Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
File:                     HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft (raw, json)
Hash identifier:          +E53fAaPEaFO5ljqxdFQR1guKtqpNADH72+86tWnqew=
Subject key identifier:   21:3F:9B:51:44:4E:C5:7F:DC:3B:3F:E4:19:AC:D7:AF:2B:5E:7C:E4
Authority key identifier: 1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
Certificate issuer:       /CN=F36B13C7AF/serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
Certificate serial:       092A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
Manifest number:          0925
Signing time:             Wed 13 May 2026 01:40:50 +0000
Manifest this update:     Wed 13 May 2026 01:40:49 +0000
Manifest next update:     Fri 15 May 2026 01:40:49 +0000
Files and hashes:         1: HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl (hash: so2eFjzXk3i48cpjNMSuXYzJPe1NuI4UkZ1iVFXVzCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 01:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346 (0x92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B13C7AF, serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
        Validity
            Not Before: May 13 01:40:49 2026 GMT
            Not After : May 15 01:40:49 2026 GMT
        Subject: CN=6a03d6a2-724c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:76:0f:54:3d:bb:70:75:f6:74:9b:e1:fc:
                    f4:1c:99:45:f0:80:07:ba:60:a8:4a:5f:9a:2d:bb:
                    ac:db:08:bf:d2:72:c7:4c:cf:b0:ca:b5:d6:61:36:
                    cf:b5:d4:a2:61:d9:fd:11:32:63:db:2b:db:fc:41:
                    94:87:05:7b:56:e2:e2:0c:43:c4:fd:30:69:d1:d8:
                    2d:83:82:95:d4:5e:f9:17:98:9c:14:a0:8c:d2:95:
                    43:5a:eb:11:1a:73:15:cf:bd:4d:fb:51:41:c3:f3:
                    41:0e:d5:d8:71:b7:03:c3:2c:1f:63:69:3e:56:9c:
                    f8:59:3a:ae:4b:ba:80:fd:e7:33:39:79:6a:9d:91:
                    c9:bc:a5:9d:d0:a5:9b:96:f8:34:8d:66:2f:12:ab:
                    e4:4a:77:41:5b:f4:ac:e5:f9:85:d7:37:f1:68:fa:
                    a5:27:56:e9:e8:c8:58:c7:b6:b8:d2:f6:cc:62:61:
                    f4:37:32:cb:ef:fc:ce:a2:22:23:99:fc:06:90:b9:
                    f4:6b:b6:a7:33:18:e9:e2:3f:35:f5:e7:5f:0e:8a:
                    65:e0:9f:62:f2:d6:d2:ea:15:ed:95:7c:ea:eb:2d:
                    d3:d2:bd:c8:d3:2a:0f:9a:25:1b:d5:57:97:c3:81:
                    29:75:f7:ff:c2:79:37:2a:42:f4:7e:82:5b:2d:41:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3F:9B:51:44:4E:C5:7F:DC:3B:3F:E4:19:AC:D7:AF:2B:5E:7C:E4
            X509v3 Authority Key Identifier:
                keyid:1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1c:1c:34:9b:b8:95:d7:68:81:f1:20:12:a9:72:0d:be:b3:
         fd:80:86:18:89:27:74:24:e3:d8:c4:33:d4:d6:35:f1:10:20:
         df:81:ff:b3:a1:a7:87:d0:b3:38:74:75:a6:48:10:01:fc:ee:
         dd:56:57:e1:11:92:df:bf:73:1b:43:b6:53:88:00:6f:ee:91:
         b6:4f:c8:e9:65:e6:46:1f:43:92:ee:89:05:94:86:52:52:12:
         32:b0:55:68:ed:12:f1:c8:9a:79:9c:67:77:8c:50:69:c5:03:
         ec:e3:a8:b1:19:f2:ba:b9:32:fc:fa:94:9a:65:8e:91:a3:24:
         e5:e8:53:ab:57:ae:62:f1:56:f5:ed:b2:f1:7e:9e:64:22:8e:
         0a:4f:b4:e5:0c:54:ff:a6:b8:a4:cb:66:e2:51:e3:5e:53:aa:
         fa:54:55:b5:8d:cc:e4:07:51:30:7b:45:aa:56:83:50:25:93:
         1e:27:fe:12:0c:c0:b4:89:74:34:de:8f:a7:26:a7:5a:44:67:
         7d:93:4f:ca:95:7b:48:9a:d4:9b:c4:8b:26:f5:c7:94:88:1b:
         f5:95:c2:69:8a:c1:ba:41:c8:2d:ab:ed:38:cb:69:e8:79:a8:
         1f:d6:b0:70:d9:14:5d:b1:da:ca:26:93:9b:62:bd:8c:62:ba:
         c8:6a:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:54:13 2026 by rpki-client