Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
File:                     HjBtERG9MU9g94_Cmxf7xqsItYk.mft (raw, json)
Hash identifier:          CeuFCkK8uVE9nZCzHnjaTA1s//wmwYa1L3d7p8zCJgI=
Subject key identifier:   9B:A8:78:5D:D7:9E:FF:17:97:9B:C4:FC:61:7E:A8:EC:94:3D:CE:23
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Certificate issuer:       /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial:       51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
Manifest number:          50
Signing time:             Fri 17 Apr 2026 05:23:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:23:54 +0000
Manifest next update:     Sun 19 Apr 2026 05:23:54 +0000
Files and hashes:         1: HjBtERG9MU9g94_Cmxf7xqsItYk.crl (hash: 3mQaheCF5c25wS4sT0GI05NRohiRElAkGvii28v4Vuo=)
                          2: AE231146010611F1AF8CD7E0DAE4EC9C.roa (hash: yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
        Validity
            Not Before: Apr 17 05:23:54 2026 GMT
            Not After : Apr 19 05:23:54 2026 GMT
        Subject: CN=69e1c3ea-fcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:9f:52:6e:ea:9f:08:56:54:fa:73:ef:00:
                    4c:f3:b1:6c:57:aa:c3:3f:6a:e4:e8:19:99:10:7e:
                    e0:79:83:5b:3d:30:3f:39:17:22:a4:32:2d:c3:11:
                    c2:5b:31:4d:70:5c:7c:55:08:6e:2d:da:d0:11:eb:
                    72:ea:b1:a2:de:1f:86:06:71:e2:06:7f:3c:24:2f:
                    e3:b7:1a:82:1e:f5:ab:64:ff:7f:3b:17:7c:93:e8:
                    55:ed:fd:44:76:22:ec:72:11:1a:c4:19:db:f9:8c:
                    4c:2a:80:99:7e:8d:a0:40:e1:59:3d:56:e2:47:ee:
                    55:fb:3b:6f:ca:b4:3d:19:9f:e6:3e:5f:3d:ba:01:
                    96:1a:ac:b3:32:ab:b1:8e:e1:db:89:b1:31:36:48:
                    cb:23:5d:88:80:b9:66:37:08:4a:8c:e0:eb:c5:f8:
                    65:ae:34:f4:c3:e2:2c:44:1a:db:5c:8c:40:49:d3:
                    e7:f5:2d:95:00:25:74:1d:67:38:92:00:99:c5:20:
                    1b:00:99:98:d4:a4:48:e7:70:14:e5:18:19:da:c1:
                    6f:68:3b:b0:bf:e4:ba:80:65:94:53:1a:35:3c:5f:
                    1c:e5:52:37:8d:cd:3e:d0:0b:50:68:81:97:dc:e8:
                    14:e9:f5:c7:f3:f1:f8:f1:93:4c:46:cc:d3:2c:58:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A8:78:5D:D7:9E:FF:17:97:9B:C4:FC:61:7E:A8:EC:94:3D:CE:23
            X509v3 Authority Key Identifier:
                keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:c9:a6:24:cc:ad:16:5b:ac:b2:3b:fc:09:50:c6:c1:68:
         55:2e:44:24:93:0d:19:6c:7e:bb:4d:5a:20:40:fe:8c:6d:1c:
         34:20:db:b7:0b:40:1c:7e:d3:1a:ec:2c:5d:2c:6e:08:e7:a1:
         56:85:6d:12:81:6d:cd:56:94:b5:8b:0b:31:dd:7d:bc:b9:99:
         c0:08:19:4d:cd:13:15:e8:ed:25:65:73:a9:4f:27:ba:73:27:
         0c:5f:91:8a:10:c2:5a:5f:87:e8:96:3d:51:60:a6:f6:78:d6:
         c0:8f:98:2d:c5:8d:e4:ad:db:a4:d6:0e:e6:83:94:0f:40:69:
         a8:5a:c6:20:bd:f4:8a:f1:18:8e:22:f0:0e:5a:10:e5:d9:59:
         6e:f6:8c:94:d0:e8:5f:e7:5e:f0:45:f2:88:eb:54:b9:7a:fe:
         dc:a3:37:ea:63:bf:f1:97:fd:0d:c4:c8:2b:5a:8f:f4:6c:21:
         dd:6a:20:a0:17:5a:fc:e1:12:c5:61:ca:19:2d:7c:31:a1:e6:
         f2:83:0e:1d:e1:06:93:cc:0e:0b:36:a2:67:e8:29:39:39:ad:
         58:fb:4c:d9:c3:bc:c8:4c:eb:47:42:53:80:14:ce:8e:c0:91:
         ab:bc:b9:21:9b:dd:d2:7e:17:b7:b9:3f:22:d1:05:97:60:d1:
         14:28:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:53 2026 by rpki-client