Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          4Zb3xz9aqBpvhkhlow9BLPi4jc+P4fYAvb2RNxkbB0E=
Subject key identifier:   34:15:43:2C:70:2B:39:E3:5E:F2:A7:19:5A:27:30:9D:47:E7:70:0B
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0A0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0A0A
Signing time:             Wed 13 May 2026 01:29:58 +0000
Manifest this update:     Wed 13 May 2026 01:29:58 +0000
Manifest next update:     Fri 15 May 2026 01:29:58 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: 89IPesau0I0sH0WY1EDNKvWFVcM3QE5b/EfsgC+PKF4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570 (0xa0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: May 13 01:29:58 2026 GMT
            Not After : May 15 01:29:58 2026 GMT
        Subject: CN=6a03d416-e8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:16:d7:51:5e:de:04:82:be:d0:fa:fc:92:
                    29:c1:56:63:86:cc:3f:da:32:34:0c:25:57:7a:d5:
                    54:b4:87:39:d5:60:a6:f4:c2:6b:30:6f:b3:d6:2c:
                    51:cc:85:a5:63:d9:a2:ad:cb:25:db:cd:85:70:21:
                    e8:77:26:ef:bc:18:82:cd:7f:ff:65:70:10:4f:e1:
                    fa:34:c4:74:2e:4a:62:2d:be:9a:18:bd:da:d4:55:
                    ff:2c:ad:13:72:d1:bb:70:40:d3:60:07:2c:0b:24:
                    72:9d:19:4c:d5:62:cd:81:5c:4d:f1:c2:e3:74:b4:
                    5d:45:c2:a9:16:a9:f0:f2:e9:bb:89:71:10:c6:22:
                    25:15:a4:dd:a1:f5:6f:92:a0:90:7b:1a:6b:19:32:
                    c9:4a:8c:44:c9:f9:6b:f7:75:d0:6f:19:84:7e:fa:
                    db:2a:8e:85:84:9e:92:97:97:9c:b4:e3:bf:ed:7b:
                    f9:a2:26:85:8b:cc:24:e5:b1:f5:42:ea:ca:6b:fd:
                    0f:6b:f2:4c:61:3c:44:7c:31:65:27:05:68:f7:2f:
                    cb:ba:cd:c4:2e:1a:b0:09:0f:28:cf:6e:84:07:7f:
                    5c:ed:3e:3d:55:7c:1f:b8:aa:fd:bb:57:5c:c0:ef:
                    d5:96:9d:15:1d:7c:0c:00:f5:8b:35:7f:db:f6:8f:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:15:43:2C:70:2B:39:E3:5E:F2:A7:19:5A:27:30:9D:47:E7:70:0B
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:df:ff:fc:c7:9e:7f:4f:15:bd:12:d7:72:82:85:bf:e1:ff:
         14:f9:83:db:54:52:de:57:78:ad:23:ce:e4:5f:d2:cf:9f:5e:
         b6:fe:18:9c:cc:a6:28:ba:9d:0e:eb:ef:2b:48:d6:0c:97:f8:
         f7:10:ce:5b:ee:9f:71:d6:36:d1:b1:3c:06:d4:1f:6a:a0:97:
         1d:3c:74:2f:74:58:43:7d:26:79:7c:3c:b6:91:dd:b9:d2:c9:
         57:ae:0e:80:11:eb:94:ef:c2:a6:1e:35:7b:e2:74:49:4f:78:
         6f:14:91:b6:24:e2:29:59:51:4a:f5:62:90:a5:fa:27:3e:c5:
         91:d1:a9:40:a6:78:76:af:23:08:d6:27:b5:f2:f9:32:28:5a:
         80:53:49:7a:7e:4f:20:94:66:03:2f:ad:a2:48:cf:cd:10:a5:
         f2:c2:7e:55:08:f7:33:4c:90:65:67:e2:8e:e2:21:6f:e2:78:
         33:3b:39:41:e9:b3:fb:a2:58:69:ac:3b:d1:1c:f2:0f:65:5d:
         49:ef:4b:84:cf:a6:e7:80:da:3d:bd:d1:68:da:ef:c4:b2:4c:
         bd:77:71:f1:d2:ee:fe:0a:0f:d1:0e:32:81:22:50:7b:f5:ff:
         6f:3c:80:c1:35:a9:24:48:3a:89:d2:b0:b5:44:48:9f:62:75:
         90:38:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:36 2026 by rpki-client