Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
File:                     HjBtERG9MU9g94_Cmxf7xqsItYk.mft (raw, json)
Hash identifier:          pE21RQqdaRvfurgChlEV4UNyvD9WEJedA32ti2U63E8=
Subject key identifier:   C7:FF:9A:9B:50:1A:61:A0:BC:61:ED:C7:BC:5D:BF:F3:39:2F:81:57
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Certificate issuer:       /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial:       B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
Manifest number:          B3
Signing time:             Fri 24 Jul 2026 05:25:34 +0000
Manifest this update:     Fri 24 Jul 2026 05:25:33 +0000
Manifest next update:     Sun 26 Jul 2026 05:25:33 +0000
Files and hashes:         1: HjBtERG9MU9g94_Cmxf7xqsItYk.crl (hash: hh5g1HgImkrcMy6abNiXjztEkZ9x9FkGOOrOQNNxBFg=)
                          2: AE231146010611F1AF8CD7E0DAE4EC9C.roa (hash: yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
        Validity
            Not Before: Jul 24 05:25:33 2026 GMT
            Not After : Jul 26 05:25:33 2026 GMT
        Subject: CN=6a62f74e-463f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:81:fa:76:1c:95:1d:e3:95:65:cd:2f:2e:
                    d8:48:b8:0d:0b:11:8e:58:96:53:f3:7e:ce:88:65:
                    91:82:0e:3d:f6:f1:76:89:e6:f1:de:d2:93:a0:0d:
                    99:c3:6b:e2:bd:40:eb:c8:5d:be:2d:c3:5c:2f:37:
                    c9:a7:c2:87:1f:a1:7f:66:9d:07:44:df:7b:5d:1d:
                    ba:fd:0b:35:ad:73:ad:24:c4:c0:04:20:b1:4c:72:
                    07:10:eb:70:90:d2:6e:9c:2b:74:ba:14:77:9c:0d:
                    81:0e:4e:6d:b1:c8:ef:68:04:cc:6a:eb:d1:22:e3:
                    c4:46:20:ba:e3:5f:d9:f0:a7:d6:1c:da:fe:2b:26:
                    25:86:b5:69:5e:69:87:a4:b8:d0:31:07:3c:57:f2:
                    3c:c7:3b:39:f9:31:d7:79:2a:96:58:21:5d:24:68:
                    f2:35:99:8e:87:dd:3e:d4:02:30:0c:3d:ab:d0:5c:
                    cc:10:a0:f2:d3:cf:7a:30:12:a5:24:74:2a:93:72:
                    17:de:81:40:c4:58:2c:4a:7f:f6:ff:fc:fc:ac:20:
                    f5:9e:0b:75:86:5c:c9:d0:41:0f:81:54:64:6d:e9:
                    9d:cb:3c:88:0e:c6:49:1f:9a:1d:82:59:e6:8a:bc:
                    90:b4:6e:28:fc:13:a3:f0:73:b1:73:c8:d6:29:a2:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:9A:9B:50:1A:61:A0:BC:61:ED:C7:BC:5D:BF:F3:39:2F:81:57
            X509v3 Authority Key Identifier:
                keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:8d:cb:68:d0:50:b2:2a:01:54:cd:23:ba:11:ee:60:d8:
         d0:ef:b1:a3:10:25:bb:a6:c0:d3:de:05:5e:03:cc:d7:e4:3a:
         f0:ee:3a:91:4c:9b:2d:3a:5a:d2:f5:7b:c1:4e:36:f8:ca:27:
         c8:80:ef:a2:31:d8:d2:3f:55:89:4d:2c:08:0d:96:87:15:a9:
         fb:a8:65:7f:5b:c6:60:ce:fe:c8:0b:20:0b:e7:65:34:3d:bf:
         29:54:9b:68:06:9c:e5:70:7a:0c:15:aa:72:be:5a:6a:9e:ba:
         91:fd:f7:3a:01:d8:8c:06:ab:4d:87:f3:8b:51:fe:85:1b:58:
         d1:52:97:08:db:25:d0:92:50:de:1a:6a:ca:81:40:48:ab:11:
         49:c2:1f:19:9b:09:de:ac:b0:98:b3:ef:a9:d4:dd:03:86:3a:
         ff:2b:a7:6b:32:23:9b:78:a2:9a:a7:ed:88:7b:3a:b5:8d:45:
         a2:ea:b0:f6:77:d8:cf:03:2d:e1:a8:3f:6a:98:54:a9:c6:2b:
         c9:a6:a1:33:8c:82:70:b2:70:00:60:15:77:b0:25:6b:c4:33:
         9b:c2:49:5c:e6:c5:5c:37:66:a7:85:ce:24:56:5a:45:14:31:
         21:75:e5:6e:30:08:aa:fb:c1:d4:e3:ec:4f:d3:9b:28:e4:81:
         13:cb:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:30 2026 by rpki-client