Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
File:                     HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft (raw, json)
Hash identifier:          QmEDJw1hgExmee/cU8isqkiPHxR96gMlQPsTaD3nDPw=
Subject key identifier:   B2:8B:74:9E:1B:A0:C6:30:6B:A7:43:B5:87:1D:AB:EB:53:51:17:F5
Authority key identifier: 1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3
Certificate issuer:       /CN=F366BE85AR/serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
Certificate serial:       023A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
Manifest number:          0239
Signing time:             Tue 28 Jul 2026 04:44:07 +0000
Manifest this update:     Tue 28 Jul 2026 04:44:06 +0000
Manifest next update:     Thu 30 Jul 2026 04:44:06 +0000
Files and hashes:         1: HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl (hash: gp4Ma3l9cj1BPfOxTMdm2AM0RK6oaxFuSoY0++7H4OU=)
                          2: 7C21AA3ED29211EF86EA9485762E951A.roa (hash: 4sdnJ8RVycpCPlFVArT/uPl+lKxeM/KiQs7ThnHwqEM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                          rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AR, serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
        Validity
            Not Before: Jul 28 04:44:06 2026 GMT
            Not After : Jul 30 04:44:06 2026 GMT
        Subject: CN=6a683397-5e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:7c:69:0e:c1:d0:48:94:28:c8:88:c0:c4:
                    68:9c:25:d8:a6:90:d6:e9:02:1c:c8:25:04:60:90:
                    ae:36:05:d4:75:a9:8f:51:99:1c:56:7e:8e:83:cb:
                    6c:08:4d:c3:d7:28:c2:e9:3d:4b:b4:b8:6f:f9:ca:
                    20:7e:0c:d0:52:d6:22:b7:30:6d:27:0e:1b:ed:14:
                    74:42:8f:8a:69:7f:6d:db:7e:ba:b0:c4:15:29:9a:
                    64:a0:62:d7:9a:86:22:2e:db:72:1d:6c:f4:eb:9b:
                    97:04:21:22:23:80:15:7d:04:c1:d7:6c:11:ea:13:
                    95:d1:db:84:e2:ec:87:cd:bf:25:cf:e6:36:8b:43:
                    64:4a:fa:23:9c:a2:09:61:e7:69:97:1e:b7:db:4d:
                    93:e6:d1:f9:cf:97:08:56:56:29:64:1a:14:89:c9:
                    9e:4b:39:e7:a0:f1:39:16:5b:32:31:49:3b:82:ec:
                    68:8f:05:41:f7:3a:59:26:c8:79:eb:35:55:8e:12:
                    5a:21:fa:25:b8:2f:b7:75:01:18:5e:de:96:4e:d2:
                    7f:9c:ba:bd:bd:2a:08:98:42:f8:9b:fc:95:b8:9a:
                    ba:a0:17:52:1a:b7:56:d2:37:94:cd:0f:06:b9:83:
                    17:69:8f:56:84:4b:3a:a7:cb:f7:8f:30:d3:f5:d1:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8B:74:9E:1B:A0:C6:30:6B:A7:43:B5:87:1D:AB:EB:53:51:17:F5
            X509v3 Authority Key Identifier:
                keyid:1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:6d:79:59:8e:73:ca:1e:84:9f:7d:88:ec:e2:8f:98:5c:12:
         1e:c6:06:3a:91:ae:c1:b0:9b:26:20:18:f1:c1:2f:e9:96:8a:
         19:e6:6f:b3:e1:70:4f:a7:6e:9f:e8:50:6b:20:8e:b9:e7:71:
         73:27:d7:a2:80:f3:a9:26:5d:87:07:4a:2a:aa:d7:e5:77:25:
         35:a7:e5:77:ed:3f:6c:09:f4:a8:65:da:ed:43:7c:48:e4:05:
         53:f9:7f:3f:ac:43:9d:8d:6b:7f:75:aa:24:bb:78:11:8b:dc:
         74:3a:ab:84:55:17:d5:bb:c3:95:e4:21:56:60:04:4a:94:94:
         c3:5d:a8:48:3d:8f:4f:c6:50:c6:8e:36:54:81:4a:ca:0d:10:
         e6:6b:2b:28:b6:8e:1b:62:a7:e4:5e:8d:17:9b:b1:09:c4:51:
         bf:b9:12:6b:d2:e2:07:5f:fb:65:b3:45:a9:e7:3e:0b:27:c2:
         fe:7c:db:27:bc:84:59:6c:20:24:c0:cf:c2:4b:fb:1a:6b:dc:
         7c:6c:74:3a:86:3c:a4:54:da:39:3e:1b:fb:b6:f3:3f:31:dc:
         81:76:94:fe:6d:72:6d:1e:35:ef:f1:26:1d:62:fc:5d:d1:7c:
         a4:db:c8:31:4c:7a:a6:2a:39:d4:3d:44:0a:20:60:4e:36:55:
         f7:d2:3c:a8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAjowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkJFODVBUjExMC8GA1UEBRMoMUUwNTIyREUzQ0RBRjY4REM3QTc4NTczNDNEMjND
NTJFMjM3QjVBMzAeFw0yNjA3MjgwNDQ0MDZaFw0yNjA3MzAwNDQ0MDZaMBgxFjAU
BgNVBAMTDTZhNjgzMzk3LTVlNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+U3xpDsHQSJQoyIjAxGicJdimkNbpAhzIJQRgkK42BdR1qY9RmRxWfo6D
y2wITcPXKMLpPUu0uG/5yiB+DNBS1iK3MG0nDhvtFHRCj4ppf23bfrqwxBUpmmSg
YteahiIu23IdbPTrm5cEISIjgBV9BMHXbBHqE5XR24Ti7IfNvyXP5jaLQ2RK+iOc
oglh52mXHrfbTZPm0fnPlwhWVilkGhSJyZ5LOeeg8TkWWzIxSTuC7GiPBUH3Olkm
yHnrNVWOEloh+iW4L7d1ARhe3pZO0n+cur29KgiYQvib/JW4mrqgF1Iat1bSN5TN
Dwa5gxdpj1aESzqny/ePMNP10UXZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUsot0
nhugxjBrp0O1hx2r61NRF/UwHwYDVR0jBBgwFoAUHgUi3jza9o3Hp4VzQ9I8UuI3
taMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCRTg1LzREQ0RCREI0RDI5MDExRUZCOTIxQUY3ODc2MkU5NTFBL0hnVWkz
anphOW8zSHA0VnpROUk4VXVJM3RhTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0hnVWkzanphOW8zSHA0VnpROUk4VXVJM3RhTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NkJFODUvNERDREJEQjREMjkwMTFFRkI5MjFBRjc4NzYyRTk1
MUEvSGdVaTNqemE5bzNIcDRWelE5SThVdUkzdGFNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDLbXlZjnPKHoSffYjs4o+YXBIexgY6ka7B
sJsmIBjxwS/plooZ5m+z4XBPp26f6FBrII6553FzJ9eigPOpJl2HB0oqqtfldyU1
p+V37T9sCfSoZdrtQ3xI5AVT+X8/rEOdjWt/daoku3gRi9x0OquEVRfVu8OV5CFW
YARKlJTDXahIPY9PxlDGjjZUgUrKDRDmaysoto4bYqfkXo0Xm7EJxFG/uRJr0uIH
X/tls0Wp5z4LJ8L+fNsnvIRZbCAkwM/CS/saa9x8bHQ6hjykVNo5Phv7tvM/MdyB
dpT+bXJtHjXv8SYdYvxd0Xyk28gxTHqmKjnUPUQKIGBONlX30jyo
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:57 2026 by rpki-client