Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
File:                     CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft (raw, json)
Hash identifier:          gCoTcJPxdclSpmKbkLT+GS9x6NgsPFu/XGGT2coqSSM=
Subject key identifier:   C5:50:34:C1:C4:36:61:B8:7D:FA:47:CB:03:87:9F:C9:1D:16:D2:4E
Authority key identifier: 09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04
Certificate issuer:       /CN=F36C89CDAR/serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
Certificate serial:       12
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
Manifest number:          11
Signing time:             Thu 23 Jul 2026 05:44:13 +0000
Manifest this update:     Thu 23 Jul 2026 05:44:12 +0000
Manifest next update:     Sat 25 Jul 2026 05:44:12 +0000
Files and hashes:         1: CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl (hash: Z7kWb8vi5kqKnEPxfcwyK4I/fX71IGR5hT3jOOGVPgc=)
                          2: 80B35B167DBC11F186B53FF6CE1D38B0.roa (hash: mp9WTiiEl564d5f5b3Mt3Uat+rXqCkk3Pof9oq0Krno=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 05:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C89CDAR, serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
        Validity
            Not Before: Jul 23 05:44:12 2026 GMT
            Not After : Jul 25 05:44:12 2026 GMT
        Subject: CN=6a61aa2c-7866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:10:06:a1:80:08:d5:68:3a:6c:58:0c:f2:
                    73:66:0d:13:e8:24:e5:6d:1a:b7:e5:4a:c4:70:35:
                    88:6a:cc:27:21:a3:4f:d9:2f:1f:4a:00:70:98:05:
                    14:29:d9:d2:13:2d:74:f6:ba:ae:16:c6:0e:70:78:
                    f6:d4:ea:29:51:80:3e:65:4b:19:b2:f2:d1:68:09:
                    5b:6e:5f:36:c7:fc:ce:cc:4c:fd:c1:79:95:a4:8b:
                    ed:b1:09:2f:a8:3f:9b:5b:44:1d:8a:1b:f0:97:cb:
                    30:f3:a9:cb:9b:43:e5:b3:cf:9d:b2:3d:b3:c1:b5:
                    ca:d6:d8:e6:f6:11:04:98:c8:e4:af:2f:bf:dd:d7:
                    aa:fa:e9:28:f3:59:f5:67:57:4b:77:bc:a7:19:2e:
                    9c:e6:eb:f7:55:98:91:e0:b3:25:4a:88:2e:b5:94:
                    d4:78:53:18:b2:39:55:6b:f9:9f:66:a4:40:2e:be:
                    18:59:12:94:3f:7e:ca:9e:5a:4a:73:96:03:68:f7:
                    85:2b:c5:f2:97:a8:fa:98:78:e7:51:c5:df:54:98:
                    0c:4c:e5:ca:59:94:9b:47:6e:32:e5:5e:95:87:75:
                    60:81:87:59:fd:ce:05:aa:19:f3:5b:2c:e2:d1:54:
                    34:df:7a:51:88:e6:ea:0d:d0:c6:17:7e:7c:57:dd:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:50:34:C1:C4:36:61:B8:7D:FA:47:CB:03:87:9F:C9:1D:16:D2:4E
            X509v3 Authority Key Identifier:
                keyid:09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:b7:71:3c:13:ad:a7:db:69:be:d7:a6:48:ad:04:17:48:
         89:7b:88:65:3f:38:be:fe:e8:0d:d2:80:04:a8:ee:1a:11:40:
         22:d3:c1:c8:95:90:a5:e9:64:b7:24:35:1e:71:cf:bb:a5:1b:
         9e:3e:1b:87:06:db:02:da:31:57:51:d2:2b:d3:de:36:e4:92:
         6f:30:c6:28:2c:dd:8d:38:78:92:1f:fd:d9:70:08:8e:c1:9d:
         d7:69:d8:fb:81:45:67:f8:99:68:67:4e:d4:42:d9:18:03:4c:
         92:39:23:25:e9:d0:1b:4e:c2:f9:59:27:92:f5:33:f2:ed:87:
         5d:4f:03:33:3f:57:07:f8:18:dc:36:64:b7:09:ca:8c:b3:80:
         96:d2:bd:66:fe:a0:0c:4d:0b:98:fb:9c:28:ec:20:65:d2:55:
         cb:09:63:8b:d8:d8:ee:e6:2f:d0:be:56:71:2f:5c:3b:0f:33:
         c7:e2:79:40:21:54:f4:ba:e8:90:c3:e6:94:de:b1:3e:f6:b0:
         5b:31:2f:39:43:ff:f8:3e:4d:cf:0d:2d:8c:d6:28:96:d9:49:
         f6:45:a7:2b:19:19:29:08:ad:28:1e:ad:fb:29:2f:b0:d8:d8:
         15:7d:db:73:b3:ea:78:55:76:cb:7f:8d:7d:26:fd:b8:02:ac:
         6c:89:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:17:22 2026 by rpki-client