Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          P+dNrXRRQTBgOeXo0pgj4KBDSW92hf/0HShNyWU6YlM=
Subject key identifier:   FC:DA:BF:8A:C6:19:7D:62:B4:75:22:63:12:BE:17:33:F4:DA:F6:93
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       085F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          0856
Signing time:             Fri 24 Jul 2026 01:56:53 +0000
Manifest this update:     Fri 24 Jul 2026 01:56:52 +0000
Manifest next update:     Sun 26 Jul 2026 01:56:52 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: 8w6ruRPmOFpFrRS9ldWlk5arbw5jo7HWH6wMrvG9sYk=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143 (0x85f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Jul 24 01:56:52 2026 GMT
            Not After : Jul 26 01:56:52 2026 GMT
        Subject: CN=6a62c665-5830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:18:9f:70:be:6d:86:ba:ba:2c:b6:fb:ee:
                    4d:40:d7:81:9d:07:f8:0d:2e:49:8b:52:e6:f2:92:
                    0a:b8:37:1b:60:86:b8:da:ab:4b:92:71:e1:6b:a2:
                    e7:74:b6:95:85:9a:c1:60:a2:d6:66:1d:c5:57:29:
                    0c:6c:15:93:ac:5e:38:b2:c8:24:ad:d0:09:60:ef:
                    94:78:8a:a5:e6:82:b8:d5:98:1d:c6:64:01:e6:30:
                    e2:5b:05:1b:7e:8b:9e:1e:10:ad:af:e2:17:82:b7:
                    fd:ce:d3:7c:e3:4e:a5:55:61:85:31:1b:91:3f:37:
                    36:05:86:09:56:2b:fc:56:48:d2:c0:c4:9a:f7:a8:
                    42:8a:2a:f9:cb:44:61:e4:11:9f:4d:0a:95:dc:dd:
                    3f:27:b8:b6:1c:c3:90:f4:70:7b:32:9a:e9:02:78:
                    e9:e4:fb:f0:f1:bc:d1:ce:3c:35:44:f8:5e:45:c7:
                    26:f3:45:df:37:2a:bf:05:90:b3:dd:79:ae:f6:32:
                    04:8b:21:ac:c6:1d:54:8f:99:c1:e6:15:a8:e0:73:
                    43:5b:22:b3:a7:e2:1b:fa:60:8b:cd:e6:00:61:4e:
                    46:61:55:2c:51:f3:f5:e2:82:03:59:38:ce:e4:8f:
                    95:74:0e:c8:eb:34:d8:b8:b7:66:ca:17:48:eb:e3:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DA:BF:8A:C6:19:7D:62:B4:75:22:63:12:BE:17:33:F4:DA:F6:93
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5f:8f:5d:fc:28:92:9e:c5:8a:02:24:aa:42:6b:61:07:58:
         83:23:85:2e:e2:9e:4e:49:c2:f0:d7:21:67:61:3d:92:e7:bf:
         5e:50:64:99:85:ba:c3:4e:43:7f:f8:41:3f:e6:61:01:34:88:
         8d:98:91:78:d0:da:22:69:1b:e8:1e:c7:09:7b:78:1c:2e:8f:
         e5:88:f2:21:11:c2:e1:56:e3:9e:2a:86:38:e7:ad:ae:8e:49:
         70:bc:b0:61:83:b1:ee:7a:50:ff:e3:08:9a:89:c6:09:52:df:
         93:96:ef:25:28:74:5c:19:a2:71:b8:2b:0b:14:c5:18:9a:71:
         0b:f2:c9:1c:41:62:e6:8e:67:11:f9:12:1d:4d:64:8d:1d:9b:
         f5:cf:d3:49:51:6b:46:65:7a:03:49:d0:0b:e9:7c:6e:28:3a:
         ad:40:9e:39:b1:1b:38:59:7d:b5:1f:50:fe:e7:94:74:45:8c:
         27:df:7e:e4:32:63:8e:04:5b:a7:20:3d:5f:bb:8b:11:7f:6f:
         a8:28:f8:a4:50:73:65:8c:33:93:38:ae:e5:77:7a:4d:e5:ec:
         d9:85:48:1a:98:57:6f:68:8e:57:a5:8b:8a:dd:09:40:21:0d:
         91:2e:ac:9a:0b:80:43:b0:cc:b0:7f:a3:68:6c:39:f2:a0:b2:
         53:26:bc:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yNjA3MjQwMTU2NTJaFw0yNjA3MjYwMTU2NTJaMBgxFjAU
BgNVBAMTDTZhNjJjNjY1LTU4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbHxifcL5thrq6LLb77k1A14GdB/gNLkmLUubykgq4Nxtghrjaq0uSceFr
oud0tpWFmsFgotZmHcVXKQxsFZOsXjiyyCSt0Alg75R4iqXmgrjVmB3GZAHmMOJb
BRt+i54eEK2v4heCt/3O03zjTqVVYYUxG5E/NzYFhglWK/xWSNLAxJr3qEKKKvnL
RGHkEZ9NCpXc3T8nuLYcw5D0cHsymukCeOnk+/DxvNHOPDVE+F5FxybzRd83Kr8F
kLPdea72MgSLIazGHVSPmcHmFajgc0NbIrOn4hv6YIvN5gBhTkZhVSxR8/XiggNZ
OM7kj5V0DsjrNNi4t2bKF0jr4xATAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/Nq/
isYZfWK0dSJjEr4XM/Ta9pMwHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ0RjEvMEIyODY5ODQzNThBMTFFQkEzREU2NzcyRjhB
RUEyMjgvaGJDeGlqR09XblhRVFJvS3AzN19sUVVpaVNRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnX49d/CiSnsWKAiSqQmthB1iDI4Uu
4p5OScLw1yFnYT2S579eUGSZhbrDTkN/+EE/5mEBNIiNmJF40NoiaRvoHscJe3gc
Lo/liPIhEcLhVuOeKoY4562ujklwvLBhg7HuelD/4wiaicYJUt+Tlu8lKHRcGaJx
uCsLFMUYmnEL8skcQWLmjmcR+RIdTWSNHZv1z9NJUWtGZXoDSdAL6XxuKDqtQJ45
sRs4WX21H1D+55R0RYwn337kMmOOBFunID1fu4sRf2+oKPikUHNljDOTOK7ld3pN
5ezZhUgamFdvaI5XpYuK3QlAIQ2RLqyaC4BDsMywf6NobDnyoLJTJrxq
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:45:16 2026 by rpki-client