Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          npLy95EVXkGVPXIXtSoXltTubDDaIUja5M7z8QiSlSk=
Subject key identifier:   4C:EF:75:9A:5C:6A:A6:83:F4:0D:B8:B8:B2:3B:AB:D4:A5:D9:A5:2B
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       0429
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          0425
Signing time:             Mon 02 Mar 2026 02:26:03 +0000
Manifest this update:     Mon 02 Mar 2026 02:26:02 +0000
Manifest next update:     Wed 04 Mar 2026 02:26:02 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: puu89S6kp+8WjRWLoqIxJitoQJLNvqSyDHnQDH403YY=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Mar  2 02:26:02 2026 GMT
            Not After : Mar  4 02:26:02 2026 GMT
        Subject: CN=69a4f53b-e2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:20:65:1b:88:81:96:3d:59:e2:ab:8a:fd:
                    f3:60:2e:71:10:fe:80:5c:44:a8:5e:dc:4e:02:83:
                    48:d8:3c:c1:60:56:10:2e:45:f3:11:9b:2f:ff:fc:
                    18:e1:78:b9:e6:10:49:74:f5:29:86:ff:aa:0f:43:
                    18:20:b1:94:51:4d:6b:fd:7b:a8:dd:05:a2:3f:13:
                    65:d5:5f:c5:53:0c:4d:9d:e2:f2:a8:20:7d:41:d8:
                    a2:76:29:b6:b7:59:9a:a0:85:82:67:4a:72:d5:69:
                    55:4d:16:dc:cf:ab:c4:15:ad:1f:61:51:31:03:d1:
                    43:c9:02:96:dd:73:42:c5:15:ad:ca:c3:18:86:e9:
                    2c:21:6f:b2:cb:34:41:00:92:28:7a:7a:5b:d2:ad:
                    c9:d3:ca:e4:3b:a7:a9:36:bb:de:2b:0e:94:bb:1f:
                    1f:73:13:6b:c3:3a:46:1b:64:e5:1d:12:e9:fc:b6:
                    bf:19:7a:92:ef:c2:8b:37:14:66:87:ee:a5:02:c0:
                    ea:51:a9:be:fd:dd:04:1c:c2:d5:2c:31:63:66:1c:
                    fd:42:7b:4d:ee:08:0c:88:64:9a:6e:14:76:a6:7e:
                    44:cf:03:18:bb:9f:26:e5:c6:90:af:80:db:6b:1c:
                    7e:e7:00:58:db:63:13:81:0a:69:70:14:bc:a7:9b:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EF:75:9A:5C:6A:A6:83:F4:0D:B8:B8:B2:3B:AB:D4:A5:D9:A5:2B
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:0a:9b:ec:a3:62:6c:b1:a0:fc:c0:b1:9f:72:3a:2c:3c:
         05:e4:91:af:49:11:bc:7f:89:b5:b5:77:8c:a2:9f:b5:ee:62:
         d6:cb:9b:4a:70:36:ae:5a:2f:65:ea:ab:b9:1f:7f:63:d3:bb:
         df:ae:07:17:9c:65:3b:d1:e4:5e:2f:10:cc:be:be:dd:c2:75:
         56:0f:fa:f5:ea:b0:38:8c:74:1a:ba:00:29:79:99:d4:eb:87:
         6b:21:48:ca:e7:e2:32:f1:a0:b5:02:aa:c3:d0:91:04:8a:8c:
         0e:1b:da:55:3b:69:19:6c:5d:db:6c:69:b1:c5:65:e2:47:da:
         e7:78:20:d3:a0:01:7e:e2:5b:f9:cb:10:08:c9:e4:83:88:19:
         e5:c8:19:ea:e7:06:8c:e8:43:24:3b:7f:47:28:43:83:a7:12:
         62:41:9d:cf:70:3a:69:e1:2a:9f:1a:44:9b:74:23:c9:1e:52:
         9a:70:12:d7:1f:ea:3e:ac:9f:26:01:f0:e4:a4:d9:28:c7:23:
         8f:70:f5:83:15:be:39:9e:22:7c:ae:57:4e:e1:a8:9f:e7:1a:
         ab:97:a7:af:c4:c0:c4:a5:d5:e4:41:22:49:64:a1:c9:7e:4d:
         cd:64:3c:ff:9c:22:41:07:3a:75:cd:a3:1d:1f:ab:17:35:41:
         39:76:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:29 2026 by rpki-client