Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          5BLMDLM/QxqHJIzlwdqZNqI4L+SPnmRphu6eCMwn76s=
Subject key identifier:   7C:E6:FE:11:B1:D2:4A:59:EB:9F:DC:9A:E8:77:07:23:40:A1:6E:38
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       08EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          08E9
Signing time:             Thu 26 Mar 2026 01:54:21 +0000
Manifest this update:     Thu 26 Mar 2026 01:54:20 +0000
Manifest next update:     Sat 28 Mar 2026 01:54:20 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: 8R1zlf/BA7DAz0vC8dRHiyLZS/2aGzK5v8XNoEnsHz8=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: Mar 26 01:54:20 2026 GMT
            Not After : Mar 28 01:54:20 2026 GMT
        Subject: CN=69c491cd-e2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:5a:67:23:c7:c9:82:5e:00:85:7f:23:80:
                    70:5c:69:1c:22:e2:8e:cb:12:4e:a6:22:1f:98:1c:
                    17:ca:73:8b:3e:4e:27:75:2b:5f:ed:08:86:86:06:
                    08:68:91:6c:13:12:9c:1f:cb:4a:3c:1b:0f:dd:db:
                    09:26:35:9d:e5:3b:00:d8:85:a9:19:dc:51:69:88:
                    f0:21:87:5b:c5:af:81:4f:6f:25:56:ec:54:1f:a0:
                    39:4a:82:a0:c5:dd:cc:d7:9a:89:94:4f:95:7d:7b:
                    89:96:3c:ce:48:7c:f6:cd:84:b1:6e:1e:f8:3b:83:
                    97:3d:73:89:d4:06:04:c7:d3:0b:36:0c:34:fe:cd:
                    c4:8b:0d:2f:f2:54:4a:8c:8a:9e:38:21:38:c2:b9:
                    ca:ba:c3:5f:09:eb:30:99:d4:5f:8e:2f:37:03:a4:
                    48:3f:d4:ee:c1:c9:f8:de:5a:fe:cc:53:fd:41:63:
                    ac:6e:d5:a1:6f:42:c8:e8:0c:1e:ef:10:0b:cf:47:
                    45:63:a5:00:36:e2:0c:04:bc:70:6b:95:2d:c7:c6:
                    f4:d9:6d:a4:e5:66:0d:ce:5d:67:4d:98:dd:54:7e:
                    05:54:ac:22:43:af:bd:13:cc:3f:40:bb:94:90:28:
                    34:44:58:75:31:e7:67:f1:bb:c2:38:56:20:64:0c:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:FE:11:B1:D2:4A:59:EB:9F:DC:9A:E8:77:07:23:40:A1:6E:38
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9a:dc:d6:5a:53:90:bf:27:e9:ec:7b:ad:e8:90:36:34:d6:
         2f:7d:a3:b3:a5:09:5d:28:d5:8c:58:e3:16:ca:8a:8e:93:c9:
         3f:7a:e3:aa:42:f2:e4:20:a9:50:78:64:7e:fa:eb:8b:cf:d4:
         09:52:99:b7:cf:1b:5d:b6:64:67:b1:c1:ba:a9:06:37:41:d6:
         7f:7d:e8:1a:6c:db:a5:7d:82:08:93:71:ec:a8:e1:12:c1:d2:
         44:de:74:65:d6:da:86:c7:9f:bd:1b:81:e8:e9:c2:3c:d8:7a:
         4f:23:f9:1e:2e:77:85:26:66:ab:9c:b0:2f:d8:84:5a:db:fd:
         4f:ba:6c:af:c4:b8:fa:34:93:ea:e0:16:b1:3e:de:bd:66:8f:
         f2:ca:51:b2:84:b7:78:0f:3d:6d:34:77:12:fa:ee:6c:5f:18:
         c6:7a:37:79:4f:dd:c4:22:5c:03:35:46:d7:ce:8a:c7:01:1e:
         de:45:6d:61:3e:2f:51:68:36:dd:0d:bb:85:45:6b:cb:53:8b:
         42:8b:0a:a0:da:10:e3:a4:e5:3d:64:0d:6a:df:85:a0:bb:71:
         59:86:f4:b3:1e:44:c7:17:25:b3:21:84:0d:09:67:f4:b7:10:
         9c:40:37:95:70:95:8a:9b:9a:e4:07:14:d7:0b:f2:e8:a3:01:
         fb:6f:71:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:53 2026 by rpki-client