Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
File:                     mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft (raw, json)
Hash identifier:          ILZUEvcxxfQraMg4QKRVlxme1rDeDhlp7Jr4qOceeWo=
Subject key identifier:   AB:1D:11:A3:F4:B9:51:6D:1B:F2:8A:42:6D:84:39:33:14:8F:79:8E
Authority key identifier: 98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48
Certificate issuer:       /CN=F36B2802AF/serialNumber=98746FFB305C233343308A3895CB70826618FC48
Certificate serial:       09BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
Manifest number:          09BA
Signing time:             Fri 24 Jul 2026 01:39:22 +0000
Manifest this update:     Fri 24 Jul 2026 01:39:22 +0000
Manifest next update:     Sun 26 Jul 2026 01:39:22 +0000
Files and hashes:         1: mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl (hash: CbDOy2i+PFwyI40mQlS5TmldK2Xpfz4E/ZI+e74lprU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2490 (0x9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AF, serialNumber=98746FFB305C233343308A3895CB70826618FC48
        Validity
            Not Before: Jul 24 01:39:22 2026 GMT
            Not After : Jul 26 01:39:22 2026 GMT
        Subject: CN=6a62c24a-6ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:4f:05:d4:2c:fe:2e:a9:c3:e6:d0:56:3b:
                    34:87:f9:ef:4e:c9:6f:da:66:30:4e:8d:be:e8:62:
                    73:a0:b6:c3:d5:36:1b:16:c9:62:4e:48:a5:f7:93:
                    47:66:12:a2:4f:f4:06:ce:fd:e6:ed:eb:76:a0:a7:
                    0d:5f:41:28:ae:c6:24:f7:25:db:58:78:29:14:c7:
                    67:3b:ca:fc:bc:d7:7a:72:f9:d6:34:99:8d:a0:66:
                    4e:47:3a:1e:9f:bb:c9:2e:05:85:d1:c8:6a:6d:44:
                    73:73:4d:20:e6:15:99:9e:e4:06:30:09:21:1f:80:
                    48:46:00:04:0a:ca:4c:c8:b5:90:14:9c:3a:30:ea:
                    8a:ef:7e:61:52:f6:47:ed:89:dc:92:b4:b8:a4:dc:
                    dc:c9:a0:c6:24:d7:a4:d1:b4:6c:f2:60:68:b6:e9:
                    90:56:1c:15:32:91:f8:96:7b:d4:3d:73:62:3b:36:
                    f7:ad:f8:c7:1e:f0:2c:9f:5c:15:e0:f8:82:3b:1a:
                    85:37:da:8d:f1:d3:1f:00:5b:9e:98:1e:d5:b9:29:
                    27:5e:eb:1c:61:51:68:80:de:fe:43:bb:98:e9:6d:
                    37:05:6b:88:4b:82:27:4e:7f:ff:b6:3a:67:5e:98:
                    d0:49:50:9a:fc:29:fc:1b:33:51:09:e3:1e:29:eb:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1D:11:A3:F4:B9:51:6D:1B:F2:8A:42:6D:84:39:33:14:8F:79:8E
            X509v3 Authority Key Identifier:
                keyid:98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:76:14:c3:a1:72:1e:36:39:a4:3c:fd:44:2a:91:69:1b:ed:
         e3:b5:30:f1:fb:3d:6a:6b:6f:6c:a8:b6:d0:57:a5:b2:e7:42:
         7e:2c:5a:00:4a:cf:ad:0c:8e:f9:40:7f:13:33:31:8d:9d:cd:
         73:34:b7:4d:83:95:7e:4b:38:5c:d8:7f:af:6b:11:4b:ae:44:
         a9:5c:df:96:cc:b6:37:32:3c:a4:54:1e:80:2b:a1:de:cc:43:
         05:38:0f:70:ea:22:98:34:85:5f:62:f8:6c:1b:0b:29:2b:07:
         f8:2e:2e:36:33:e1:22:22:ee:f9:f9:6e:cc:e5:4c:38:16:19:
         b5:13:09:35:4b:89:b4:84:36:0d:5b:da:2f:05:2e:46:8b:7c:
         8b:71:d2:04:07:22:40:ef:4b:e6:68:18:b8:ba:e1:bd:32:44:
         9e:a6:44:0a:33:5f:8d:2a:5e:ab:b5:b1:1c:c5:3d:d6:80:db:
         ba:fc:dd:46:80:3f:b9:6e:eb:6b:d5:71:21:bd:f8:ab:a8:21:
         04:21:7e:41:82:96:3e:b0:81:73:cd:ea:77:70:8a:86:f0:75:
         08:d8:b5:2b:c5:10:b6:ce:0f:d2:7c:5b:85:67:73:85:a0:89:
         b1:7d:6a:43:eb:14:84:b2:7d:1f:ec:41:35:d2:d8:0d:6a:3e:
         e5:ee:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:25:08 2026 by rpki-client