Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          ACmDgBG2hPUdfrgE/BcMHYUwKdDO5z5Iu3fCH3/u9Rs=
Subject key identifier:   79:A6:A4:16:EF:48:51:C9:05:96:D9:FF:E9:B1:13:90:18:10:B2:59
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       03EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          03EE
Signing time:             Fri 24 Jul 2026 03:48:43 +0000
Manifest this update:     Fri 24 Jul 2026 03:48:42 +0000
Manifest next update:     Sun 26 Jul 2026 03:48:42 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: Fs6TtcmaU8DHgOawCUJXmar5CtcOz8KEEeyqjGzK8sA=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Jul 24 03:48:42 2026 GMT
            Not After : Jul 26 03:48:42 2026 GMT
        Subject: CN=6a62e09b-0b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:a9:10:5c:dc:09:b6:77:d3:af:4b:04:93:
                    79:ea:aa:f1:cc:ad:82:d3:61:d0:99:cb:db:fe:4c:
                    80:1c:6d:04:b0:5a:fe:7d:c2:fb:48:48:70:9d:d5:
                    67:39:fa:34:bf:73:97:56:8c:ec:a8:19:cf:fa:ff:
                    7f:bb:13:97:c8:5d:91:cb:8e:ce:4e:fd:35:62:ba:
                    dd:db:34:7d:88:a5:2c:4a:26:f8:e1:02:55:ea:a5:
                    e5:6d:00:46:90:bc:4c:c6:bf:f3:da:ec:e1:ff:b5:
                    63:cb:5c:dd:67:80:87:bf:cb:99:8f:ce:14:79:d2:
                    11:d1:f1:51:59:7e:8e:72:7d:e0:9b:f9:45:80:14:
                    b1:12:ac:5f:b4:6e:4d:91:23:4a:aa:fc:b5:bd:b3:
                    ac:ea:71:dc:5e:fe:81:a8:a2:e7:d1:4b:d8:5f:f2:
                    29:f9:aa:bd:59:ee:d6:c8:02:47:6f:02:e9:7b:63:
                    09:89:c9:34:13:c4:94:f3:4c:0a:da:03:78:6e:33:
                    62:80:42:4f:50:6e:96:a7:8b:22:80:41:e7:92:29:
                    18:62:8b:17:23:8c:81:f7:a2:1f:aa:6a:c7:f2:14:
                    e2:b0:74:a0:f3:7a:e5:e8:d4:ba:d9:eb:77:34:e2:
                    9e:2e:f7:39:8a:33:17:3d:7b:2e:12:cf:98:e9:24:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A6:A4:16:EF:48:51:C9:05:96:D9:FF:E9:B1:13:90:18:10:B2:59
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:2a:f1:ff:c4:ef:18:d9:d5:b6:b0:c6:e3:97:2f:3c:e2:
         c4:f4:85:a0:79:3f:76:94:2c:bb:53:8a:55:4d:b1:9f:7d:68:
         6d:b3:0c:7f:63:62:8c:c0:86:ae:a9:e4:fa:3c:bc:67:17:0c:
         57:5f:41:b4:10:13:2b:dd:fb:45:a6:99:89:88:39:d5:b5:72:
         50:22:26:4d:cb:05:e4:fe:36:cd:0b:70:3d:cc:fc:9f:4e:9f:
         eb:60:20:94:41:bc:d2:4d:db:ca:1e:e1:3e:2c:37:10:a7:43:
         be:94:54:44:20:7f:48:54:c2:02:20:b8:b6:fa:b2:7b:30:c2:
         f1:c9:a9:b8:46:1e:7f:65:95:2f:19:ee:42:7d:8e:09:fd:05:
         ee:fa:72:0a:0c:26:e8:89:d3:5c:c4:5b:79:63:67:45:85:59:
         c8:b1:28:b9:ff:91:95:6f:37:77:e2:09:bd:4c:15:7a:c7:ea:
         55:32:c6:ab:b4:45:54:14:3f:3b:93:fe:b5:cf:7e:98:28:19:
         3c:e5:1b:f5:b6:1c:7d:24:ef:63:3a:ce:6a:34:aa:14:19:7a:
         69:0d:c1:72:7d:2e:85:87:cb:f7:2f:d9:92:5c:ae:99:5d:18:
         2d:0e:b4:9b:bf:23:7c:47:6c:5b:81:c5:06:b1:42:b9:82:89:
         f3:46:88:08
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTgxMjVBRjExMC8GA1UEBRMoM0M3OUYwRkNCQkIwQzA0MUM4QjRGNkRFRTEwM0Iw
MjUxOTUxNkVGNDAeFw0yNjA3MjQwMzQ4NDJaFw0yNjA3MjYwMzQ4NDJaMBgxFjAU
BgNVBAMTDTZhNjJlMDliLTBiNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTTakQXNwJtnfTr0sEk3nqqvHMrYLTYdCZy9v+TIAcbQSwWv59wvtISHCd
1Wc5+jS/c5dWjOyoGc/6/3+7E5fIXZHLjs5O/TViut3bNH2IpSxKJvjhAlXqpeVt
AEaQvEzGv/Pa7OH/tWPLXN1ngIe/y5mPzhR50hHR8VFZfo5yfeCb+UWAFLESrF+0
bk2RI0qq/LW9s6zqcdxe/oGooufRS9hf8in5qr1Z7tbIAkdvAul7YwmJyTQTxJTz
TAraA3huM2KAQk9QbpaniyKAQeeSKRhiixcjjIH3oh+qasfyFOKwdKDzeuXo1LrZ
63c04p4u9zmKMxc9ey4Sz5jpJF3tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeaak
Fu9IUckFltn/6bETkBgQslkwHwYDVR0jBBgwFoAUPHnw/LuwwEHItPbe4QOwJRlR
bvQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4MTI1LzlFRDdFQjFFODM4NDExRUVBRjgxMzEzNTRBRDlFNkZDL1BIbndf
THV3d0VISXRQYmU0UU93SlJsUmJ2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BIbndfTHV3d0VISXRQYmU0UU93SlJsUmJ2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTgxMjUvOUVEN0VCMUU4Mzg0MTFFRUFGODEzMTM1NEFE
OUU2RkMvUEhud19MdXd3RUhJdFBiZTRRT3dKUmxSYnZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCF4Crx/8TvGNnVtrDG45cvPOLE9IWg
eT92lCy7U4pVTbGffWhtswx/Y2KMwIauqeT6PLxnFwxXX0G0EBMr3ftFppmJiDnV
tXJQIiZNywXk/jbNC3A9zPyfTp/rYCCUQbzSTdvKHuE+LDcQp0O+lFREIH9IVMIC
ILi2+rJ7MMLxyam4Rh5/ZZUvGe5CfY4J/QXu+nIKDCboidNcxFt5Y2dFhVnIsSi5
/5GVbzd34gm9TBV6x+pVMsartEVUFD87k/61z36YKBk85Rv1thx9JO9jOs5qNKoU
GXppDcFyfS6Fh8v3L9mSXK6ZXRgtDrSbvyN8R2xbgcUGsUK5gonzRogI
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:43 2026 by rpki-client