Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
File:                     HjBtERG9MU9g94_Cmxf7xqsItYk.mft (raw, json)
Hash identifier:          1+u9xrUFSRuv2Id6IHvtVNZuTauHk8AH9SGoDDL0ap0=
Subject key identifier:   90:BC:52:62:27:50:F0:44:A6:86:40:17:4F:63:B2:21:14:7E:85:29
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Certificate issuer:       /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial:       F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
Manifest number:          F3
Signing time:             Sat 26 Sep 2026 05:25:24 +0000
Manifest this update:     Sat 26 Sep 2026 05:25:24 +0000
Manifest next update:     Mon 28 Sep 2026 05:25:24 +0000
Files and hashes:         1: HjBtERG9MU9g94_Cmxf7xqsItYk.crl (hash: MrKqbFjXErhLYqIeNvMoLr+hnO30Ir+T7SyOKm+8CmI=)
                          2: AE231146010611F1AF8CD7E0DAE4EC9C.roa (hash: yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 05:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
        Validity
            Not Before: Sep 26 05:25:24 2026 GMT
            Not After : Sep 28 05:25:24 2026 GMT
        Subject: CN=6ab75744-9979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:69:63:81:fa:b5:f0:a6:db:33:e5:36:b6:
                    82:c1:43:cf:6d:35:97:12:0b:71:a3:33:97:63:17:
                    3f:25:94:1f:69:84:b8:03:bb:d5:40:2e:c3:59:77:
                    09:92:42:e3:c2:0f:97:60:84:90:a5:f9:5e:f6:e3:
                    dc:13:39:d4:ea:ee:b6:f5:d5:f0:c9:1d:54:45:f2:
                    eb:45:a8:58:ce:26:48:81:9e:66:ce:40:6e:40:ca:
                    8a:0d:99:61:62:05:3b:e7:e3:3b:e0:1c:20:10:1d:
                    21:8e:b9:e7:1b:be:25:de:01:a9:f5:f0:69:3e:bc:
                    bb:58:8b:41:e1:1f:5c:57:cf:c7:4e:98:41:0c:64:
                    83:5b:17:aa:51:5d:9a:74:93:9d:80:95:3e:a4:c3:
                    d4:4e:b6:e1:40:40:58:c2:1d:33:c1:99:b4:52:d8:
                    e5:c9:99:24:2a:22:27:00:2d:08:c3:e4:0c:3c:d0:
                    b9:a0:09:95:09:3e:40:76:c8:1d:c6:4c:d0:10:5a:
                    b3:85:7b:5d:20:ca:7a:64:b6:69:37:d6:36:e3:79:
                    9a:a8:77:2e:70:9f:5d:ca:a6:40:2c:be:78:f0:50:
                    71:0b:03:58:8e:e0:35:1c:af:f2:36:a4:c2:32:e7:
                    88:e5:3b:a7:44:9f:a9:a2:b0:4e:26:95:57:78:28:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:52:62:27:50:F0:44:A6:86:40:17:4F:63:B2:21:14:7E:85:29
            X509v3 Authority Key Identifier:
                keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:4f:d3:3b:c4:c4:1a:49:e3:9b:3f:b7:b7:56:3a:7c:04:
         6b:d7:57:e2:59:ab:2a:cf:23:6c:70:6f:0b:52:d8:96:4e:0f:
         53:b6:e2:e0:3c:11:49:e6:9d:30:9e:6c:d2:45:eb:fa:ab:fc:
         df:b8:e0:ce:b7:e7:96:e9:86:a2:ab:62:c9:2b:db:29:9c:21:
         d9:e0:50:1e:e3:fe:0e:d3:4e:d3:13:0f:ac:20:75:bd:01:fa:
         7a:5a:c3:ce:db:2f:fa:4a:d4:44:bd:7c:aa:35:ba:43:fc:85:
         ff:6d:ff:fb:80:e2:67:c5:de:14:d7:f3:00:9a:db:58:bb:6f:
         2c:52:33:22:87:22:b7:54:99:fc:8f:f8:25:28:33:13:f6:a1:
         7a:7b:e4:ce:e9:c6:68:29:39:3b:3a:e2:c3:2c:42:5c:fa:b5:
         c3:8a:43:86:3f:8f:a7:1e:53:7a:12:11:a7:a0:51:e7:2b:84:
         24:ee:6b:01:10:09:fe:5e:70:d3:4a:cf:55:34:09:35:42:6a:
         48:ad:3f:0b:69:af:8f:91:44:54:5e:1e:5d:fc:0b:53:6c:be:
         c7:64:36:d3:e9:be:85:18:14:c4:4c:ce:6a:a0:7b:55:47:27:
         05:38:cd:77:4b:be:60:43:1c:d1:a4:7c:4c:1d:a5:f1:4d:01:
         73:72:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----