: CN=6a2cc2d7-4f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d7:b6:5b:73:b6:eb:3c:e5:b1:e5:ca:ec:ff:
                    54:ef:98:36:8e:88:7d:ef:2c:0f:50:2d:a4:ed:03:
                    3b:a1:f8:fc:07:0a:5c:da:29:d1:0c:ef:20:39:6b:
                    62:33:72:c0:c0:a0:1b:16:68:e2:38:cf:33:91:dc:
                    ab:99:b7:e5:f1:da:9b:89:93:4d:3a:53:d8:13:c5:
                    8c:04:71:47:4a:27:3e:44:6d:0c:f9:44:16:9a:8f:
                    52:6e:70:2f:de:49:fe:39:1c:2e:d3:2d:dc:cc:cf:
                    b7:c4:c9:5e:88:dc:fb:d6:23:dc:dc:30:5b:42:0a:
                    4a:e6:e5:b7:d3:71:f0:85:94:e2:91:49:b4:a7:a9:
                    14:51:08:9e:79:ca:86:00:21:e8:b1:64:f4:98:a3:
                    58:7b:fc:09:b9:39:77:02:5e:35:dd:5e:18:8b:48:
                    f7:1e:0c:4c:7b:6b:89:f2:20:25:92:83:7c:46:84:
                    10:34:bd:2f:ff:a1:62:1c:57:23:28:8a:37:a1:c6:
                    01:43:7d:d4:47:f6:4c:bb:06:47:e3:f7:04:45:c1:
                    61:69:b5:96:8f:33:3b:48:26:01:23:fc:bf:20:4c:
                    4e:75:28:75:08:d2:a2:11:57:52:50:2d:b9:93:05:
                    47:61:fe:f6:83:e5:1a:c6:ec:77:50:76:80:f6:05:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FA:58:A1:33:B2:16:5F:B9:5D:FC:F0:1C:B4:F1:C3:18:D9:0A:3E
            X509v3 Authority Key Identifier:
                keyid:87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:65:b8:9e:3a:58:04:ad:c0:51:e1:dc:4b:1e:b6:3a:c6:
         a2:be:0c:0d:52:84:01:95:63:dd:dc:91:ed:d9:fb:6e:7d:e4:
         47:c3:d8:c4:f8:72:f4:30:4b:e0:21:f3:d5:86:1a:7a:9a:3b:
         c0:e1:c4:63:db:e6:f5:fc:5e:d3:67:ff:e7:07:12:19:c0:7b:
         b6:4b:36:04:16:53:a0:85:02:de:f6:c3:b2:b6:3a:75:1f:28:
         6f:08:1c:fb:cd:29:14:69:58:e5:81:00:91:cc:74:94:4b:a4:
         f5:ba:64:3d:c7:0b:03:ef:a1:ff:75:9b:22:f6:8f:53:6f:b3:
         ee:a0:d6:4d:c0:d9:9d:4d:ac:6c:d5:14:17:ff:4d:b9:52:52:
         9c:c6:1f:a7:4b:19:b5:f6:31:28:fa:07:0d:0e:e8:c2:b1:58:
         0f:36:48:63:ae:0f:4d:21:42:0d:39:6e:fb:ca:38:d1:bf:7b:
         78:b4:76:02:a8:53:c3:54:74:56:17:75:2a:e5:b0:d3:f6:4d:
         e8:0b:bb:ef:cd:74:ec:da:9a:d9:46:fc:68:3b:39:94:80:13:
         b3:3e:05:19:2b:ba:47:74:8b:6b:ae:af:c1:38:e3:cc:fb:15:
         03:c7:89:6e:67:18:de:4e:a5:6d:e1:40:22:8d:67:02:71:2c:
         80:fa:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:34:07 2026 by rpki-client