Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
File:                     hOOlVdJh3TLxBhVGYpV82qCdDQY.mft (raw, json)
Hash identifier:          Pz0uBusCaoGeZ8hT1TzVdyAXXotwWCEZv3QqXrhZX/U=
Subject key identifier:   65:7F:84:99:30:5A:65:F1:66:AB:1E:A7:28:84:2A:DA:83:76:70:CC
Authority key identifier: 84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06
Certificate issuer:       /CN=F36E05BFAF/serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
Certificate serial:       24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
Manifest number:          24
Signing time:             Fri 12 Jun 2026 05:37:57 +0000
Manifest this update:     Fri 12 Jun 2026 05:37:56 +0000
Manifest next update:     Sun 14 Jun 2026 05:37:56 +0000
Files and hashes:         1: hOOlVdJh3TLxBhVGYpV82qCdDQY.crl (hash: 8o2L7mlsonlBijRqVHQC2P5iW2ot9t3hQTNLMCVjbeU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 05:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E05BFAF, serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
        Validity
            Not Before: Jun 12 05:37:56 2026 GMT
            Not After : Jun 14 05:37:56 2026 GMT
        Subject: CN=6a2b9b35-c025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:8a:e6:cb:13:29:d2:71:69:2e:5d:33:c0:
                    56:a5:f9:2d:be:e6:5a:8a:ae:56:06:4f:74:ff:d5:
                    ab:91:80:6e:18:14:24:06:56:e0:00:7e:18:59:d0:
                    d7:d4:f9:5a:9d:7f:ce:3e:62:89:82:2a:2f:48:66:
                    17:39:ca:ae:50:a2:af:3c:54:82:13:82:a1:cb:92:
                    ff:d8:00:d2:54:0f:82:13:80:91:6e:bd:55:8b:e9:
                    14:46:35:d5:58:8d:fc:90:42:30:69:ab:63:79:36:
                    aa:0c:06:94:d4:5e:13:9a:a2:a9:81:12:fe:a6:09:
                    b9:d2:51:10:67:54:8a:96:03:86:4a:cf:9b:3a:e9:
                    c7:d1:a9:52:28:34:84:02:0c:43:d3:f9:09:87:8f:
                    eb:e3:b1:e7:ac:5d:13:5b:88:bf:6d:06:03:11:16:
                    3e:38:35:3c:ff:c0:ab:bd:7e:63:d3:fd:72:9f:ea:
                    58:c4:29:07:35:5a:7a:f4:a5:fa:16:71:f4:72:77:
                    f3:9e:8b:ed:17:38:30:eb:6c:db:5f:d5:ed:ea:ad:
                    da:1c:69:77:0e:a6:a9:d2:b0:c1:1d:3b:e8:b2:4d:
                    ec:2d:ce:db:99:2b:3f:e1:eb:f3:87:d9:05:43:ac:
                    51:45:2f:03:d7:5d:98:09:2f:ba:7d:14:7c:4d:eb:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7F:84:99:30:5A:65:F1:66:AB:1E:A7:28:84:2A:DA:83:76:70:CC
            X509v3 Authority Key Identifier:
                keyid:84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:9f:ab:45:8e:54:51:33:c7:20:f9:a8:ed:60:0f:29:c9:
         7f:c0:80:4e:86:8a:94:67:6b:1c:67:64:00:b2:78:ac:15:e7:
         67:4f:b7:27:66:de:88:b6:11:11:51:d1:b8:b6:20:3e:9a:91:
         04:b6:ed:8f:24:ff:cf:3b:bf:32:6f:b4:f7:bf:75:9b:06:f6:
         d4:9b:f8:4c:56:13:da:dd:5a:24:a7:22:fd:0e:5a:56:c4:87:
         21:1f:73:32:14:b4:6f:a9:ec:4d:75:9f:8d:68:4a:46:a4:4d:
         27:7e:fd:65:a0:9c:ab:c5:62:6d:aa:37:6a:da:df:f1:df:28:
         1c:d1:94:ff:65:6f:c3:45:48:e4:62:db:e8:d8:c1:cf:64:d4:
         10:d4:1d:cc:28:01:22:fc:53:62:64:f8:67:b6:bf:86:d1:bc:
         b4:7a:5a:ca:10:02:14:11:ae:0d:1e:a8:10:72:cb:2c:fb:a8:
         76:18:6e:66:2b:d6:d9:34:46:f8:03:ad:b4:0b:ed:32:25:b7:
         42:14:9b:19:e3:bf:c9:11:77:57:e9:7f:66:ee:79:e4:df:56:
         19:10:57:46:d2:60:1b:b1:81:03:6d:f5:c0:00:4e:84:74:85:
         4a:d5:62:b5:eb:6b:6d:a2:ab:18:91:ae:64:81:ce:d8:4a:7c:
         de:c5:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:19 2026 by rpki-client