Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          vYZSyCR3tBwsDNWg9qTIiPA2yOFXmSOGyKiPQoF40UE=
Subject key identifier:   55:27:C1:AC:AC:B5:29:27:39:D9:A2:E2:CC:D0:35:AB:06:36:A5:78
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0A4B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0A4A
Signing time:             Sat 13 Jun 2026 01:24:13 +0000
Manifest this update:     Sat 13 Jun 2026 01:24:12 +0000
Manifest next update:     Mon 15 Jun 2026 01:24:12 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: zsgbzfTQXmpx6u8VnNMLYnIUgZpjB02LhmPSm3KqVtQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2635 (0xa4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Jun 13 01:24:12 2026 GMT
            Not After : Jun 15 01:24:12 2026 GMT
        Subject: CN=6a2cb13d-1c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:4d:9f:99:36:66:5a:f7:80:a4:5a:85:84:
                    ba:17:2c:c8:b5:90:49:fd:53:f7:f2:45:17:e1:05:
                    0d:b6:bd:25:1e:11:e6:f7:99:0f:f2:85:87:f6:e7:
                    61:0b:e7:9b:04:29:5c:b1:86:0b:75:1b:45:93:2a:
                    ef:f4:4e:97:f3:39:51:2f:3f:b6:6b:ac:ac:57:ce:
                    00:d3:82:1f:93:b0:ef:20:17:86:4a:ca:cf:6e:1a:
                    6a:98:a2:b3:6a:66:da:d1:a5:d5:d4:6d:8a:3a:00:
                    ea:f8:52:f1:28:0a:6a:da:b7:5a:42:6b:bb:29:a0:
                    29:48:f1:91:42:ff:f2:b5:ab:f2:48:10:78:9e:03:
                    54:fd:b8:06:b7:65:42:0c:a3:0e:5a:8d:af:1e:10:
                    10:a4:7c:e5:a8:64:28:88:d2:1d:1e:ff:d0:69:04:
                    16:bd:72:8d:1b:ca:69:c7:72:7c:08:11:11:3e:a5:
                    e4:9e:06:cc:c4:52:fc:06:13:61:30:d4:2c:40:8f:
                    42:19:af:fb:77:2a:f1:e2:fa:19:24:4b:d1:be:ac:
                    cd:af:26:94:84:b1:2e:ec:e8:5e:e0:76:40:62:c9:
                    a6:c0:7e:66:32:e2:e9:1b:47:be:dd:ee:e0:25:f0:
                    c9:f3:c0:71:37:26:7f:e1:65:2e:7f:68:b8:55:12:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:C1:AC:AC:B5:29:27:39:D9:A2:E2:CC:D0:35:AB:06:36:A5:78
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:e1:80:92:9b:38:b8:5d:c6:12:97:1c:76:d2:d9:88:e1:
         52:9c:df:ef:3d:80:e0:12:7a:15:4e:13:62:b0:5b:70:12:4e:
         e5:c1:30:1e:b2:d8:89:0b:02:e8:bb:69:35:f9:44:a7:ab:89:
         13:59:7c:39:b2:5b:1e:b2:49:20:ea:3c:88:8e:10:0a:59:ba:
         65:41:0a:fe:88:37:67:1d:f7:d4:ce:d0:40:8c:f2:d5:15:46:
         65:55:84:0d:44:d2:82:32:37:6d:ac:ca:ee:53:df:c7:5f:68:
         c3:ab:85:82:01:d2:5c:e9:55:bb:e8:10:5a:a7:65:5c:bf:c5:
         d2:63:5d:d5:d2:87:67:63:64:6a:2a:42:e5:37:88:3c:1d:89:
         ca:c2:ce:2f:6b:c4:19:dc:6c:2b:1d:9a:63:d4:8d:84:b3:1b:
         af:72:58:87:77:57:2e:75:40:c8:08:b8:9a:97:78:95:9e:d6:
         33:4f:32:c2:08:49:cc:8d:0a:03:86:16:17:fc:3f:23:88:c8:
         38:64:52:bd:d1:e4:32:e5:ff:04:28:6b:86:ef:fe:31:23:22:
         f2:ed:e6:1d:db:af:2a:e8:39:73:6b:9c:5b:4e:4a:d2:19:c9:
         b7:1f:8e:31:64:7f:76:8c:13:6b:ac:4e:bd:b1:f9:00:47:ca:
         8d:fc:b7:7f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCkswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDg2MzdBUjExMC8GA1UEBRMoQUM3NTkzOUNBNzJCOTc0REU0NUUyMTcyMDhEOUUw
NkU3RTFCQUMwMjAeFw0yNjA2MTMwMTI0MTJaFw0yNjA2MTUwMTI0MTJaMBgxFjAU
BgNVBAMTDTZhMmNiMTNkLTFjMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAWU2fmTZmWveApFqFhLoXLMi1kEn9U/fyRRfhBQ22vSUeEeb3mQ/yhYf2
52EL55sEKVyxhgt1G0WTKu/0TpfzOVEvP7ZrrKxXzgDTgh+TsO8gF4ZKys9uGmqY
orNqZtrRpdXUbYo6AOr4UvEoCmrat1pCa7spoClI8ZFC//K1q/JIEHieA1T9uAa3
ZUIMow5aja8eEBCkfOWoZCiI0h0e/9BpBBa9co0bymnHcnwIERE+peSeBszEUvwG
E2Ew1CxAj0IZr/t3KvHi+hkkS9G+rM2vJpSEsS7s6F7gdkBiyabAfmYy4ukbR77d
7uAl8MnzwHE3Jn/hZS5/aLhVEm/lAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUVSfB
rKy1KSc52aLizNA1qwY2pXgwHwYDVR0jBBgwFoAUrHWTnKcrl03kXiFyCNngbn4b
rAIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4NjM3L0ZDQjQ3QUZBODM5NzExRTlCQUM3OUExQUY4QUVBMjI4L3JIV1Ru
S2NybDAza1hpRnlDTm5nYm40YnJBSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JIV1RuS2NybDAza1hpRnlDTm5nYm40YnJBSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDg2MzcvRkNCNDdBRkE4Mzk3MTFFOUJBQzc5QTFBRjhBRUEy
MjgvckhXVG5LY3JsMDNrWGlGeUNObmdibjRickFJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeM+GAkps4uF3GEpccdtLZiOFSnN/vPYDg
EnoVThNisFtwEk7lwTAestiJCwLou2k1+USnq4kTWXw5slseskkg6jyIjhAKWbpl
QQr+iDdnHffUztBAjPLVFUZlVYQNRNKCMjdtrMruU9/HX2jDq4WCAdJc6VW76BBa
p2Vcv8XSY13V0odnY2RqKkLlN4g8HYnKws4va8QZ3GwrHZpj1I2EsxuvcliHd1cu
dUDICLial3iVntYzTzLCCEnMjQoDhhYX/D8jiMg4ZFK90eQy5f8EKGuG7/4xIyLy
7eYd268q6Dlza5xbTkrSGcm3H44xZH92jBNrrE69sfkAR8qN/Ld/
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:33 2026 by rpki-client