Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          JrmKgdv1RcMGnPRCFhb3mgYxlFKPaH9E21D7BQI2r9M=
Subject key identifier:   2F:29:5D:EB:CE:A9:90:BF:E0:D9:4B:ED:47:7E:4C:2F:90:8A:03:9D
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0E7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0E77
Signing time:             Fri 24 Jul 2026 01:04:04 +0000
Manifest this update:     Fri 24 Jul 2026 01:04:04 +0000
Manifest next update:     Sun 26 Jul 2026 01:04:04 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: 1Mj0++RUjQFGwtX0u24L8alpubruAkYqogPSDlEZ710=)
                          2: B1757762C48911F0B5A12AF6DAE4EC9C.roa (hash: b5Wcnn4AFWyn401Xj8s2haIgucvxNhp1qnKFpV0Gekw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3708 (0xe7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: Jul 24 01:04:04 2026 GMT
            Not After : Jul 26 01:04:04 2026 GMT
        Subject: CN=6a62ba04-5703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:fd:6d:dc:b3:29:04:fc:71:a4:7f:3e:4f:
                    e9:a0:c9:19:e7:3a:a6:c8:c3:29:e6:2a:1b:92:00:
                    c2:44:d7:40:7e:8e:0a:ae:b0:12:69:14:78:b7:84:
                    7e:7b:ec:52:fc:35:b4:6e:cd:b3:91:33:6b:6b:a5:
                    e8:43:10:5b:36:04:8a:25:77:60:f0:6e:78:dc:c8:
                    3e:67:89:97:03:c8:65:ff:12:8c:f0:19:df:22:36:
                    c8:bf:47:06:c4:ff:e3:43:14:28:bf:23:82:70:28:
                    9f:98:53:f4:d2:31:fc:8c:7f:c7:d2:b0:21:f0:f1:
                    68:47:21:5e:5b:54:db:0b:3e:e5:4d:cb:df:54:ee:
                    36:8a:98:b6:14:8c:fa:dc:21:89:1e:26:a5:29:1c:
                    1b:59:7d:bf:bd:34:22:5f:4d:9d:09:3a:df:ac:af:
                    d7:19:6f:23:46:c6:60:38:a3:85:a0:e4:a9:f3:d1:
                    eb:fb:37:be:63:c3:7e:06:e9:7d:7f:b2:63:ed:5f:
                    39:46:01:3c:ea:35:67:34:f8:0b:7b:b4:37:54:f7:
                    56:15:a7:82:0a:14:66:e1:f4:13:27:2f:0c:d1:e1:
                    91:c6:31:7c:e1:68:5d:e3:e9:06:65:97:1f:cb:b5:
                    7e:eb:23:d7:3d:79:da:ed:b3:e0:ea:05:e6:38:ae:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:29:5D:EB:CE:A9:90:BF:E0:D9:4B:ED:47:7E:4C:2F:90:8A:03:9D
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:22:e0:07:6d:d2:3d:64:31:37:b1:70:f8:96:e2:80:1d:
         b4:c5:9c:cd:e8:09:40:b4:f8:4d:de:0e:a8:04:34:c4:1e:79:
         85:35:22:4d:5b:b3:6c:43:3a:3b:eb:f2:88:51:0a:01:f0:fb:
         ec:4a:07:64:cb:a2:a2:5f:e9:69:e9:cb:a6:26:f8:01:6c:30:
         c3:c8:10:28:95:cc:59:19:08:a3:88:c5:ee:81:bd:87:7f:2c:
         fc:61:13:80:79:92:59:8f:98:ad:42:20:05:2b:0e:3f:48:bd:
         d6:ca:22:9f:61:f5:e5:4c:26:45:c3:2c:4e:cc:03:ba:1a:d4:
         33:e8:ff:c1:57:d7:7e:78:61:d7:99:ca:42:b0:71:dc:84:d7:
         e8:50:9b:69:0c:23:f6:c9:87:20:74:d9:73:e7:56:ae:72:15:
         75:54:95:6d:37:09:d2:dc:e7:b5:ff:f7:f3:a2:17:20:ad:44:
         2d:ff:ff:e4:02:60:26:28:ef:1d:13:88:d6:9e:29:4c:79:75:
         4c:8f:0e:c1:98:f8:33:6f:8c:f0:7f:ca:d9:3a:f0:d4:bd:93:
         de:4a:c9:75:53:7b:8a:98:e0:4c:91:4b:0e:51:6a:9e:4a:ad:
         de:6d:32:9a:eb:ba:2e:bc:83:f5:0a:36:75:de:65:7d:e1:ac:
         8f:ca:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:18:35 2026 by rpki-client