Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          +CBV7foPb3dZY/SubFbkBQbbsqKxPw4FIOEABaoaTSw=
Subject key identifier:   8F:A4:88:D8:F2:34:1B:38:89:45:BF:8F:2F:11:EA:1F:A4:B0:59:66
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0A28
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0A27
Signing time:             Wed 13 May 2026 01:24:15 +0000
Manifest this update:     Wed 13 May 2026 01:24:15 +0000
Manifest next update:     Fri 15 May 2026 01:24:15 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: negnTsyi0ZiAC1ZiW1WbNWd1EnAkJJ2m8oserjFMtVM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600 (0xa28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: May 13 01:24:15 2026 GMT
            Not After : May 15 01:24:15 2026 GMT
        Subject: CN=6a03d2bf-9976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:69:bb:a0:b7:61:ef:d8:c3:0e:18:56:f3:
                    a3:a8:78:cc:dd:7e:7a:f6:e2:96:7a:51:97:59:3a:
                    bc:3f:59:7f:83:fb:9e:c2:98:1d:9c:fd:79:88:85:
                    d9:60:02:52:95:c7:7c:02:eb:3e:1c:d9:c2:90:3a:
                    38:ef:07:fc:f8:ed:5d:24:84:60:f9:b3:53:c4:b4:
                    f5:bb:0f:1d:77:27:34:18:91:d5:8e:8c:90:24:4d:
                    c2:d9:3e:77:ae:06:0c:27:b1:2c:a1:97:b2:b6:98:
                    87:d8:ff:4d:a4:1e:b1:1e:15:4e:31:c3:f6:b4:cc:
                    aa:b5:5f:bf:1b:b6:f0:26:b1:12:80:ee:dc:8e:d1:
                    8e:7e:85:ab:4f:f5:d8:2d:af:e4:d2:63:de:68:35:
                    ad:7c:77:3a:fe:a6:39:23:e8:2c:50:9f:25:48:80:
                    02:72:e4:6b:30:ce:93:fd:e3:b1:ee:c0:df:e3:8a:
                    ed:16:0b:e6:19:bd:75:56:04:ee:62:90:f6:2b:46:
                    bc:78:9a:01:3d:c8:4b:0d:9a:e9:0b:2e:f0:07:f8:
                    67:47:35:f6:c7:37:c2:dd:11:59:69:8f:4c:d5:84:
                    f3:50:c8:37:13:4d:db:1e:fc:bf:fd:6c:1d:46:46:
                    f1:ae:32:b4:1e:80:cc:83:08:a5:e3:e7:50:70:ac:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:88:D8:F2:34:1B:38:89:45:BF:8F:2F:11:EA:1F:A4:B0:59:66
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:a7:78:d3:62:40:aa:e0:22:0d:ef:3e:48:db:69:fa:94:
         a0:47:2a:33:c3:e0:0b:e5:51:64:5e:1f:9c:21:e0:d6:f3:1c:
         4b:a9:e0:8d:0b:50:bb:47:be:f2:8d:bd:9f:99:ff:e9:09:c8:
         2f:79:43:c0:89:92:36:7f:3d:24:8a:44:bf:a4:be:2f:74:73:
         fb:88:6a:be:78:1f:a4:88:90:b3:8a:33:9c:7b:40:c0:75:f7:
         66:0a:18:e0:1f:0b:7f:05:b3:09:40:ca:9f:ac:54:e2:6b:74:
         28:07:08:c0:08:bb:02:9f:52:85:f3:a3:37:05:83:50:4a:61:
         9c:7b:a9:18:22:92:a9:19:3a:95:14:28:b1:99:cd:20:b3:a4:
         99:77:f4:9f:3b:f8:11:d7:cd:25:fd:af:0b:9a:74:d6:67:ce:
         79:ff:a0:7e:dc:cb:ab:57:3d:c5:42:8b:b7:23:db:4d:86:5a:
         82:75:2a:78:52:51:70:db:6d:0a:1e:2f:a7:06:7f:05:4f:06:
         23:85:a1:38:45:8e:ab:e0:d3:f6:bc:93:be:df:5a:e0:b3:e6:
         24:6b:67:32:c0:f0:9d:09:08:8e:97:dd:1d:d1:5a:74:b6:96:
         1a:e2:e2:1c:df:9b:69:43:15:27:24:3a:0b:95:09:67:6d:8e:
         19:91:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:11:38 2026 by rpki-client