Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
File:                     HjBtERG9MU9g94_Cmxf7xqsItYk.mft (raw, json)
Hash identifier:          KwMGp495usa7qICfPeEgQ8QYQXHJWP2XelmXhOAPVQk=
Subject key identifier:   A6:11:BD:C9:5E:A3:3B:04:ED:F2:1F:27:85:4B:EB:9B:77:22:7C:07
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Certificate issuer:       /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial:       FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
Manifest number:          FA
Signing time:             Sat 03 Oct 2026 05:24:17 +0000
Manifest this update:     Sat 03 Oct 2026 05:24:16 +0000
Manifest next update:     Mon 05 Oct 2026 05:24:16 +0000
Files and hashes:         1: HjBtERG9MU9g94_Cmxf7xqsItYk.crl (hash: mf7SEfYGjDIrstP/ZbsV5HN7ySoKRP8BhajRJwuIn7c=)
                          2: AE231146010611F1AF8CD7E0DAE4EC9C.roa (hash: yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
        Validity
            Not Before: Oct  3 05:24:16 2026 GMT
            Not After : Oct  5 05:24:16 2026 GMT
        Subject: CN=6ac09180-7c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:58:54:96:6e:8b:b3:1f:13:b3:7a:3f:6b:
                    e7:ad:27:32:01:6e:1e:bc:40:40:79:c4:d3:e8:dc:
                    19:32:3c:1a:33:8e:a4:f4:7a:2d:fb:cf:45:56:79:
                    8e:ae:ed:da:a6:d7:7d:d8:de:43:ed:8d:0e:fc:7c:
                    0c:78:c3:e8:cd:0d:22:17:d2:7d:ae:7b:9f:ab:1a:
                    5e:cf:e4:2b:62:e9:c8:53:0b:2a:ae:17:27:6b:6f:
                    d5:94:e5:9c:5a:11:30:c7:fb:f8:1f:b8:8f:00:ca:
                    9c:11:b4:3b:a9:bd:9c:f9:81:03:53:d4:a3:07:1a:
                    4b:8c:3d:eb:1f:22:a1:57:04:66:ea:03:3e:ac:35:
                    4d:3b:ac:97:4b:dc:0d:3f:ad:8a:3d:9e:cd:ae:88:
                    f7:c5:59:e8:60:34:17:f3:29:41:62:e1:b4:9a:94:
                    f5:6f:cc:99:2e:48:64:90:b7:6f:5b:60:40:a9:53:
                    a0:c3:90:dd:39:6c:23:e0:4a:19:00:74:d0:7b:da:
                    96:4e:a1:1b:fc:b1:14:43:05:46:2f:38:92:20:46:
                    c9:43:c6:19:f2:28:96:df:2a:75:fb:c6:ff:f6:12:
                    06:4e:fd:f7:8d:24:e1:b3:dc:a2:59:9d:8a:f1:47:
                    f5:a2:80:27:0a:74:43:23:e0:47:42:52:ad:9b:8f:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:BD:C9:5E:A3:3B:04:ED:F2:1F:27:85:4B:EB:9B:77:22:7C:07
            X509v3 Authority Key Identifier:
                keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:52:62:a7:f9:2a:f0:09:63:8d:27:fc:ac:fd:65:8a:49:32:
         55:eb:86:fd:24:b8:95:f4:7a:b1:aa:ea:87:3e:8c:8c:24:91:
         e2:cc:f2:07:dc:ce:79:52:1d:1e:25:c2:22:25:6f:b9:6d:6c:
         54:90:be:7c:49:7f:7f:f5:a3:43:ae:98:ba:6a:f4:a3:37:cd:
         e0:44:6a:f7:1b:6c:c2:d5:d3:a3:7e:f5:4f:ec:f3:cc:ca:d5:
         c5:f0:d1:2e:45:e7:98:b0:34:2a:74:1e:e7:a0:5f:16:41:53:
         38:e3:60:58:a9:65:11:e3:f6:b2:6b:d0:d7:7a:a8:87:be:7c:
         3a:b4:a9:74:0a:2c:15:d4:fa:53:70:8e:75:88:1f:f7:4d:16:
         d3:4c:b9:50:2c:20:8c:8a:40:26:26:a2:34:73:b0:4f:37:59:
         4e:f8:6d:af:6a:2f:8a:b4:16:bb:7b:98:7a:4c:ee:77:ec:cf:
         94:d7:ff:a1:47:c1:10:2f:51:79:9d:6c:b5:ed:8a:bc:90:2c:
         6f:e8:89:a2:c3:be:17:da:8a:f4:6f:a3:83:87:99:f8:df:f7:
         cc:64:02:f3:92:8b:07:cc:b5:82:6a:52:1b:c3:d2:f4:76:c2:
         92:70:39:bd:69:bc:e5:85:e3:42:b4:d7:f0:11:b5:48:1a:81:
         1b:43:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----