Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
File:                     HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft (raw, json)
Hash identifier:          QlrZnaKEchyqdQ7Zzn+85A7SQflLZfRjk4X/oCEIcck=
Subject key identifier:   B4:5A:C9:6F:8A:40:56:9E:A6:BB:26:0C:DA:70:0E:06:D3:BC:FB:9B
Authority key identifier: 1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96
Certificate issuer:       /CN=F369B2BBAF/serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
Certificate serial:       0137
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
Manifest number:          0136
Signing time:             Sun 20 Sep 2026 05:16:22 +0000
Manifest this update:     Sun 20 Sep 2026 05:16:22 +0000
Manifest next update:     Tue 22 Sep 2026 05:16:22 +0000
Files and hashes:         1: HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl (hash: X+tJAyOkxUK/OEBFutzkZLxLn+Fz+a/47VaheqC/aLY=)
                          2: 96867EB2DF1C11F094CF00C3DAE4EC9C.roa (hash: 2iRal7m8J1Na7NGEbMCXUA7KVyYMn6zcBErYIoEeTqw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B2BBAF, serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
        Validity
            Not Before: Sep 20 05:16:22 2026 GMT
            Not After : Sep 22 05:16:22 2026 GMT
        Subject: CN=6aaf6c26-905d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:15:cc:8e:0b:d2:04:99:13:35:12:87:a8:
                    26:d2:52:ec:c4:f4:b4:bd:27:84:1e:ab:da:5a:8d:
                    d2:3c:c8:c6:06:3b:ba:84:8c:0b:05:1a:7f:8e:0e:
                    bf:13:e7:ce:c9:dc:0c:7e:c4:5d:00:92:93:58:2c:
                    21:86:c0:7e:db:78:d7:08:a7:dc:28:06:f2:0d:73:
                    e5:bd:bb:12:ff:12:ad:24:53:8c:a9:cd:24:29:b5:
                    ff:e0:e3:06:bc:a5:07:8b:a9:1f:12:84:05:4e:67:
                    b4:bc:1e:57:6d:32:30:66:5c:f3:cf:aa:40:07:0f:
                    ff:2c:79:70:c0:a2:92:8a:5b:44:65:67:f2:ba:1c:
                    70:19:91:f9:ac:3b:6f:bb:b7:67:ea:1c:8d:58:a3:
                    67:5a:19:bb:ff:61:fb:d6:a1:1f:c8:78:4f:fd:aa:
                    ef:0d:b6:a2:87:5c:91:8c:f3:1c:7d:b3:05:1a:40:
                    b4:ce:ac:f7:ac:86:64:ec:22:26:1a:78:06:70:6c:
                    0e:f0:71:dc:2e:0c:89:4b:85:15:42:cc:65:df:ab:
                    49:31:0d:50:9c:5b:e0:ec:e7:1a:e2:06:79:3f:c8:
                    2c:9f:55:46:92:f8:1b:70:fd:59:b8:61:b6:f1:71:
                    c9:89:e0:6e:63:99:59:f1:0b:b7:c7:14:5e:94:dd:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5A:C9:6F:8A:40:56:9E:A6:BB:26:0C:DA:70:0E:06:D3:BC:FB:9B
            X509v3 Authority Key Identifier:
                keyid:1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:e2:b5:b0:e1:2e:ce:d5:31:bf:1d:df:5b:fb:cc:85:1c:
         1c:44:6c:63:27:03:94:c7:c9:46:f3:99:4c:b1:c2:49:99:9c:
         22:65:e3:44:45:91:d3:d8:bc:f4:1d:01:76:00:2f:46:64:04:
         c9:b3:6f:ae:c9:72:cb:fd:95:69:98:a6:89:87:d8:a8:80:49:
         cf:7d:31:78:cc:c7:06:1a:28:b2:92:ff:42:90:f9:78:6f:0a:
         a3:4c:8d:f7:96:86:5e:08:d6:9d:76:87:8e:5c:61:c0:ed:1d:
         fc:90:1e:84:1d:b1:e8:2e:01:85:f5:90:db:21:df:67:db:c6:
         b1:6d:04:5f:ed:47:e3:78:20:ca:59:1d:11:69:6a:67:07:0c:
         09:a3:56:e9:53:bd:8f:1b:8b:6a:73:07:bc:03:c1:34:01:eb:
         86:09:fb:79:bc:f6:28:f8:ff:24:8a:f1:97:db:d3:c5:57:cb:
         81:02:60:5f:d3:fe:70:1f:40:a2:9c:aa:1a:72:1d:4b:b7:5e:
         f5:a0:b3:d8:fd:d4:4f:9a:5a:27:a0:bd:96:6c:ce:6b:1e:dd:
         fd:32:16:0b:38:bb:e4:61:6e:16:77:64:6e:3a:a3:da:c2:8e:
         b0:48:3f:7e:2f:06:6b:05:b1:dd:5a:33:22:00:61:84:6e:f5:
         4a:c9:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----