Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
File:                     hOOlVdJh3TLxBhVGYpV82qCdDQY.mft (raw, json)
Hash identifier:          aFOq+C1IF7MavOokaeXfu4KYQRu0wkcRnD3ctpNo4Po=
Subject key identifier:   06:C7:15:65:80:FC:0F:7A:2F:4D:0E:15:3F:A5:74:18:D5:E4:67:BA
Authority key identifier: 84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06
Certificate issuer:       /CN=F36E05BFAF/serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
Certificate serial:       53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
Manifest number:          53
Signing time:             Tue 28 Jul 2026 05:39:04 +0000
Manifest this update:     Tue 28 Jul 2026 05:39:03 +0000
Manifest next update:     Thu 30 Jul 2026 05:39:03 +0000
Files and hashes:         1: hOOlVdJh3TLxBhVGYpV82qCdDQY.crl (hash: TmznZTb3tveUbRKCWeAGfiUdnlimmnpIq2k5Ov6HHPg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E05BFAF, serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
        Validity
            Not Before: Jul 28 05:39:03 2026 GMT
            Not After : Jul 30 05:39:03 2026 GMT
        Subject: CN=6a684078-7a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:7d:72:96:0b:a4:f2:a7:5f:b3:b5:3a:38:
                    f4:bb:61:a3:38:7e:86:da:4f:66:74:27:01:3d:bd:
                    6d:f5:8f:e8:67:6e:d7:29:c5:71:7a:00:94:69:52:
                    e3:10:63:07:94:7f:f9:7d:a8:30:9a:e8:ec:6c:39:
                    b4:66:a1:dd:ca:35:9d:d3:58:40:22:53:67:61:5a:
                    3a:a4:19:5b:bf:07:35:51:31:0e:02:46:cb:08:a2:
                    24:de:11:ee:a7:24:2d:46:22:e5:7d:28:3f:c1:19:
                    5c:1d:a3:b0:c2:5e:ba:f9:e2:83:6b:b5:0f:17:b1:
                    f3:64:cb:10:db:59:88:73:d6:03:63:0b:67:5d:0e:
                    e8:d2:3c:4f:f0:7c:5d:61:ef:dc:9e:df:a9:a4:f2:
                    74:6b:b1:dd:d7:65:e2:aa:cb:a5:90:63:40:d2:47:
                    e7:4a:fa:de:a0:5a:7a:19:a8:b2:2d:7f:96:09:4e:
                    e5:05:bb:fb:d0:f6:70:cd:26:1c:99:17:78:80:1f:
                    10:0a:b0:47:8d:ff:33:b6:e7:85:d7:fd:97:b8:ab:
                    a8:38:1a:8b:af:00:4e:28:d7:8b:dc:08:5b:13:32:
                    97:38:73:be:c9:26:42:c5:e4:b0:ae:b8:92:49:b8:
                    84:d5:e4:1e:73:d1:2c:23:61:ac:8a:ee:dd:74:73:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:15:65:80:FC:0F:7A:2F:4D:0E:15:3F:A5:74:18:D5:E4:67:BA
            X509v3 Authority Key Identifier:
                keyid:84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:26:56:45:43:46:71:72:38:9c:52:a5:eb:6b:59:bb:19:69:
         84:6b:27:cb:1e:bf:f4:f8:43:5d:2c:c9:9b:79:f7:c1:28:44:
         7d:e8:5e:d2:5a:ae:55:b0:3c:2d:5f:08:79:78:ee:3a:fe:89:
         e9:8d:82:6d:10:71:70:24:17:1a:59:f7:00:66:3f:52:35:ec:
         6b:68:23:b8:29:83:20:e8:69:b4:18:48:df:37:66:ee:d7:d7:
         eb:3a:9f:a1:f8:f0:a0:15:08:44:35:e0:ff:22:28:b0:c9:9d:
         60:7b:56:b4:63:21:47:0c:e3:0c:03:09:00:cc:1f:0e:a1:6c:
         e3:bb:dd:e2:a2:04:31:9b:8e:3a:d0:61:78:ec:28:6c:7d:9f:
         a5:05:61:c3:29:61:f3:93:d6:46:a1:71:eb:f1:f2:3d:ba:00:
         8b:29:d9:f4:af:4f:09:61:0c:6b:17:f6:47:a1:0f:bb:1d:b6:
         c1:71:ca:45:96:12:21:f3:e2:4a:2d:bc:2d:34:3b:5e:ac:1b:
         09:19:be:5c:7a:60:33:c8:c3:50:a7:eb:7f:a8:70:9b:0c:85:
         ec:bc:4b:1e:a2:4b:8d:2c:51:d0:01:0c:b9:52:d3:27:5d:4a:
         66:bb:30:ff:bd:88:a1:81:d8:e3:e4:5c:96:d3:6f:b1:3f:4d:
         19:67:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:50 2026 by rpki-client