Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
File:                     mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft (raw, json)
Hash identifier:          2oxgzwDOTtrbEo/RLMqRmQk2afHrosHitHFZj8ISCU4=
Subject key identifier:   31:2E:F0:77:F9:8A:96:03:D3:EF:5D:25:1E:CD:EE:9C:3B:53:E5:D7
Authority key identifier: 98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48
Certificate issuer:       /CN=F36B2802AF/serialNumber=98746FFB305C233343308A3895CB70826618FC48
Certificate serial:       0929
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
Manifest number:          0929
Signing time:             Mon 02 Mar 2026 01:20:38 +0000
Manifest this update:     Mon 02 Mar 2026 01:20:37 +0000
Manifest next update:     Wed 04 Mar 2026 01:20:37 +0000
Files and hashes:         1: mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl (hash: HFoWj80s0kpm1wjRBr04W/j7sXNBIcS6rA0HRdRmuW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345 (0x929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AF, serialNumber=98746FFB305C233343308A3895CB70826618FC48
        Validity
            Not Before: Mar  2 01:20:37 2026 GMT
            Not After : Mar  4 01:20:37 2026 GMT
        Subject: CN=69a4e5e6-d48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:f1:7c:fb:92:72:fa:ff:41:09:53:d0:54:
                    bd:25:05:62:43:c3:e4:4d:8a:9f:bb:03:fb:84:29:
                    6b:6f:fc:ed:cf:69:9b:b4:28:f6:57:14:f2:fe:ed:
                    27:74:d3:d7:b3:47:db:f8:f2:92:06:c9:2d:16:06:
                    fe:9f:e3:5b:68:61:c5:73:a1:a3:a0:9e:29:7b:c9:
                    9e:c6:c5:73:62:2b:c1:5a:d9:3c:f6:df:3b:53:82:
                    65:09:56:94:ec:d4:10:83:06:b4:49:ab:c9:63:85:
                    36:e4:c8:dc:fb:5c:da:c2:99:1c:7e:ed:57:0b:5d:
                    7a:26:45:98:a0:a5:f2:80:cb:72:2c:47:94:30:01:
                    2a:0e:39:e1:0c:a7:23:57:30:36:0f:de:fd:29:e6:
                    b0:75:f8:6f:d5:bb:56:c8:e5:f4:94:87:99:a9:0a:
                    6a:3c:fa:14:09:98:f5:d3:b1:e0:0f:47:d8:42:db:
                    4b:55:c0:13:a0:fc:17:42:7f:a1:2f:a4:ac:2d:01:
                    60:49:de:98:5c:38:8b:e5:25:34:65:90:88:c0:da:
                    f9:b7:05:fb:33:62:e2:ba:e9:a1:58:0f:df:53:25:
                    66:d9:f7:e2:e8:d2:c1:74:67:68:7d:91:e1:81:47:
                    e7:37:47:bb:d9:e4:6a:0e:2f:d0:2b:da:2f:d4:d7:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:F0:77:F9:8A:96:03:D3:EF:5D:25:1E:CD:EE:9C:3B:53:E5:D7
            X509v3 Authority Key Identifier:
                keyid:98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:48:12:67:1c:3d:2a:80:74:4f:fb:72:74:64:a2:62:ae:
         d2:27:58:3a:27:91:da:21:70:bd:f2:ff:fd:a7:f3:5f:25:97:
         25:7e:6c:c0:4b:e2:00:72:5d:98:8c:5d:cc:14:f7:5e:d2:ce:
         b9:0c:73:09:25:e3:ba:91:14:40:10:3e:c9:22:a4:3a:86:82:
         cc:17:66:83:66:74:b9:7f:e0:ec:58:cd:1c:c7:1f:13:ec:77:
         6e:5a:f0:4a:b6:93:44:c1:78:3b:75:2c:57:7c:d2:65:b7:29:
         86:6b:34:8b:b0:ae:39:b4:7c:7d:97:20:df:ac:2c:0a:49:cc:
         4a:41:4a:5e:4c:f7:e5:78:ea:98:c5:9c:43:f0:1e:48:92:4f:
         5d:85:dc:5a:44:b3:b7:7b:0d:4d:68:99:ab:14:e4:5b:a8:56:
         54:e3:2f:e0:83:63:04:a0:e5:94:fe:9a:92:59:9b:5a:c4:81:
         60:ac:07:94:4c:46:f2:7c:e8:a1:a9:44:bf:3b:32:65:6b:be:
         a3:51:df:d6:7a:d4:17:05:63:6c:f3:64:d9:7d:ba:e1:01:61:
         03:e6:aa:ab:c1:d4:83:23:29:cb:58:6c:26:1d:e3:03:86:b0:
         ea:82:04:73:36:41:8d:94:c4:f2:be:16:18:fb:04:b9:bb:27:
         cd:28:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:39 2026 by rpki-client