Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier:          LD9StEhcWa46pXtHvfQc+jOMh2R3hMVdi7eAGlws3jc=
Subject key identifier:   43:A2:5B:56:DC:07:75:12:0E:13:ED:EA:9B:65:ED:D6:F8:9F:41:6B
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer:       /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial:       02FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number:          02FB
Signing time:             Tue 28 Jul 2026 04:19:20 +0000
Manifest this update:     Tue 28 Jul 2026 04:19:19 +0000
Manifest next update:     Thu 30 Jul 2026 04:19:19 +0000
Files and hashes:         1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: iuSdC5vgVN58gVq43amJLDhF11tkC0l5yW+76Z2/6+8=)
                          2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
                          3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Validity
            Not Before: Jul 28 04:19:19 2026 GMT
            Not After : Jul 30 04:19:19 2026 GMT
        Subject: CN=6a682dc8-26e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:9a:2a:2f:ca:eb:7f:af:db:91:32:03:ec:
                    5d:c7:6e:20:48:b9:d5:7c:65:45:56:4b:b6:96:ab:
                    81:28:63:33:e8:79:09:65:02:83:ba:c4:2e:fe:72:
                    7f:8d:c7:a3:05:4e:63:25:c3:b2:36:31:51:5e:58:
                    0f:19:80:14:1b:1a:44:5a:6c:d6:ca:80:45:dd:6f:
                    a1:ba:6f:42:c5:29:53:bd:be:bc:30:51:17:98:c2:
                    39:b3:1f:82:40:26:49:a8:f0:e6:14:0a:3d:d7:ed:
                    0a:10:95:28:61:1a:4f:40:92:90:12:8a:ae:97:55:
                    63:50:29:7e:84:62:3c:39:08:80:29:ee:f7:43:24:
                    01:36:fb:ab:42:5b:bd:e9:9f:f1:70:49:6c:11:9e:
                    db:22:80:7c:5f:dd:fc:38:c0:95:09:79:69:73:ce:
                    e3:9b:d1:3e:28:dd:16:87:f7:10:0d:db:e0:f3:86:
                    70:4a:ee:6f:cb:81:7e:71:f2:c6:5f:07:00:b0:4b:
                    79:48:62:a0:48:a2:31:7f:b1:51:2e:56:30:a4:ee:
                    39:37:e9:af:53:be:11:3a:ae:d5:28:1f:17:cc:fe:
                    e6:25:74:4b:a3:e6:e7:86:43:e2:61:32:eb:c1:63:
                    9c:d3:1f:2f:fe:28:f2:40:8d:db:49:b8:5a:22:28:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A2:5B:56:DC:07:75:12:0E:13:ED:EA:9B:65:ED:D6:F8:9F:41:6B
            X509v3 Authority Key Identifier:
                keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:18:9e:91:be:ef:c0:04:a6:c9:b4:dd:0f:ab:2f:0a:3f:
         f4:e4:24:84:93:8f:c3:e6:b1:df:c2:53:e4:c4:f6:16:7b:9b:
         83:b5:f1:80:9c:d7:af:a2:ac:0d:3c:da:70:37:57:b9:61:84:
         f3:47:90:1a:72:d1:7e:8c:48:69:a2:5e:a9:e1:cd:06:97:a3:
         e9:4e:a0:d4:4b:2a:55:ec:05:2c:aa:de:d9:9d:1f:8b:2c:ad:
         5a:e2:15:fc:77:f3:03:56:b0:9d:7f:61:89:58:77:15:59:f0:
         87:9b:78:23:6a:95:6e:d2:60:a5:33:81:25:3c:83:eb:a8:89:
         1a:f8:3a:39:92:d8:8f:c1:6f:be:6b:0c:ee:f2:7b:cb:43:db:
         4d:7a:85:24:f0:9c:b9:1b:e0:b1:02:e2:7d:76:7a:e6:41:dc:
         41:63:1b:83:ea:53:20:6b:53:35:ea:f9:7d:f6:8f:5b:ec:56:
         c5:a0:2e:9c:87:c0:c9:90:e1:e8:39:79:be:80:a8:f7:d8:e3:
         dd:3f:69:4e:c4:8e:75:03:52:11:a6:d9:0f:78:18:31:f5:e9:
         6f:39:e1:f8:3d:04:df:3c:09:cc:98:5c:85:54:b2:d7:1c:f6:
         bd:bd:7e:9d:27:a7:1d:1a:c6:c1:3b:58:70:d7:46:eb:9a:bc:
         c3:ac:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:51 2026 by rpki-client