Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          6CovMZ4TrVNytsR7CBRjjwNWQebZ9EbGiTQhNdAqiho=
Subject key identifier:   86:9D:0B:4E:64:C1:7D:33:F3:63:5D:9D:2D:32:37:25:6B:F8:EC:7F
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0A29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0A29
Signing time:             Sat 13 Jun 2026 01:30:44 +0000
Manifest this update:     Sat 13 Jun 2026 01:30:43 +0000
Manifest next update:     Mon 15 Jun 2026 01:30:43 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: 7OoH6WKHMGvhema2vb5YwfH0RyiZMDs4yOpoTQ8+rRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601 (0xa29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Jun 13 01:30:43 2026 GMT
            Not After : Jun 15 01:30:43 2026 GMT
        Subject: CN=6a2cb2c4-8072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d5:77:e4:16:18:0e:37:1e:67:16:02:a1:57:
                    a9:cf:6f:e7:f9:be:32:2c:f4:e9:1d:92:52:1f:36:
                    fc:9e:8b:39:40:b0:1b:61:2e:df:b5:b5:7f:39:5d:
                    00:79:fe:dc:a4:e3:cc:9c:38:87:93:94:ea:21:a1:
                    93:1a:19:30:7f:a2:73:5b:ec:df:8a:6d:a7:ec:eb:
                    bb:20:5c:d8:18:31:62:27:a8:59:98:bb:f1:74:9e:
                    6d:4a:0a:a7:b6:f2:08:2e:be:32:aa:71:91:4d:89:
                    db:61:03:dd:42:53:97:9c:d0:c9:b8:ef:6e:9e:56:
                    1b:9d:e7:28:bb:9d:9c:ef:99:1b:e5:56:29:37:1a:
                    97:37:16:4c:1d:21:a5:8f:2e:74:ee:65:fc:17:c0:
                    67:41:0e:b3:e5:56:45:42:a1:02:b9:9d:ef:41:52:
                    75:b6:40:a6:25:ff:87:6d:ba:f6:3f:df:3d:cc:6d:
                    0a:bf:75:77:8a:38:81:7e:6d:53:13:2d:e3:a6:4a:
                    82:86:ea:74:e1:1f:99:e3:0d:90:04:ac:5e:01:90:
                    e5:ce:ec:6d:3e:47:52:ec:de:b2:3a:b4:11:ce:30:
                    d2:de:a2:9a:f4:35:08:5b:b2:36:ab:c8:db:10:29:
                    8c:fd:48:d0:6e:52:8e:da:ee:e7:24:27:ce:c9:2f:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:0B:4E:64:C1:7D:33:F3:63:5D:9D:2D:32:37:25:6B:F8:EC:7F
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:74:e2:1b:8f:67:0e:5e:17:91:82:c6:79:88:4f:47:0c:08:
         b0:18:ba:02:d0:e0:0c:80:b4:e0:72:d3:e0:9c:d3:c5:a4:e6:
         48:74:9a:66:4b:79:4f:23:6c:72:0e:f6:ab:dc:17:ce:0e:ad:
         d2:10:4b:0f:a2:34:e9:d7:62:ce:a1:b3:f2:d0:31:e7:7f:c7:
         09:34:ac:50:6c:c1:11:dd:ad:37:36:84:41:5e:e1:93:d1:94:
         73:77:c3:eb:e6:ff:2b:44:38:b7:1e:ee:21:14:7e:33:4a:25:
         9a:c1:b1:30:52:17:75:0d:80:38:f3:18:bc:7d:28:52:c6:84:
         b1:7e:8a:d4:58:27:61:f4:7f:6e:75:d6:65:ce:16:16:e7:c1:
         8d:bb:af:bb:50:7d:dc:66:6f:f8:2f:8c:42:0d:4b:5a:c8:42:
         57:69:de:9b:b7:a3:a4:9b:a2:23:f1:7c:74:a1:31:25:68:8f:
         9d:10:35:b6:c5:a0:99:b4:d7:36:6d:18:2e:b8:2e:46:9b:35:
         21:4a:95:7b:8e:dc:b9:2c:ef:fd:fc:03:c3:0a:55:33:97:03:
         7d:a8:fc:e6:ec:2b:cb:ab:32:a5:a0:c2:fe:5e:8f:ae:6e:ad:
         f0:f2:2e:fd:71:5c:e8:ae:0d:4d:e5:e9:85:a5:ea:c2:13:ae:
         7b:91:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:32:22 2026 by rpki-client