Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          Xr0gnHmA4NtvfdMzsvi9nzNiAimxgFfwSo152lkMcUc=
Subject key identifier:   65:78:8F:5D:CC:21:C1:6F:89:E8:2B:D3:C8:43:2F:DF:72:FD:A4:1D
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       07CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          07C5
Signing time:             Mon 02 Mar 2026 01:31:22 +0000
Manifest this update:     Mon 02 Mar 2026 01:31:21 +0000
Manifest next update:     Wed 04 Mar 2026 01:31:21 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: 3JaF+7xYISb7PCJKi1nqQ0W6JLK+F05uTMOgckJaWrY=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Mar  2 01:31:21 2026 GMT
            Not After : Mar  4 01:31:21 2026 GMT
        Subject: CN=69a4e86a-c161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:c9:84:b9:ee:d3:1c:67:c7:76:51:07:c0:
                    be:b3:23:27:16:8f:8b:c7:87:82:c1:3a:9f:cc:0d:
                    70:23:e6:dd:92:4d:6b:df:a1:82:9d:0c:c5:ae:4f:
                    90:c3:eb:ad:5b:fb:6e:d9:ad:89:2c:65:c2:77:6e:
                    20:8b:6e:04:2e:0d:be:4e:32:7d:8e:a2:5e:31:32:
                    c4:d9:c9:d7:71:e6:27:86:b4:11:ca:96:fb:5b:f6:
                    46:c3:e5:ff:99:3c:79:01:5b:6d:02:64:ac:1a:bb:
                    e7:af:2e:ea:4d:40:3b:c2:ca:1d:cb:c6:99:44:c2:
                    56:c8:51:dc:c2:aa:01:40:d8:92:4c:92:20:13:b0:
                    57:13:0c:7d:68:ea:08:30:56:8f:0c:22:d1:69:ee:
                    38:04:54:9b:51:a2:e5:9b:bb:ba:33:0f:0d:1d:59:
                    67:50:21:9b:51:ad:dc:8b:40:65:05:8b:b8:f3:b5:
                    0c:2e:60:51:8b:e4:83:4b:9a:de:3f:22:84:4f:88:
                    ab:98:18:06:91:7c:43:89:51:e5:92:e5:6f:0e:a0:
                    d6:41:11:79:4b:c0:84:e7:11:b3:0a:73:2b:96:72:
                    13:4a:56:d5:47:37:b7:8e:a0:68:26:57:46:e6:e2:
                    38:1c:8c:f0:67:32:0b:51:c0:24:41:56:0e:a8:b8:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:78:8F:5D:CC:21:C1:6F:89:E8:2B:D3:C8:43:2F:DF:72:FD:A4:1D
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:6c:7d:88:a6:e7:3d:fc:39:e0:85:6b:69:8e:b4:ec:07:
         d9:6e:93:1f:35:67:23:29:2c:dd:55:6c:06:28:21:92:33:2a:
         2c:2c:2e:b0:08:95:1a:26:7a:5a:0e:34:ce:d5:89:be:c8:b5:
         08:81:69:e0:83:95:72:b3:f3:36:89:c9:a9:d1:3a:1d:b1:6f:
         c4:4e:8a:00:6a:ce:4e:61:85:d3:ec:35:a4:98:4a:c2:53:c1:
         de:68:fb:6f:90:1a:b3:54:95:7c:df:1e:a7:d6:be:8f:a4:cc:
         30:5e:b6:d8:79:f0:9c:b6:36:dd:29:a6:03:19:b9:bd:a9:22:
         ee:62:fe:d7:e1:b8:ab:3d:75:76:7f:1e:e8:47:22:4c:05:14:
         5e:32:4e:a7:ab:4c:90:1d:2f:d1:d8:25:e5:89:39:a7:6f:ef:
         0a:bc:1b:d3:8e:fd:96:65:8c:db:04:25:bf:53:1e:e7:0b:34:
         98:72:d6:b2:d3:3f:08:ed:81:af:c2:81:64:b3:7e:1f:e1:bb:
         53:88:c0:52:9e:39:9a:ef:58:bd:d6:a3:63:93:ed:b3:15:f8:
         3e:40:30:bb:a3:12:41:30:64:17:ff:4c:f6:68:7f:53:8a:92:
         27:25:17:1e:41:c1:7d:25:53:7a:c5:28:1a:f2:dd:b6:4b:fc:
         93:81:98:f8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB84wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yNjAzMDIwMTMxMjFaFw0yNjAzMDQwMTMxMjFaMBgxFjAU
BgNVBAMTDTY5YTRlODZhLWMxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTScmEue7THGfHdlEHwL6zIycWj4vHh4LBOp/MDXAj5t2STWvfoYKdDMWu
T5DD661b+27ZrYksZcJ3biCLbgQuDb5OMn2Ool4xMsTZyddx5ieGtBHKlvtb9kbD
5f+ZPHkBW20CZKwau+evLupNQDvCyh3LxplEwlbIUdzCqgFA2JJMkiATsFcTDH1o
6ggwVo8MItFp7jgEVJtRouWbu7ozDw0dWWdQIZtRrdyLQGUFi7jztQwuYFGL5INL
mt4/IoRPiKuYGAaRfEOJUeWS5W8OoNZBEXlLwITnEbMKcyuWchNKVtVHN7eOoGgm
V0bm4jgcjPBnMgtRwCRBVg6ouCm1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZXiP
XcwhwW+J6CvTyEMv33L9pB0wHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ0RjEvMEIyODY5ODQzNThBMTFFQkEzREU2NzcyRjhB
RUEyMjgvaGJDeGlqR09XblhRVFJvS3AzN19sUVVpaVNRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMOGx9iKbnPfw54IVraY607AfZbpMf
NWcjKSzdVWwGKCGSMyosLC6wCJUaJnpaDjTO1Ym+yLUIgWngg5Vys/M2icmp0Tod
sW/ETooAas5OYYXT7DWkmErCU8HeaPtvkBqzVJV83x6n1r6PpMwwXrbYefCctjbd
KaYDGbm9qSLuYv7X4birPXV2fx7oRyJMBRReMk6nq0yQHS/R2CXliTmnb+8KvBvT
jv2WZYzbBCW/Ux7nCzSYctay0z8I7YGvwoFks34f4btTiMBSnjma71i91qNjk+2z
Ffg+QDC7oxJBMGQX/0z2aH9TipInJRceQcF9JVN6xSga8t22S/yTgZj4
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:12 2026 by rpki-client