Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
File:                     HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft (raw, json)
Hash identifier:          xYc8QUaZMOPYbnnHyymS3w9EN+vcj7RceFKv04hHKvc=
Subject key identifier:   28:89:82:11:C6:59:92:F7:0C:A1:69:B2:DE:CB:99:F0:27:AF:8B:FD
Authority key identifier: 1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3
Certificate issuer:       /CN=F366BE85AR/serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
Certificate serial:       01BD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
Manifest number:          01BC
Signing time:             Thu 26 Mar 2026 05:40:19 +0000
Manifest this update:     Thu 26 Mar 2026 05:40:18 +0000
Manifest next update:     Sat 28 Mar 2026 05:40:18 +0000
Files and hashes:         1: HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl (hash: ffKxUS+jBS15FLBNf81aUUfTTGiOG882tSwdrWoXDBw=)
                          2: 7C21AA3ED29211EF86EA9485762E951A.roa (hash: 4sdnJ8RVycpCPlFVArT/uPl+lKxeM/KiQs7ThnHwqEM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                          rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AR, serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
        Validity
            Not Before: Mar 26 05:40:18 2026 GMT
            Not After : Mar 28 05:40:18 2026 GMT
        Subject: CN=69c4c6c3-0d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:a7:72:b6:b5:77:fe:22:fa:15:ca:6b:9c:
                    eb:ca:08:1c:26:c0:c9:91:d3:31:47:70:90:81:71:
                    2d:09:f5:7d:bf:f0:cb:5b:dd:7e:4b:9e:e0:15:b2:
                    4e:cc:a3:92:5b:15:94:be:f7:f0:66:94:fa:ee:f0:
                    4c:8f:be:52:4f:93:40:8e:8d:fb:f8:7e:5d:02:83:
                    da:83:86:66:aa:25:f3:1e:ab:90:9e:16:7b:de:b8:
                    8e:2d:fb:47:5a:96:ca:1f:22:0c:0d:25:65:60:ab:
                    12:00:04:de:41:ba:05:b3:97:e7:a2:77:a3:3f:da:
                    d7:0e:3a:1a:88:50:30:0f:e7:9f:dd:d2:9c:5e:cc:
                    19:d6:e1:96:dd:60:8d:c8:43:0b:3b:10:2c:6b:e0:
                    9a:b0:d6:a5:a9:5f:dd:fb:38:20:fc:18:6c:c0:27:
                    81:22:f4:fc:aa:30:c5:c1:c7:34:75:85:d5:41:33:
                    20:bc:56:2f:4d:0e:05:6b:b0:3b:99:6f:ba:26:12:
                    da:dd:09:0f:9b:5a:52:b2:54:f0:69:53:33:d3:04:
                    e4:67:92:16:f4:86:58:e9:a8:8c:29:a3:12:7a:f4:
                    9b:03:12:1e:eb:b7:49:0a:95:2d:7d:ea:67:da:aa:
                    0f:4c:11:82:06:db:89:06:28:76:e4:c5:f7:f4:e1:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:89:82:11:C6:59:92:F7:0C:A1:69:B2:DE:CB:99:F0:27:AF:8B:FD
            X509v3 Authority Key Identifier:
                keyid:1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:1e:33:92:5c:9c:1e:af:00:a9:17:bf:1d:2a:b2:f2:3b:
         73:82:33:ef:96:57:1c:04:88:63:53:41:bb:4f:a3:26:fa:09:
         de:77:07:44:95:ce:39:d2:96:79:be:af:5d:f6:ca:b0:30:7b:
         97:40:26:ce:56:58:2b:7d:84:f0:76:50:16:86:07:73:6f:f5:
         c0:6d:41:db:3c:97:b1:61:c1:de:d5:9b:f9:8e:a6:d0:80:c4:
         74:68:c7:3e:0e:28:86:c3:ac:b6:66:5b:79:be:f0:72:99:c2:
         0a:02:8d:73:f3:05:80:9b:87:1d:a5:a6:69:6f:0f:8a:9a:e3:
         87:c5:6f:1b:4b:65:c9:10:9f:38:68:b5:f6:5c:23:a1:14:d0:
         fa:d7:61:17:1c:1a:c9:b5:ec:f3:75:e3:d5:05:91:ff:39:db:
         f7:03:6a:27:80:25:14:ec:f7:bd:74:8f:e4:2c:c9:52:95:92:
         5c:2e:37:98:a0:1f:eb:63:1e:9e:88:b0:c3:35:32:e9:f6:11:
         4d:9b:5d:5c:5f:36:e1:4a:8d:72:fa:bc:b4:6d:f5:11:5a:eb:
         79:8c:a6:5b:7c:20:5f:f0:05:4f:03:01:33:28:3e:cb:6d:cf:
         55:37:ea:a6:3d:d1:65:ca:fc:c1:65:5c:7e:d5:75:56:4b:a4:
         f1:00:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:25 2026 by rpki-client