Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
File:                     -HlTHl-cqfSLcTODpQCBDVDy0kQ.mft (raw, json)
Hash identifier:          h3z6Tv8aZQDiAjLyVAfSN2sl+VPsTd2yj2Toc2iX5iI=
Subject key identifier:   F8:A3:4E:40:E5:8A:CB:0A:1D:F1:82:33:1E:6E:DE:EF:0A:F9:C8:74
Authority key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
Certificate issuer:       /CN=F361950AAF/serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Certificate serial:       0129
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
Manifest number:          0127
Signing time:             Thu 26 Mar 2026 05:55:21 +0000
Manifest this update:     Thu 26 Mar 2026 05:55:21 +0000
Manifest next update:     Sat 28 Mar 2026 05:55:21 +0000
Files and hashes:         1: -HlTHl-cqfSLcTODpQCBDVDy0kQ.crl (hash: r/vq5i42N/pZbOmheeUj3eVdmCv70SEcXg5cMKHKMAk=)
                          2: 7B6F3054478411F0B371B7DADAE4EC9C.roa (hash: w5E8JBOJdrFnCHufU8YUVNcTyXQmMdg4vF0OTc1n9B4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
        Validity
            Not Before: Mar 26 05:55:21 2026 GMT
            Not After : Mar 28 05:55:21 2026 GMT
        Subject: CN=69c4ca49-8c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:34:73:4a:e1:bf:1b:79:ca:72:88:44:6c:
                    d7:ea:cf:f2:cb:fb:e5:3b:73:79:7f:c1:53:1b:a1:
                    9f:ff:64:6a:80:a6:f3:01:31:fc:df:d4:c0:05:b0:
                    9b:8d:6d:4d:b7:58:2c:f0:d5:8e:bd:20:aa:e6:e4:
                    67:1b:5d:de:14:d1:0d:81:c6:a9:69:eb:e3:11:97:
                    10:ee:d2:09:18:2a:71:c0:db:9c:f4:8b:22:0c:78:
                    14:b2:50:4a:5a:bc:29:06:12:a4:59:66:d1:fa:90:
                    ce:af:0b:77:78:4c:c0:70:8e:13:20:c9:83:0b:a3:
                    bf:95:5d:fa:18:56:ac:84:dc:3d:d4:d2:fc:0e:9f:
                    f8:58:6e:9d:5e:a4:c4:b2:42:aa:c3:32:9a:f6:ed:
                    e8:92:83:bc:de:a3:5b:cf:5a:9e:a5:3c:70:46:d3:
                    e6:1b:dd:53:ca:04:89:34:3f:dd:18:3e:06:51:4e:
                    78:9d:58:b2:48:b3:de:aa:27:3a:88:d9:c3:32:3e:
                    21:26:e2:e7:6d:72:24:7b:6a:c8:c0:6d:56:f0:32:
                    8a:16:8d:9e:3c:42:63:e9:47:df:46:61:b3:e5:c5:
                    00:b4:1b:47:9a:9f:b5:b8:e5:93:12:69:09:fb:a6:
                    74:6d:b2:97:96:a4:03:07:42:51:d7:25:c8:99:9f:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A3:4E:40:E5:8A:CB:0A:1D:F1:82:33:1E:6E:DE:EF:0A:F9:C8:74
            X509v3 Authority Key Identifier:
                keyid:F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:be:d5:bc:75:dd:07:f8:f3:f0:a1:dd:e2:33:5c:d8:ed:aa:
         e5:06:98:d4:32:11:ca:bd:c9:91:67:90:b4:e2:8f:02:5e:20:
         d7:ef:6e:bf:6c:58:18:ab:8f:48:92:8a:ef:fd:3e:0d:3c:5d:
         11:8a:da:12:28:c7:ea:5c:8d:46:6b:8c:73:8b:c6:3f:d0:bf:
         01:33:1f:f8:6a:be:c1:f9:19:da:b3:66:dd:8d:5a:e3:fa:6e:
         00:0b:88:a6:04:01:97:85:96:7b:0d:60:71:61:05:21:22:e0:
         69:77:a6:1d:2d:27:5e:12:56:01:44:2f:69:f1:53:86:24:df:
         5f:e2:a7:fb:8e:a9:ed:c2:ba:95:5b:5e:f3:c2:8c:0c:50:09:
         22:f8:91:c8:43:bd:43:90:24:95:d9:6c:58:00:c8:7b:5d:00:
         dd:ec:86:e1:1a:29:54:79:9c:e8:84:72:26:ab:21:1f:4b:6a:
         c8:ce:bf:6c:45:13:91:57:11:3d:4e:99:7f:fd:2f:2c:a4:d2:
         32:86:6e:56:c2:1f:55:8f:0f:af:33:72:78:a7:c3:1d:67:27:
         f2:03:aa:cc:bc:b9:91:43:d5:81:2b:ab:12:77:ff:f2:ad:94:
         a4:bf:2a:47:4e:cb:ff:d7:67:56:ca:8d:a9:a3:e5:c9:b4:d0:
         7d:52:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:14 2026 by rpki-client