Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          ik8AVpYlB+ULnd7qTxP3N4shmd9iOhy4wfRpj9s0fEw=
Subject key identifier:   F3:B3:94:D3:CB:A5:46:4D:29:2C:58:4A:2F:F9:AB:32:B5:C5:A0:19
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0A52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0A52
Signing time:             Fri 24 Jul 2026 01:30:50 +0000
Manifest this update:     Fri 24 Jul 2026 01:30:50 +0000
Manifest next update:     Sun 26 Jul 2026 01:30:50 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: CmMj/ED9f3mRXgv/ghhsr4VSmerG/BR+lC4dej70y6Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642 (0xa52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Jul 24 01:30:50 2026 GMT
            Not After : Jul 26 01:30:50 2026 GMT
        Subject: CN=6a62c04a-0522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:dd:ab:4c:68:12:d1:4c:c3:36:59:01:70:
                    50:49:08:26:5e:3f:d5:1f:6d:e7:cb:80:73:dd:22:
                    3a:2d:a3:f6:92:0f:9c:08:f6:79:2a:77:42:ed:6b:
                    06:b4:69:ba:5c:61:aa:ac:62:f4:09:be:be:fb:ba:
                    1d:38:6d:bf:67:00:9d:f0:8d:9f:a0:70:b4:40:57:
                    45:7b:ee:c8:f7:46:3c:1e:00:1f:db:33:9d:f9:95:
                    8e:62:e0:4a:fc:ec:6f:84:65:8b:89:fe:78:e4:51:
                    15:48:51:c8:aa:f0:d8:51:99:81:90:48:9b:c8:06:
                    00:38:d6:38:97:70:6c:b1:b0:be:c6:d5:e5:f0:7d:
                    47:18:90:62:a6:a8:2b:75:d7:11:96:3b:b7:24:df:
                    a7:34:64:a4:54:3f:83:fa:18:67:6a:4f:35:12:8c:
                    9c:9b:bb:b3:11:f5:f9:44:27:fc:ac:1d:84:d2:48:
                    cf:68:98:36:0a:bc:98:da:d8:00:6e:06:f7:67:40:
                    2e:8a:51:07:7d:c8:7f:55:a1:c4:f4:17:ba:ab:82:
                    93:85:ee:2f:d6:f8:ee:da:17:15:a8:c7:58:ff:d5:
                    49:5c:57:c7:c9:38:74:17:54:9e:1b:74:2d:b0:cb:
                    e8:70:c3:27:fa:41:bd:72:d6:8c:03:15:d1:e5:92:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B3:94:D3:CB:A5:46:4D:29:2C:58:4A:2F:F9:AB:32:B5:C5:A0:19
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7e:9d:67:6e:e6:49:8f:c8:a7:35:e6:9d:b8:60:0e:36:c8:
         5a:5a:ad:d8:c4:22:a1:d5:89:d7:8d:08:3e:c0:92:f8:05:4e:
         75:02:ae:84:51:12:90:4b:d9:71:eb:a5:82:19:ca:1a:95:7f:
         31:fa:d0:6f:d3:52:3d:39:c5:1e:ec:58:28:d5:0f:06:fe:cd:
         f7:25:9e:4b:66:4e:66:aa:3a:8a:bb:d5:3c:c6:53:f7:65:e9:
         ed:3e:8c:51:6c:51:13:f4:fc:6d:b3:61:72:68:92:85:4a:ce:
         d0:00:f7:72:a2:8a:df:98:92:95:a0:a5:07:66:92:eb:83:ab:
         69:c3:49:5d:41:08:4c:3c:a8:c8:e8:51:e2:c0:73:05:5d:e3:
         1d:5a:d2:08:97:01:d5:b6:30:ec:3b:ca:ff:37:b1:13:90:7a:
         5d:94:4f:fb:a2:01:63:75:26:aa:03:04:9b:b5:3c:a7:88:ea:
         d3:2d:6c:9f:ff:b9:91:97:16:fb:44:8a:28:8c:75:0f:d3:ca:
         96:30:54:ea:74:a7:7f:33:84:b6:f6:5c:96:2b:35:1a:02:0f:
         14:6b:8d:3c:d1:59:b7:a2:6f:bf:30:f9:4d:94:29:ef:e1:1d:
         3b:a8:74:6c:d1:8b:83:b5:31:66:14:cf:b4:87:31:ce:cf:90:
         57:4a:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:08 2026 by rpki-client