Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
File:                     heLrQoy_jUsx-aZGYrwHtsPuQRE.mft (raw, json)
Hash identifier:          il8crOBS254GCChdoV1C5laF9yERtKHCfWQeNSeLZKw=
Subject key identifier:   5A:30:6F:BD:FF:94:9B:1A:9F:37:CC:6A:24:6A:1F:06:73:27:58:21
Authority key identifier: 85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
Certificate issuer:       /CN=F36A75D2AF/serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
Certificate serial:       AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
Manifest number:          AC
Signing time:             Tue 28 Jul 2026 05:27:27 +0000
Manifest this update:     Tue 28 Jul 2026 05:27:26 +0000
Manifest next update:     Thu 30 Jul 2026 05:27:26 +0000
Files and hashes:         1: heLrQoy_jUsx-aZGYrwHtsPuQRE.crl (hash: KxoYTl/fy06/EOLu10/U4gYlfHdlbWqWdVz1DmMStQ4=)
                          2: 5BE72858059411F1AB4403DFDAE4EC9C.roa (hash: 0OaZbwlKspj+/PLiCfmeszFXjMcg4792APuxNjcF8Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A75D2AF, serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
        Validity
            Not Before: Jul 28 05:27:26 2026 GMT
            Not After : Jul 30 05:27:26 2026 GMT
        Subject: CN=6a683dbe-0e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:93:5a:64:6b:53:d8:30:b6:51:3e:2a:cb:
                    90:0e:34:b4:9b:eb:43:45:de:16:b2:1b:8c:18:06:
                    df:d1:01:eb:a1:55:b5:8c:54:c9:fb:7d:42:38:9e:
                    e8:fb:70:33:7f:b7:84:19:95:43:b1:50:f9:b8:7e:
                    dc:e0:72:dd:b1:cb:5a:b1:7f:b8:a0:e3:be:4c:47:
                    eb:84:91:0d:ce:3d:5e:be:0d:e2:8c:10:c1:e5:c0:
                    96:51:42:01:b0:35:69:1d:f9:58:b0:06:41:d0:24:
                    73:95:9a:ab:11:13:98:15:c9:df:10:3b:65:c9:45:
                    cd:4b:62:f5:66:f3:47:ed:e5:3c:a1:4e:33:e8:86:
                    73:a5:a8:db:c8:96:98:02:67:97:77:2a:7c:7f:a7:
                    47:a4:2d:81:26:a6:0c:c6:19:67:0c:7a:f7:d3:48:
                    05:33:15:5e:b8:fc:ed:c2:f2:ed:ed:ab:39:3d:4f:
                    47:5e:ef:2e:2d:de:49:3e:e0:e8:c8:db:5d:74:99:
                    d7:8b:e8:ee:86:57:9e:00:27:f0:f8:b7:36:d6:2f:
                    8d:5c:a3:24:5e:77:5a:49:66:c2:c4:8d:c8:57:15:
                    ff:8f:52:b4:4f:e6:63:47:c6:87:ce:80:cb:fd:b0:
                    67:05:99:e3:2f:16:f9:09:ae:6d:ee:2c:68:a6:86:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:6F:BD:FF:94:9B:1A:9F:37:CC:6A:24:6A:1F:06:73:27:58:21
            X509v3 Authority Key Identifier:
                keyid:85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c9:e2:89:39:6e:c9:1b:b7:47:f6:80:19:1a:c6:46:7b:68:
         57:37:bf:c1:cf:c6:12:fe:3f:a6:b5:06:8d:cb:e7:ad:86:0d:
         56:70:8f:48:de:b0:b0:cc:22:18:29:a4:e6:da:b2:8e:9c:7a:
         0e:14:e1:f9:93:b8:f1:ba:96:19:e7:80:06:63:53:1c:04:9c:
         ab:07:14:88:af:bf:0b:aa:8b:07:08:89:88:b6:75:97:e9:36:
         f0:96:c7:b1:b2:0b:31:e0:8f:1d:37:f7:f8:9a:90:1c:b6:15:
         ce:3d:ec:0a:55:f6:8b:6b:37:66:28:59:bd:78:d6:da:9e:3f:
         e0:bc:3d:43:7d:79:96:d8:8d:73:67:d6:81:d7:1f:30:0f:e2:
         1e:ab:67:a9:61:a0:22:95:a8:8d:91:b5:35:4d:6e:0a:36:88:
         2e:3e:6a:32:9d:2d:8d:93:72:38:77:f5:f9:b4:bd:3d:dd:5f:
         65:61:a3:d8:a0:fe:90:21:6a:80:32:2c:a6:35:86:fc:24:ef:
         e6:71:d2:21:95:d4:22:26:f4:a4:6f:48:f6:ed:f2:5f:84:48:
         71:19:78:2f:81:6e:77:90:67:80:9f:0e:35:c2:ac:f4:45:15:
         11:c6:bb:7f:ae:d4:71:54:58:93:60:27:b4:c3:58:a5:71:7e:
         cc:62:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:15 2026 by rpki-client