Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          VIQLTfGGulxQ8h7+w7f3HqG9zJcVG+PliKqbWKb3pB8=
Subject key identifier:   BF:37:DD:EA:78:23:EC:48:09:D5:A9:A6:76:52:BB:45:D4:9E:D9:26
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       07FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          07F3
Signing time:             Fri 17 Apr 2026 01:55:58 +0000
Manifest this update:     Fri 17 Apr 2026 01:55:58 +0000
Manifest next update:     Sun 19 Apr 2026 01:55:58 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: 3qgDv52h/6xGV4sN/WgKLKMcI3+Js+SymdTur6+I4BA=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Apr 17 01:55:58 2026 GMT
            Not After : Apr 19 01:55:58 2026 GMT
        Subject: CN=69e1932e-55ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:96:15:8a:4a:a7:e9:56:f9:05:88:19:2e:
                    be:2a:d8:28:96:ba:5f:70:34:ce:e2:33:ad:af:8f:
                    ec:06:3f:ac:1b:e2:a9:28:c0:75:d0:6a:bd:71:2a:
                    ef:cb:b3:11:3e:a1:98:8c:15:d2:bd:32:ec:8f:20:
                    2c:ca:cb:0a:fe:3d:6a:eb:ac:c1:64:ac:69:e7:4f:
                    04:58:83:f4:44:d8:79:f4:59:df:4f:01:cd:06:11:
                    f0:13:40:4a:6f:d6:cb:c7:a5:41:2e:3e:3b:2b:95:
                    2a:b5:eb:55:74:eb:fc:89:0e:cb:8d:f4:c0:2c:15:
                    cb:10:c1:94:a5:3a:c0:18:52:f7:61:49:67:f8:26:
                    4c:73:97:88:17:ab:b3:46:c8:9d:f9:29:b4:ad:79:
                    4c:36:1d:5f:a2:30:ee:99:9e:a1:c3:83:94:67:2c:
                    d5:ec:1c:0c:b2:98:25:a8:f6:65:29:1c:47:e5:3f:
                    2a:e2:85:7c:63:64:52:5c:c5:84:6d:14:4b:86:80:
                    f4:b5:90:13:fb:63:4c:0f:af:50:42:0e:e8:c3:91:
                    9a:a1:77:e6:ea:b6:c0:e8:4b:1d:c6:65:ad:44:16:
                    04:b1:08:30:5d:5b:13:b8:7d:e3:e2:af:eb:b7:1e:
                    e9:15:a6:85:63:b5:4a:21:9e:46:78:3c:48:83:21:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:37:DD:EA:78:23:EC:48:09:D5:A9:A6:76:52:BB:45:D4:9E:D9:26
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:e5:d1:5b:c5:59:fa:4e:45:38:1d:8a:5e:12:1b:86:90:
         8c:2f:b6:e8:92:89:5f:db:09:09:7e:69:7d:c5:8c:b4:33:37:
         7a:be:db:ea:83:27:1f:ba:7a:cb:cd:bb:8e:35:de:70:2c:66:
         35:6b:08:34:41:ac:c8:dd:28:29:f4:5f:ee:8b:4a:9f:b9:9e:
         bb:77:af:d1:57:c1:c3:5e:4e:1b:a5:02:51:38:29:e2:1c:00:
         c4:52:04:7d:57:07:66:6e:ba:5c:f0:1b:d8:58:2f:91:d9:03:
         68:7f:59:46:c7:41:f3:39:af:a4:bd:2b:9f:33:90:b3:d9:10:
         ec:ec:79:23:90:d9:f4:c9:9f:7c:7b:16:25:34:d7:ad:4b:0a:
         98:af:9b:ff:d9:3d:f3:27:c4:25:fa:21:a3:8c:2b:ee:83:55:
         e5:b6:c5:fc:4c:4d:f2:00:f4:2c:a0:da:12:7d:eb:4d:2e:b7:
         63:64:26:8d:b5:2d:2c:67:2b:6b:75:4f:bc:e4:a4:68:37:fc:
         55:e0:d3:9e:d7:4f:2f:79:72:df:9f:72:57:0a:c8:7f:74:91:
         a3:bd:86:f7:d2:99:e4:e3:33:12:5b:b2:e8:99:d3:a4:dc:5e:
         56:fd:c2:48:dc:d0:e7:88:5d:c4:8a:9e:34:36:c5:ac:4d:be:
         de:dd:0b:ef
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yNjA0MTcwMTU1NThaFw0yNjA0MTkwMTU1NThaMBgxFjAU
BgNVBAMTDTY5ZTE5MzJlLTU1Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFipYVikqn6Vb5BYgZLr4q2CiWul9wNM7iM62vj+wGP6wb4qkowHXQar1x
Ku/LsxE+oZiMFdK9MuyPICzKywr+PWrrrMFkrGnnTwRYg/RE2Hn0Wd9PAc0GEfAT
QEpv1svHpUEuPjsrlSq161V06/yJDsuN9MAsFcsQwZSlOsAYUvdhSWf4Jkxzl4gX
q7NGyJ35KbSteUw2HV+iMO6ZnqHDg5RnLNXsHAyymCWo9mUpHEflPyrihXxjZFJc
xYRtFEuGgPS1kBP7Y0wPr1BCDujDkZqhd+bqtsDoSx3GZa1EFgSxCDBdWxO4fePi
r+u3HukVpoVjtUohnkZ4PEiDIQB1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvzfd
6ngj7EgJ1ammdlK7RdSe2SYwHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ0RjEvMEIyODY5ODQzNThBMTFFQkEzREU2NzcyRjhB
RUEyMjgvaGJDeGlqR09XblhRVFJvS3AzN19sUVVpaVNRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFP+XRW8VZ+k5FOB2KXhIbhpCML7bo
kolf2wkJfml9xYy0Mzd6vtvqgycfunrLzbuONd5wLGY1awg0QazI3Sgp9F/ui0qf
uZ67d6/RV8HDXk4bpQJROCniHADEUgR9Vwdmbrpc8BvYWC+R2QNof1lGx0HzOa+k
vSufM5Cz2RDs7HkjkNn0yZ98exYlNNetSwqYr5v/2T3zJ8Ql+iGjjCvug1XltsX8
TE3yAPQsoNoSfetNLrdjZCaNtS0sZytrdU+85KRoN/xV4NOe108veXLfn3JXCsh/
dJGjvYb30pnk4zMSW7LomdOk3F5W/cJI3NDniF3Eip40NsWsTb7e3Qvv
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:33:11 2026 by rpki-client