Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier:          mkN9ts9LJo+QzjJXghlFiM7CWfKb37nBB/rQ0M3caiM=
Subject key identifier:   58:74:42:24:6D:6A:A4:8D:93:64:CB:6E:90:AD:6A:07:03:F2:A5:D0
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer:       /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial:       0269
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number:          0267
Signing time:             Mon 02 Mar 2026 02:58:38 +0000
Manifest this update:     Mon 02 Mar 2026 02:58:38 +0000
Manifest next update:     Wed 04 Mar 2026 02:58:38 +0000
Files and hashes:         1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: cxzcu6274SIgHDl2iCdAS5NjMF7DmiZdPwyUJjRzQ74=)
                          2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
                          3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Validity
            Not Before: Mar  2 02:58:38 2026 GMT
            Not After : Mar  4 02:58:38 2026 GMT
        Subject: CN=69a4fcde-40d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:ec:91:a9:5c:1d:65:05:08:0f:83:4a:c4:
                    45:3f:ae:d1:41:06:b2:8a:ff:0f:a3:c9:41:76:1a:
                    c6:99:80:50:ad:c4:89:98:bc:6c:c6:c7:5a:8e:43:
                    d8:8c:14:14:55:a6:1b:0f:33:48:2d:5e:04:3c:56:
                    48:d4:b1:de:a6:72:42:5b:c7:2e:3f:00:24:8c:13:
                    97:f1:eb:fe:91:e8:bc:af:9c:25:ee:0f:2a:95:37:
                    53:89:dc:fb:d6:d2:94:36:25:bd:e9:ec:3b:ad:a2:
                    41:46:3f:b1:c3:84:84:4b:28:0f:36:ef:38:af:9e:
                    13:fa:86:b2:4a:b4:0b:bf:21:1b:f8:b3:5c:d9:50:
                    9f:93:72:f7:79:38:0d:03:76:73:b9:2e:24:f2:5b:
                    2f:74:0c:c1:f5:27:a5:40:d4:03:50:26:17:92:11:
                    67:e7:a1:cf:44:eb:45:33:c2:f1:5b:3e:2c:6f:80:
                    26:76:e3:02:b0:d6:cb:ad:cd:e1:02:74:e3:20:e6:
                    5b:29:93:0a:4a:da:8e:e4:b0:79:f6:45:d2:cf:cc:
                    9e:5a:8f:7a:47:9b:45:ca:b1:7e:b7:78:a1:00:2a:
                    f9:3d:2c:15:7c:ba:69:4c:ff:39:7e:5d:02:d6:b3:
                    c8:6b:fc:2f:f8:b0:57:55:2c:25:90:9f:f5:ed:4a:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:74:42:24:6D:6A:A4:8D:93:64:CB:6E:90:AD:6A:07:03:F2:A5:D0
            X509v3 Authority Key Identifier:
                keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:01:83:c1:18:24:29:32:89:ba:1e:44:ab:42:cf:c9:99:
         b1:e6:9c:0d:16:ad:3f:fa:a3:0a:c3:b4:f9:94:38:5a:8d:a3:
         91:45:72:6c:d4:68:0a:bd:78:ea:6e:65:02:c6:08:44:c5:97:
         be:94:45:f8:8c:c0:9b:35:f0:42:3b:7c:d7:9c:29:25:6d:3d:
         06:cf:93:1b:22:5b:aa:ad:e2:b0:9b:05:0c:53:ab:5e:d2:cc:
         36:11:c5:ae:52:9b:99:89:98:6c:d7:dc:2b:79:ba:a0:a3:b5:
         5c:6e:3d:cd:dd:a8:5a:cd:6d:f9:ae:71:8f:ec:84:3c:9c:f7:
         b5:cd:91:10:d7:c6:fc:0b:c1:d7:65:02:9d:8d:79:80:d6:45:
         4d:ec:d6:9e:9d:a1:3a:ff:0f:8b:2b:da:3d:68:50:26:6d:dc:
         bc:ec:78:53:c8:bb:cd:1e:01:5f:14:d5:1d:b6:c2:50:d7:62:
         f8:09:9c:32:3f:b5:74:26:18:48:20:4e:d8:f8:51:0f:a8:81:
         e7:0f:fe:3f:b4:be:08:aa:74:9f:3b:e2:fb:ed:90:62:fc:8e:
         45:21:86:a6:3f:94:11:f6:15:4e:d6:f9:85:2f:80:41:93:86:
         df:52:96:dc:c2:40:ea:4b:69:4b:d8:d3:4f:6e:46:a1:f8:1d:
         69:b6:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:34 2026 by rpki-client