Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
File:                     HIATGRbyhVyxdDXLrvJmjeFVlsE.mft (raw, json)
Hash identifier:          NG8CUWqKK/RIJUdXMJ+e59WX5Dc/TueKAjMrlow5g5I=
Subject key identifier:   4D:17:24:CA:DE:AD:14:7A:CF:15:27:F8:46:C9:1D:45:EA:2C:72:71
Authority key identifier: 1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
Certificate issuer:       /CN=F36CB8DFAF/serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
Certificate serial:       0422
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
Manifest number:          0421
Signing time:             Tue 22 Sep 2026 03:51:22 +0000
Manifest this update:     Tue 22 Sep 2026 03:51:21 +0000
Manifest next update:     Thu 24 Sep 2026 03:51:21 +0000
Files and hashes:         1: HIATGRbyhVyxdDXLrvJmjeFVlsE.crl (hash: ag36Ssz71qTWsI4THmbP849cbN2uCtMUHzWU7+gu00w=)
                          2: 27E171828AA611EEAADC55514AD9E6FC.roa (hash: 09dXVAcpXBeumVd3ejmIXPVt6jsUIfxATFT48+wvgGE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB8DFAF, serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
        Validity
            Not Before: Sep 22 03:51:21 2026 GMT
            Not After : Sep 24 03:51:21 2026 GMT
        Subject: CN=6ab1fb3a-e8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:c6:3f:d9:64:3b:7a:dd:29:b5:27:b5:fd:
                    16:27:8a:19:2d:ac:22:6a:51:88:54:e9:3c:63:cf:
                    13:84:5f:03:5e:3f:83:72:b9:d0:42:91:66:90:b8:
                    19:60:36:3f:08:33:a9:77:d2:6a:5e:99:a2:40:a9:
                    e1:cd:36:bd:c9:f6:4c:2b:0f:4b:6a:ef:dd:aa:30:
                    5b:a5:52:12:51:0a:bd:c2:c3:b4:f3:f8:9f:f0:24:
                    03:cd:26:a4:f8:4e:80:72:5c:80:c8:48:50:3b:5a:
                    11:35:bf:05:e7:d2:08:b6:cd:19:f1:52:ca:76:58:
                    12:68:10:ca:7e:8f:f1:bb:9a:73:93:b7:1c:1a:cf:
                    b7:ab:b6:ed:0a:52:a3:3c:4b:c8:e3:8b:d2:3d:06:
                    c8:5f:48:6c:7d:34:9f:3d:38:ca:dd:59:91:a1:13:
                    b7:bf:ed:84:0f:84:bf:49:f8:ce:8d:4b:c9:e9:bf:
                    22:e8:43:a7:04:a0:52:ef:77:f9:54:3e:0c:c0:ee:
                    d5:d6:ff:52:cb:45:30:5a:9f:66:66:37:a0:f0:65:
                    29:4f:e4:4c:18:75:28:75:66:6e:1c:e8:4c:5e:21:
                    a9:66:7d:0d:70:07:05:cc:c0:b4:1a:02:51:c9:f4:
                    24:dd:a0:38:dc:9f:09:59:03:b9:29:00:48:51:36:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:24:CA:DE:AD:14:7A:CF:15:27:F8:46:C9:1D:45:EA:2C:72:71
            X509v3 Authority Key Identifier:
                keyid:1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:71:22:24:3a:2d:85:7a:41:e4:49:ce:b4:d7:7d:69:c5:f9:
         f9:f5:0c:e1:0c:b6:30:16:e8:b3:7a:f6:b4:3b:79:ea:fe:7c:
         3e:92:29:77:ec:ab:05:99:a3:55:7b:6a:fb:73:e5:56:5b:90:
         f8:84:1c:9d:dd:54:e0:3b:b5:40:1f:ad:e4:bb:c2:c8:80:54:
         b4:6d:4a:be:25:be:95:3b:c5:38:69:15:67:fd:ff:a8:3b:11:
         17:84:cd:06:a0:59:b8:c4:46:54:22:a1:8b:35:12:e9:6f:4e:
         46:0f:c7:3a:40:06:fe:1f:78:8e:f0:a4:0a:31:14:88:9c:a7:
         25:d0:24:93:23:fe:ef:69:6c:ef:f9:80:14:d0:48:8c:c5:34:
         06:9d:1b:16:bd:61:f0:28:84:fa:6d:b8:a0:32:91:4e:0d:52:
         ff:59:d7:96:0b:d5:b3:ad:27:96:11:84:25:3c:bc:b9:17:4d:
         9f:97:89:6f:de:68:9d:33:d4:69:2c:a0:a6:e6:f5:2a:4f:a3:
         29:e7:79:8c:3b:14:93:8d:56:d3:80:8a:b5:9f:10:0e:04:3e:
         d4:89:ef:81:d1:cb:31:5a:77:3c:bf:6d:5a:94:17:46:7f:da:
         4c:dc:3b:66:d0:17:40:ec:e9:a2:72:32:4f:73:0c:e2:23:a3:
         34:77:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----