Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
File:                     mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft (raw, json)
Hash identifier:          KImPZ8i7ZKrbXFnlk/I1yiJ19UENVld16SwgSxKJMUM=
Subject key identifier:   3D:68:48:BF:53:CB:B0:07:0D:81:C4:99:DC:DF:C3:21:55:92:D5:13
Authority key identifier: 98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48
Certificate issuer:       /CN=F36B2802AF/serialNumber=98746FFB305C233343308A3895CB70826618FC48
Certificate serial:       08B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
Manifest number:          08B1
Signing time:             Wed 05 Nov 2025 01:40:00 +0000
Manifest this update:     Wed 05 Nov 2025 01:40:00 +0000
Manifest next update:     Fri 07 Nov 2025 01:40:00 +0000
Files and hashes:         1: mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl (hash: g2XTYeh9sC4EB44yxls9cTfZnX8h5i01Pm0Qc3nKUuE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AF, serialNumber=98746FFB305C233343308A3895CB70826618FC48
        Validity
            Not Before: Nov  5 01:40:00 2025 GMT
            Not After : Nov  7 01:40:00 2025 GMT
        Subject: CN=690aaaf0-8521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:a9:b3:c3:ed:20:fb:43:78:09:64:52:7a:
                    fd:b2:34:e1:88:5d:d2:87:3f:63:08:cd:a5:7a:df:
                    57:99:ce:52:fc:8a:0d:df:18:b1:ce:a6:3b:77:4a:
                    41:c1:a2:69:21:fc:e2:83:97:d6:77:01:a6:6f:31:
                    7f:17:e1:05:72:31:eb:71:e5:97:23:33:55:28:f1:
                    29:9a:ff:bb:b4:96:37:42:fb:e5:c2:ce:7b:05:ea:
                    59:65:da:4d:41:31:6a:53:b2:05:f2:99:30:a6:51:
                    98:9d:df:db:fd:37:e8:ae:34:d2:f3:81:97:8e:d9:
                    2a:be:a6:3c:db:c6:cc:08:65:54:61:12:a0:a1:48:
                    ad:48:63:94:7c:a6:60:87:b7:10:b0:d2:ab:dd:e7:
                    a1:f9:c2:73:5c:a9:e0:e3:49:00:3c:19:33:52:50:
                    cc:33:87:9f:60:ea:39:84:6b:11:09:a4:5b:55:0f:
                    6e:f4:a5:ef:b8:4d:3e:97:55:9a:46:59:86:c4:02:
                    3b:ce:5c:53:2d:e7:14:ae:12:91:e1:25:92:96:b1:
                    7d:a5:44:e6:1c:c9:df:29:e5:43:62:15:18:ad:80:
                    b0:f4:f4:8f:7a:37:b7:67:da:bd:15:8c:7f:eb:53:
                    2f:eb:3c:c3:e2:e2:b3:06:ea:61:d1:71:c1:c2:53:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:68:48:BF:53:CB:B0:07:0D:81:C4:99:DC:DF:C3:21:55:92:D5:13
            X509v3 Authority Key Identifier:
                keyid:98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:e9:11:9e:dc:b7:d9:8a:ed:68:4a:84:a3:d9:38:2a:47:
         e4:a0:89:a3:9b:f0:a6:1c:a0:78:aa:19:f7:22:46:d8:33:95:
         4e:53:90:2c:67:76:60:04:c2:af:ad:0b:a0:35:b4:9e:f2:27:
         ef:10:ee:9e:65:f5:3f:3f:00:7f:21:ac:fd:cf:d6:00:c1:1f:
         82:94:58:5b:e9:7f:ab:0f:e9:c7:48:89:bb:3d:f3:41:b3:28:
         25:ca:79:ed:2c:2d:96:b2:3b:0f:3a:30:11:5a:c3:c8:9f:9f:
         89:67:39:d2:3e:9b:ba:04:b0:a8:28:29:d7:c2:43:45:26:67:
         d2:93:1f:1f:01:24:79:80:c7:61:9b:c5:73:77:2e:c7:87:47:
         e0:49:7d:a0:98:ff:bc:ca:5b:13:15:69:1a:68:c6:7a:e0:0f:
         ce:b1:ab:42:94:77:46:1b:5a:e5:5b:9c:62:dc:08:f7:ad:e0:
         4e:56:9f:8f:f4:d3:15:95:df:9a:46:c5:a7:6d:17:34:42:54:
         92:e5:36:3f:76:94:a8:21:20:5a:ba:1d:fa:15:1c:66:5f:37:
         77:9c:77:e7:fb:54:ff:7f:3d:34:04:b7:b3:85:a5:b7:42:b3:
         a0:0c:6d:d9:f9:e2:b6:19:db:0d:2d:7b:57:b1:dc:8d:b4:91:
         f4:47:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:12 2025 by rpki-client