Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
File:                     hwgWtRD7iV6er3KRBGiulqGHPlw.mft (raw, json)
Hash identifier:          7h7Gff7PfW0T098f39DULLBXMbVXD4vctrufIt0gGiQ=
Subject key identifier:   CA:6F:32:BF:73:66:4F:5C:92:EF:7C:CE:5C:63:73:45:D1:4C:32:DA
Authority key identifier: 87:08:16:B5:10:FB:89:5E:9E:AF:72:91:04:68:AE:96:A1:87:3E:5C
Certificate issuer:       /CN=F3616990AF/serialNumber=870816B510FB895E9EAF72910468AE96A1873E5C
Certificate serial:       66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
Manifest number:          65
Signing time:             Fri 24 Jul 2026 05:34:21 +0000
Manifest this update:     Fri 24 Jul 2026 05:34:20 +0000
Manifest next update:     Sun 26 Jul 2026 05:34:20 +0000
Files and hashes:         1: hwgWtRD7iV6er3KRBGiulqGHPlw.crl (hash: 56lId6F/sVugwLlxfLKGigc7mG9bxdZzRPgr9kONRl0=)
                          2: FAA05D2C492611F1AC4697B3CE1D38B0.roa (hash: xorOWYvfQgtYLkV5YjCLsFPmuKoApGkVbCKmg4lfAUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616990AF, serialNumber=870816B510FB895E9EAF72910468AE96A1873E5C
        Validity
            Not Before: Jul 24 05:34:20 2026 GMT
            Not After : Jul 26 05:34:20 2026 GMT
        Subject: CN=6a62f95d-5545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:be:b9:81:06:81:82:a3:a8:eb:52:af:b0:
                    85:d6:b0:ef:09:0c:99:9d:03:95:4f:86:a2:05:e7:
                    0b:91:32:8c:eb:88:b9:bb:ff:80:09:b2:af:be:89:
                    38:ec:fe:a8:10:b0:b4:c6:45:37:78:b3:20:2b:50:
                    8e:28:12:ff:50:98:9c:98:75:29:72:12:e5:8d:b7:
                    91:bc:f7:75:fa:52:3c:d7:d7:23:88:77:03:e4:83:
                    c0:9b:1f:9b:18:67:a3:df:6a:d7:8c:0f:0d:33:63:
                    ab:88:4e:18:53:97:9c:06:a6:59:ef:d4:7b:ab:dc:
                    3d:04:42:69:d2:c2:18:dc:53:9f:9c:04:56:fc:20:
                    19:ff:24:71:85:cb:71:a1:d4:ef:95:c5:d4:9f:fb:
                    df:da:b9:8c:0a:a2:df:bb:1c:55:69:3c:02:0b:f6:
                    26:7b:d4:0e:1f:45:79:a9:38:91:c1:ca:d1:39:0a:
                    84:ad:1b:11:c0:01:8f:a7:ed:44:8c:79:ae:ad:84:
                    03:91:af:e5:8e:bd:85:bd:e6:f0:95:0d:53:7b:c5:
                    d9:3f:c1:70:3b:ee:3f:40:f8:a7:9f:02:a3:60:6a:
                    38:ec:6d:4a:a0:ca:74:b7:b8:6b:16:1b:b3:5d:e3:
                    a2:b5:6d:72:60:39:75:4c:35:f0:1c:8d:b6:be:6c:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6F:32:BF:73:66:4F:5C:92:EF:7C:CE:5C:63:73:45:D1:4C:32:DA
            X509v3 Authority Key Identifier:
                keyid:87:08:16:B5:10:FB:89:5E:9E:AF:72:91:04:68:AE:96:A1:87:3E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwgWtRD7iV6er3KRBGiulqGHPlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616990/A93E89803A7711F19B381905CF1D38B0/hwgWtRD7iV6er3KRBGiulqGHPlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:81:f1:d5:a4:25:1a:da:41:71:3d:c0:81:f7:03:d1:f7:
         01:f5:a9:e7:9f:08:f8:f0:67:00:54:0b:f3:51:f7:bf:ed:70:
         45:ce:a3:eb:f2:53:70:23:b2:c7:21:b2:21:0e:0f:a4:09:31:
         76:6f:f3:73:02:53:27:35:10:1d:0a:b6:ff:06:1a:aa:7c:a0:
         7d:a2:b9:02:17:84:68:45:7c:3f:bc:2b:ed:47:d0:a1:44:a6:
         40:30:48:76:32:bf:a0:c4:bd:ff:81:cd:f7:f7:e3:0b:8c:f9:
         5c:a0:cb:df:fe:e6:84:a1:23:88:1b:76:39:6d:74:33:bd:49:
         71:8f:17:4f:f5:10:0e:fa:6a:eb:ed:c5:8d:31:66:75:e4:2b:
         f7:63:7e:48:48:61:d8:d8:bc:b3:7d:e6:e3:ed:a7:9b:b4:87:
         6f:cf:6f:22:1c:b3:e4:79:36:aa:25:dd:55:97:1e:f7:9d:41:
         c1:65:69:de:44:a0:c1:6a:c8:56:89:37:12:45:8c:6d:31:73:
         59:10:25:8d:f3:7f:d5:74:7d:72:96:d6:1b:c8:0e:27:7c:a4:
         ed:a2:25:95:92:de:b2:37:47:34:e6:e2:56:a1:ca:9b:49:b5:
         ef:fe:68:02:ee:6f:41:1f:ac:3d:fa:ea:4f:cf:8c:aa:70:7f:
         8b:df:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:20 2026 by rpki-client