Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
File:                     HzhXx5DQI1940ThbDraTCwjzqOc.mft (raw, json)
Hash identifier:          BhjaWYSMn98ZpIuP2oq42yt07l5INFxComWKRihjxkI=
Subject key identifier:   36:5A:65:B1:C6:61:91:25:D6:0B:4E:20:77:5A:04:21:A4:FB:C9:68
Authority key identifier: 1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7
Certificate issuer:       /CN=F365D714AF/serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
Certificate serial:       3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
Manifest number:          3C
Signing time:             Wed 13 May 2026 05:33:15 +0000
Manifest this update:     Wed 13 May 2026 05:33:15 +0000
Manifest next update:     Fri 15 May 2026 05:33:15 +0000
Files and hashes:         1: HzhXx5DQI1940ThbDraTCwjzqOc.crl (hash: BoTXqz7jqNsg516z7DBQCSD1E1pAmniJ9gPmtJ1E+AI=)
                          2: 8F463D3227AF11F1930A44A7DAE4EC9C.roa (hash: olApEm5VDBpoyz8XFSGTWF+ZGrgDV6oxvgIY+GR8RDU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365D714AF, serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
        Validity
            Not Before: May 13 05:33:15 2026 GMT
            Not After : May 15 05:33:15 2026 GMT
        Subject: CN=6a040d1b-18f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:a5:c2:11:17:d0:6a:49:97:13:01:38:6b:
                    e0:40:cb:0f:6a:ef:96:54:b4:ae:db:f3:db:5b:16:
                    3b:de:51:9d:0c:17:e3:e9:38:37:15:74:0c:57:11:
                    b2:0a:f4:53:b9:22:29:71:a9:21:04:f5:2d:ac:2b:
                    b0:2c:d6:35:41:84:e5:5d:c3:70:ee:e0:05:95:d9:
                    a7:6f:b8:4f:8a:f8:14:22:dd:96:79:4c:b1:83:24:
                    90:24:f0:06:02:e4:cc:85:61:99:e8:c8:cc:1b:06:
                    81:11:e3:33:b7:55:b2:73:88:6d:c0:9b:95:40:f4:
                    5d:0f:1b:ac:0a:81:48:cf:48:0d:4c:37:bc:8f:aa:
                    37:05:f7:ca:81:f8:20:e6:f3:67:0a:13:25:7e:2f:
                    a4:f3:c9:a7:f4:8a:f7:ba:8c:b1:83:7c:5d:02:71:
                    29:81:00:bc:37:21:8f:49:dd:13:4c:8d:7d:58:e9:
                    62:e6:57:c1:4f:8a:aa:4b:c2:88:cc:28:49:b5:21:
                    17:97:cd:c0:94:a2:8f:24:6d:87:86:4e:67:1f:f3:
                    06:36:d7:da:61:db:fd:cb:81:5e:8d:de:8e:b5:dd:
                    13:f9:c3:a5:10:2c:87:32:69:7c:27:35:b1:34:09:
                    67:8b:5d:98:06:c7:ec:b1:1b:6b:a2:b6:95:3c:d5:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5A:65:B1:C6:61:91:25:D6:0B:4E:20:77:5A:04:21:A4:FB:C9:68
            X509v3 Authority Key Identifier:
                keyid:1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:47:6a:22:58:d9:e6:24:49:8c:b6:c5:1a:e4:7b:1f:be:
         8d:30:f3:68:84:f2:dd:78:3d:c2:e9:f9:9b:bc:0e:29:85:7a:
         3f:e0:48:93:f9:b8:19:49:a5:2e:ec:41:7e:d0:f6:39:ef:30:
         86:99:d0:30:ef:8b:43:17:56:b2:52:88:ff:4f:29:bc:f4:b7:
         6a:87:40:fe:c5:b7:c3:8a:f7:67:21:dd:b4:4f:15:ca:81:72:
         ad:16:c7:cf:cc:ad:b4:72:7b:01:5c:78:f6:20:84:07:8e:0e:
         2f:ef:3d:c7:4b:8d:9d:9d:a6:c8:21:7d:94:25:84:b9:69:d1:
         9a:38:92:4e:07:90:fb:97:32:4f:23:93:00:41:ab:ae:b6:99:
         d3:5a:fc:14:f2:a2:06:0e:12:d7:c6:c3:ae:e4:2b:8c:37:99:
         11:13:f2:c0:98:4f:37:aa:c4:e6:d9:47:b4:69:02:7b:1c:27:
         ee:7a:33:c2:be:af:ce:fc:30:fa:75:04:cd:2a:92:c8:5f:a8:
         d9:90:98:b8:cf:2c:e4:82:2f:11:99:cc:52:b4:f3:db:4d:8d:
         d8:ec:cf:45:fb:1b:33:c4:46:94:75:d8:cf:42:69:2e:28:3a:
         a6:ee:b1:f9:9e:ea:e2:79:72:72:40:47:10:80:43:56:96:91:
         b0:35:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:34 2026 by rpki-client