Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
File:                     h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft (raw, json)
Hash identifier:          O7EU+daR1NsfyWXXkCm9tjaFL1NXjEnN00p3QuUQmko=
Subject key identifier:   C5:68:D7:5C:27:CC:C1:95:D3:18:CC:C3:F5:5E:8F:31:FA:CE:C7:B2
Authority key identifier: 87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
Certificate issuer:       /CN=F3658AF9AR/serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
Certificate serial:       0135
Authority info access:    rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
Manifest number:          0135
Signing time:             Sat 13 Jun 2026 05:04:57 +0000
Manifest this update:     Sat 13 Jun 2026 05:04:56 +0000
Manifest next update:     Mon 15 Jun 2026 05:04:56 +0000
Files and hashes:         1: h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl (hash: hv+hZn3ngFgKIt0OwmF6Cm1r213lkRcva+LsjvqjBCk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                          rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AR, serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
        Validity
            Not Before: Jun 13 05:04:56 2026 GMT
            Not After : Jun 15 05:04:56 2026 GMT
        Subject: CN=6a2ce4f9-5e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:7a:52:02:a0:59:72:11:6e:84:34:73:3c:
                    30:74:94:08:67:0e:85:54:0a:a4:a3:ea:05:68:5e:
                    91:6c:c2:ec:d8:1d:0c:5a:3e:32:80:ae:82:62:72:
                    8f:37:96:63:70:cb:e5:f6:6e:e9:91:7c:63:d2:f9:
                    76:a0:be:c6:fa:f4:4b:d3:df:2e:d5:35:75:c0:26:
                    3e:b7:11:98:cc:b6:6a:e1:29:d5:88:43:0d:ab:3f:
                    70:a4:45:a2:e3:97:93:b1:a8:56:0e:8c:b5:e5:49:
                    98:bf:31:89:f9:71:4a:72:4c:9f:6f:e3:2e:57:8d:
                    31:38:b4:62:fe:d5:6b:1b:f0:ef:44:7c:4b:35:1f:
                    50:2d:b0:8a:23:2a:74:68:79:35:c2:5d:37:3b:9e:
                    0a:79:24:cf:c9:0d:8e:7f:85:9c:ca:f1:b6:32:90:
                    fe:36:e7:b9:5f:46:f6:77:4a:bf:93:dd:6f:c8:d8:
                    3c:0d:5f:ee:58:9a:6b:a0:ce:1a:c3:58:f8:c7:e2:
                    1d:f3:53:70:32:4c:1a:a3:25:c3:c5:75:a5:b4:ab:
                    0a:88:e1:89:1f:bc:6a:37:3f:dc:21:08:d1:65:0a:
                    4a:62:10:dc:7b:80:09:c1:1a:19:55:b3:06:34:83:
                    d8:39:13:9d:01:8e:56:52:2d:53:87:5b:b4:1c:10:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:D7:5C:27:CC:C1:95:D3:18:CC:C3:F5:5E:8F:31:FA:CE:C7:B2
            X509v3 Authority Key Identifier:
                keyid:87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d1:4e:13:db:7b:7f:f9:83:46:82:24:ff:db:d2:22:f7:70:
         fe:1b:bd:ea:1c:37:93:28:0d:b6:30:48:ac:3b:32:9b:ef:90:
         cb:cb:63:86:f8:b4:e4:d8:38:1d:f4:4f:d0:4b:e3:79:c3:d5:
         cc:b7:44:0c:44:2a:d8:e4:c3:8c:3c:11:1d:a0:35:6a:bb:7f:
         1c:ab:61:b5:06:7e:6d:5a:a8:4e:6d:82:31:c5:5e:3a:4b:56:
         d3:e3:b0:4a:e4:9e:91:e2:04:be:c4:ce:54:68:ab:f8:f9:4a:
         76:f7:50:8a:9a:49:72:a3:22:e6:86:7b:18:66:38:8b:f9:dc:
         05:4b:e9:0c:ba:43:e5:8e:5d:2d:5c:44:fe:3e:8e:9d:77:4c:
         6e:97:4b:c6:8a:9c:a5:29:2f:8c:ff:1f:f4:fa:0e:ba:87:d9:
         f7:84:31:e4:5c:58:da:2e:6f:4b:67:f3:57:9d:b4:ea:b7:e1:
         59:4d:15:a4:fc:59:76:9d:cd:13:cb:90:55:0c:4c:53:d2:bd:
         6d:20:de:e9:d8:55:82:3d:24:67:be:b7:6a:44:77:5d:e2:d2:
         97:ed:ca:48:af:60:fb:2b:8e:1c:7b:51:7b:7d:6c:b6:6d:d9:
         b3:c1:db:76:a2:97:ef:b0:e3:38:12:3f:73:5e:82:c4:6d:6a:
         fd:e9:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:45 2026 by rpki-client