Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          tFrUyLumaPydv2hhVu9vULrs2TVwSBxJBv8EwI/ahLE=
Subject key identifier:   25:B2:09:80:FE:56:16:45:BC:0C:35:2A:A8:77:F5:56:F3:75:C7:B6
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       04BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          04BA
Signing time:             Tue 28 Jul 2026 03:26:16 +0000
Manifest this update:     Tue 28 Jul 2026 03:26:15 +0000
Manifest next update:     Thu 30 Jul 2026 03:26:15 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: /8JZkgOksZUjm49QJSRfFFH/gM1vfQV3bBPiI2K6y/w=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Jul 28 03:26:15 2026 GMT
            Not After : Jul 30 03:26:15 2026 GMT
        Subject: CN=6a682158-b2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:d7:93:e2:eb:dc:72:01:d4:01:5b:a1:b3:
                    90:c7:c6:5d:76:8e:2b:a0:77:d9:10:7e:4a:27:ff:
                    d8:37:69:fb:92:8a:ad:9a:fd:22:7b:66:bf:41:f4:
                    d9:da:b6:aa:56:0e:2f:ce:82:13:6c:4e:82:1e:37:
                    3c:e4:5e:48:80:2e:fd:2b:95:6c:c8:b8:7f:aa:07:
                    41:14:77:64:66:0d:d8:d9:1b:50:fb:ce:a9:08:3d:
                    47:1a:ed:f9:63:56:66:2d:16:dd:ff:04:c2:ed:b4:
                    dc:dc:83:f6:ea:81:9d:07:13:6c:95:ae:a3:2d:62:
                    90:19:84:f4:6c:13:5d:f8:84:d2:53:dc:3c:3c:c8:
                    c0:d9:15:de:fb:14:3d:a2:57:5e:ee:78:87:04:a0:
                    65:30:ad:aa:6f:d7:11:94:f9:aa:e8:30:9d:c5:d6:
                    2f:d9:ef:0b:22:1c:8b:5d:d2:c2:d0:0c:2c:d4:67:
                    a2:20:85:ef:42:33:20:02:d6:89:64:ce:a5:54:e7:
                    bc:dc:6e:89:51:e0:ca:22:9a:7f:14:35:ec:ab:88:
                    d2:5e:73:86:a9:63:e3:19:72:02:49:a9:fe:bf:ce:
                    85:df:a5:56:8d:ae:13:42:18:02:b9:21:06:27:a5:
                    7e:21:54:d5:25:97:a8:47:ce:1a:7e:e1:e7:fc:06:
                    b6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B2:09:80:FE:56:16:45:BC:0C:35:2A:A8:77:F5:56:F3:75:C7:B6
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:33:d9:ea:4a:14:b1:81:1b:e4:c8:20:b3:bb:f8:55:1e:68:
         c2:34:e8:2e:17:e9:01:1c:2e:ab:c2:b4:c6:24:14:b8:e5:64:
         9a:ef:9d:38:dd:57:ce:81:93:83:3a:43:62:6c:f7:a8:cc:c7:
         5b:7d:f7:64:f1:6e:12:7a:7d:51:ee:96:91:0c:11:3d:48:f0:
         54:7b:77:58:39:7b:83:61:c9:95:02:cf:df:34:23:b0:a2:c9:
         8b:bc:79:99:18:b0:60:1a:70:2f:27:7c:8b:d6:c6:cf:20:bf:
         a4:d4:e5:d3:40:0d:4a:4b:b8:f3:37:12:ea:3a:33:67:86:5b:
         37:dd:d2:cd:48:53:18:89:f3:a9:db:15:75:f7:99:24:3e:2d:
         49:54:fa:90:64:b5:36:4a:6f:b4:f9:c9:01:1a:25:ef:62:c3:
         67:59:43:2a:40:fd:8b:6a:94:3f:a0:4c:22:36:67:6b:11:13:
         e6:ce:b0:81:9e:70:8c:be:ff:e6:5d:a8:28:57:78:08:cd:22:
         7c:5b:14:ec:59:77:76:8e:45:1b:6c:f5:32:88:dc:85:da:95:
         8a:8b:b6:de:59:59:4d:0e:1c:1e:70:a5:3e:52:2d:2f:b0:b1:
         33:7f:29:5c:76:88:5d:b6:64:ca:e1:b1:9a:3d:dd:c7:f1:20:
         d3:23:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:30 2026 by rpki-client