Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File:                     hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier:          uafITnKUXTJB3+sIFMN3XUUJ22vf73FPoCt3PgCzFaA=
Subject key identifier:   1C:B0:B8:20:3D:D5:E0:EC:8E:BF:53:00:05:E1:3B:8E:75:BB:9D:C7
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer:       /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial:       0316
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number:          0311
Signing time:             Mon 02 Mar 2026 02:46:02 +0000
Manifest this update:     Mon 02 Mar 2026 02:46:01 +0000
Manifest next update:     Wed 04 Mar 2026 02:46:01 +0000
Files and hashes:         1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: 8LyWvLsQCdbp3H6AzRnkDyBcti8yIn7JI8XHX8Qx3MA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
        Validity
            Not Before: Mar  2 02:46:01 2026 GMT
            Not After : Mar  4 02:46:01 2026 GMT
        Subject: CN=69a4f9e9-9417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:41:30:ee:9d:42:54:00:5c:75:d0:c7:92:
                    70:7b:9c:64:33:06:d2:7b:32:e7:6b:e7:c7:43:6a:
                    3c:24:f4:0e:35:0d:29:f0:2a:a1:9e:f4:a4:f5:eb:
                    7c:3c:d9:e3:8c:d5:90:c4:20:c5:b9:c1:a3:57:8f:
                    9a:55:0d:1b:a7:5c:99:af:2b:f0:d7:c8:3c:d3:a6:
                    67:6e:16:0a:c8:e5:d6:20:4b:20:c9:88:3d:3f:09:
                    63:3c:11:44:41:f1:7f:a2:13:34:69:78:18:8c:9c:
                    9d:b9:81:69:28:61:d9:e8:89:a8:f3:a0:c7:29:ef:
                    18:05:5f:f7:a5:6e:37:b6:5e:31:59:a6:6f:b5:cf:
                    00:f5:20:98:03:08:09:26:b2:49:23:03:84:54:75:
                    b1:43:1d:bf:87:39:b9:fc:c8:dc:29:38:d8:a3:12:
                    13:36:56:ae:4d:87:91:b5:d8:6b:5b:e8:8d:6d:55:
                    5e:6b:bd:02:60:f5:38:92:40:dd:e7:ae:d7:2b:55:
                    2b:d3:24:de:3c:03:74:fe:d7:61:f0:6e:2f:e4:23:
                    c7:48:61:40:03:8a:5e:87:8b:06:d4:95:f2:cf:69:
                    a7:12:03:fb:26:14:79:f9:7a:72:c6:08:3b:61:59:
                    c9:5f:23:3f:dd:bd:e4:9e:e0:38:6b:69:17:dd:96:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B0:B8:20:3D:D5:E0:EC:8E:BF:53:00:05:E1:3B:8E:75:BB:9D:C7
            X509v3 Authority Key Identifier:
                keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:89:98:d0:25:31:10:12:c2:22:24:18:75:78:9b:b7:aa:
         bb:07:e2:27:f0:25:67:a8:e6:c9:bf:45:c7:73:e0:7a:ad:2c:
         09:9c:4a:e0:72:c8:c9:e2:f6:73:97:85:b1:4b:77:93:06:20:
         65:c5:1b:07:e7:6d:e5:bd:3d:c4:c7:b3:e4:d7:0d:14:88:03:
         30:cf:ca:6f:4a:83:1c:ec:bd:c3:b6:58:0c:b3:c3:06:b8:63:
         f9:a0:2e:a6:1b:21:a1:41:1f:c5:4e:7e:a3:6a:2c:35:58:34:
         6d:c8:61:05:5c:28:1a:75:8c:02:89:10:0f:b5:e6:5c:d2:d1:
         34:fa:e7:93:6b:6f:e2:b0:b0:0f:7b:36:59:98:98:76:04:26:
         e6:f9:dc:0f:73:25:c6:7e:91:51:8f:60:86:44:13:b3:72:a1:
         e9:61:ab:b2:db:73:ae:22:9d:23:a5:69:0a:18:d5:75:6a:fc:
         dd:a3:7e:7e:d4:a5:13:f8:ce:70:5f:66:74:3b:d3:ae:b2:c1:
         f5:1b:8c:07:55:80:25:58:37:11:01:19:74:35:10:17:ad:cc:
         a8:c5:fe:49:c8:e6:dd:d3:0c:45:42:3f:d0:da:d4:a3:63:0e:
         2e:f2:53:54:b3:b0:84:92:37:2d:14:aa:89:c7:f5:d2:49:06:
         99:d2:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:43 2026 by rpki-client