Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          df8BsWTYPjzzPTVCprCxommu/xsI7DuQdSmB8gdKkQ8=
Subject key identifier:   AB:9D:CA:1F:45:51:2F:A0:A4:BF:85:9E:01:95:CA:13:34:DB:2A:8D
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       057C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          057B
Signing time:             Sat 13 Jun 2026 02:59:34 +0000
Manifest this update:     Sat 13 Jun 2026 02:59:33 +0000
Manifest next update:     Mon 15 Jun 2026 02:59:33 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: OyEea2E4U1QZ/ghxG8FOqAPh8pPo81kExEqQzdGYReI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Jun 13 02:59:33 2026 GMT
            Not After : Jun 15 02:59:33 2026 GMT
        Subject: CN=6a2cc795-2f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:55:29:0f:05:d5:c2:0c:59:55:bf:07:33:
                    61:81:67:4e:cc:f7:4b:71:df:ef:09:1a:2d:00:67:
                    d4:b6:d2:26:db:29:d3:fc:b8:bb:55:c5:6c:49:3a:
                    d3:2a:94:1f:74:19:ab:bc:41:d1:1d:44:c3:46:8a:
                    59:cf:49:de:f6:02:4f:eb:34:d6:0b:f0:bb:94:4f:
                    0c:1f:46:b9:e6:8c:9f:11:31:32:99:52:1c:14:69:
                    bc:2b:42:0a:d8:b4:e2:dc:84:41:48:3b:62:03:ad:
                    63:64:54:d3:e7:7a:3d:24:23:4a:90:e0:31:00:39:
                    02:c9:f0:d9:8d:8e:d1:24:61:16:91:4a:ea:db:03:
                    bd:e1:95:70:5d:ce:3c:e4:05:00:de:bc:d2:3c:e8:
                    eb:dc:e6:c8:6c:4a:d7:81:75:82:a8:87:a0:ab:b6:
                    83:e1:a6:d8:9c:0c:80:04:a8:f1:82:de:21:23:6f:
                    d0:99:7d:06:86:42:51:b9:b4:c2:5f:fc:6a:db:18:
                    b5:11:5c:1c:39:27:25:23:24:cc:3d:42:30:78:87:
                    22:62:1b:2f:75:3a:5c:c9:56:e3:d3:a1:ee:88:d8:
                    b0:ab:fe:f7:2b:82:08:30:95:65:ba:6a:e5:c1:e4:
                    5b:38:c3:ab:c9:73:cf:4a:fb:84:93:00:ef:eb:4c:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9D:CA:1F:45:51:2F:A0:A4:BF:85:9E:01:95:CA:13:34:DB:2A:8D
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:30:f6:df:dc:db:68:f2:5d:ac:a7:56:84:cf:bc:12:d7:70:
         2d:1b:35:09:94:02:b1:f8:bc:cf:ec:a0:f2:6c:32:75:34:68:
         0b:51:e7:b7:16:38:57:a7:df:14:c3:6c:3d:49:6f:a8:02:19:
         46:a0:6e:65:30:27:73:3b:1c:49:20:f7:ae:51:60:f1:48:04:
         be:57:ca:62:bb:b3:7a:b6:89:32:12:f4:6b:84:82:5f:40:0a:
         07:3f:e3:8f:1a:f4:54:44:d9:1c:bf:33:20:dc:ff:7b:bc:19:
         84:a9:48:a8:b6:a5:59:31:07:b7:7a:3a:2d:3f:b2:fa:2f:da:
         84:95:71:9c:34:79:24:c9:47:f1:90:a5:b2:c0:33:6b:8d:67:
         da:5f:97:6f:02:40:b5:cc:89:16:5f:96:24:25:22:b1:4a:b6:
         52:40:12:d9:79:12:14:a5:33:1b:77:55:46:12:86:b4:0a:78:
         cd:43:74:4b:cc:61:6f:5d:e2:6d:20:c7:c1:52:d5:d5:82:7e:
         32:9f:1c:e8:1e:1d:86:71:67:c1:19:29:17:b5:70:87:fe:00:
         04:f5:9a:ec:44:94:3f:68:d3:54:fe:e1:ce:9f:b1:e3:6e:1c:
         c0:3d:85:0d:a3:03:d8:d7:cd:91:5d:ff:39:e4:9f:03:5c:50:
         3e:46:ae:19
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkE1RUFBUjExMC8GA1UEBRMoOTQ3N0YwRTQ3NUE3NDdGOTZDNTYxNjIxNjdGMEMx
NkY5OUM0ODNCQjAeFw0yNjA2MTMwMjU5MzNaFw0yNjA2MTUwMjU5MzNaMBgxFjAU
BgNVBAMTDTZhMmNjNzk1LTJmMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/01UpDwXVwgxZVb8HM2GBZ07M90tx3+8JGi0AZ9S20ibbKdP8uLtVxWxJ
OtMqlB90Gau8QdEdRMNGilnPSd72Ak/rNNYL8LuUTwwfRrnmjJ8RMTKZUhwUabwr
QgrYtOLchEFIO2IDrWNkVNPnej0kI0qQ4DEAOQLJ8NmNjtEkYRaRSurbA73hlXBd
zjzkBQDevNI86Ovc5shsSteBdYKoh6CrtoPhpticDIAEqPGC3iEjb9CZfQaGQlG5
tMJf/GrbGLURXBw5JyUjJMw9QjB4hyJiGy91OlzJVuPToe6I2LCr/vcrgggwlWW6
auXB5Fs4w6vJc89K+4STAO/rTO6DAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUq53K
H0VRL6Ckv4WeAZXKEzTbKo0wHwYDVR0jBBgwFoAUlHfw5HWnR/lsVhYhZ/DBb5nE
g7swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBNUVBLzIwOTg5MzBDMzhCMjExRUQ5MERCMkVEQ0YxMjIyNDY4L2xIZnc1
SFduUl9sc1ZoWWhaX0RCYjVuRWc3cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2xIZnc1SFduUl9sc1ZoWWhaX0RCYjVuRWc3cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RkE1RUEvMjA5ODkzMEMzOEIyMTFFRDkwREIyRURDRjEyMjI0
NjgvbEhmdzVIV25SX2xzVmhZaFpfREJiNW5FZzdzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoMPbf3Nto8l2sp1aEz7wS13AtGzUJlAKx
+LzP7KDybDJ1NGgLUee3FjhXp98Uw2w9SW+oAhlGoG5lMCdzOxxJIPeuUWDxSAS+
V8piu7N6tokyEvRrhIJfQAoHP+OPGvRURNkcvzMg3P97vBmEqUiotqVZMQe3ejot
P7L6L9qElXGcNHkkyUfxkKWywDNrjWfaX5dvAkC1zIkWX5YkJSKxSrZSQBLZeRIU
pTMbd1VGEoa0CnjNQ3RLzGFvXeJtIMfBUtXVgn4ynxzoHh2GcWfBGSkXtXCH/gAE
9ZrsRJQ/aNNU/uHOn7HjbhzAPYUNowPY182RXf855J8DXFA+Rq4Z
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:51 2026 by rpki-client