Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
File:                     HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft (raw, json)
Hash identifier:          DFYiiXq/fgKN8eQBddZvIff07Q1Ezr+moMrM7IsAALo=
Subject key identifier:   59:50:CC:84:5F:6F:6C:A0:6B:99:1D:EB:B1:18:26:CD:58:48:4F:5E
Authority key identifier: 1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
Certificate issuer:       /CN=F36B13C7AF/serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
Certificate serial:       0972
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
Manifest number:          096D
Signing time:             Fri 24 Jul 2026 01:41:48 +0000
Manifest this update:     Fri 24 Jul 2026 01:41:47 +0000
Manifest next update:     Sun 26 Jul 2026 01:41:47 +0000
Files and hashes:         1: HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl (hash: 4Tp8kPa8RnGcwa4cMNIqq+91knOHh/lpf+Q9n6jVfYc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418 (0x972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B13C7AF, serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
        Validity
            Not Before: Jul 24 01:41:47 2026 GMT
            Not After : Jul 26 01:41:47 2026 GMT
        Subject: CN=6a62c2dc-95c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:74:50:d9:f6:c5:df:5e:73:08:56:87:0e:
                    6e:e5:08:bc:d0:e7:5f:b7:32:ad:81:55:d6:ae:e4:
                    fe:f0:9c:f7:b8:6e:25:0f:29:9a:83:7f:88:f4:f1:
                    7c:d9:57:e0:f7:c8:7c:cc:8d:70:9d:5f:39:7a:78:
                    da:2e:5b:50:c0:2e:92:58:8c:52:17:12:d4:5c:6d:
                    90:1c:a5:b0:6a:ff:46:10:cc:55:42:97:18:e9:3c:
                    8b:ed:01:f2:68:7c:1d:52:b7:7b:65:80:20:a2:01:
                    26:c2:12:59:7d:8b:31:b6:44:97:94:2b:fa:9a:36:
                    0e:ff:37:70:d6:dc:a5:44:7f:d1:8d:34:7c:4b:ed:
                    8c:44:d8:86:93:5b:6b:f5:a1:bf:86:99:3c:97:5d:
                    29:78:e5:26:16:d5:d5:db:ee:54:21:ad:ab:21:f1:
                    da:aa:6b:fd:06:f7:3f:6f:7e:71:4b:d7:b9:25:23:
                    e8:e0:b3:6d:39:ea:48:18:6e:5b:e2:a1:85:cd:40:
                    74:3e:e2:ea:18:2f:f7:21:47:7f:3b:90:06:33:9d:
                    54:70:43:68:dc:71:75:ad:15:db:81:64:de:ad:d4:
                    1e:db:b8:97:35:b4:fe:c0:dd:c9:e4:a9:c3:fc:fe:
                    3e:a3:1c:5a:f6:7f:6a:01:f5:6b:4e:a6:43:1a:09:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:CC:84:5F:6F:6C:A0:6B:99:1D:EB:B1:18:26:CD:58:48:4F:5E
            X509v3 Authority Key Identifier:
                keyid:1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:18:16:2b:60:b8:24:29:98:e5:04:3a:07:82:a1:24:7f:db:
         1f:4c:48:04:57:07:40:e9:68:8b:c8:f5:fe:26:5b:e8:26:4d:
         f8:15:51:b3:c7:cd:87:51:13:d6:08:45:ac:fd:0b:5f:b4:41:
         2c:76:dc:42:ba:47:bb:38:3e:03:14:df:cf:bf:ca:65:b1:5d:
         b2:c9:42:07:31:92:56:33:90:80:e7:c0:87:1e:9f:8b:eb:69:
         f5:25:10:08:3d:2f:44:93:6d:9a:40:01:f6:11:f8:e2:19:66:
         c2:f4:6d:23:15:56:e3:4c:ca:6a:92:03:62:35:26:7c:f7:c2:
         41:7c:09:c5:4a:49:d7:7f:19:ea:27:34:28:ac:f7:71:44:cf:
         55:d8:8c:a8:39:a5:51:b2:18:e9:98:87:68:de:17:f2:be:cc:
         98:d6:05:46:97:92:96:2b:2a:ff:c3:1d:ea:21:07:5d:8e:20:
         a1:cf:2e:c3:ee:76:68:e3:70:14:e8:37:5b:3b:ff:6e:16:ee:
         eb:9d:f9:39:4a:a3:04:d6:b9:dc:4a:f4:7d:cb:54:b1:f6:7e:
         fd:20:ac:b4:dc:21:7d:ed:2b:f5:6d:c3:a8:ee:16:ba:c1:b1:
         21:4a:97:31:76:d7:e2:74:e2:3b:27:fa:62:db:53:5b:ce:87:
         32:8c:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:59 2026 by rpki-client