Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          g9ptLv60dsl3gw58rEohkk2g+hHm80PL9UlgQWG/EwM=
Subject key identifier:   F6:B8:0F:B0:ED:39:09:1C:3C:64:5F:6A:0E:DC:BE:98:74:14:E9:E0
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0A74
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0A73
Signing time:             Fri 24 Jul 2026 01:24:18 +0000
Manifest this update:     Fri 24 Jul 2026 01:24:17 +0000
Manifest next update:     Sun 26 Jul 2026 01:24:17 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: /Ma/ear4BIpxrOv1yS3HyM+cimiIgd+1S01C5/EhWdo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2676 (0xa74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Jul 24 01:24:17 2026 GMT
            Not After : Jul 26 01:24:17 2026 GMT
        Subject: CN=6a62bec2-9cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:0c:17:f2:31:c4:73:ef:40:b5:ee:72:fa:
                    42:15:6b:2f:83:e3:f2:69:81:c9:1a:ac:24:7f:28:
                    a4:5e:a9:57:57:e2:58:f5:9c:75:26:68:54:d2:bb:
                    95:b3:96:64:85:18:6f:2e:cd:99:c0:72:59:cf:d8:
                    cc:fe:0f:44:13:22:8a:f7:6d:db:12:12:23:2e:39:
                    89:10:e9:a6:8b:26:be:54:79:b2:34:bf:97:47:c1:
                    12:6d:64:d5:63:56:47:15:ca:b3:4e:7d:a7:7d:a8:
                    69:4e:19:95:85:95:2a:dc:4b:26:83:bc:78:3b:5f:
                    84:27:8b:0d:84:07:65:b9:4c:3c:99:be:d6:6c:d3:
                    b4:f2:87:87:5e:e4:23:ff:f5:58:f0:6f:87:d3:bc:
                    ba:d7:cd:0e:19:93:6f:7a:b6:86:6c:c5:6d:10:cc:
                    da:6a:97:6f:02:17:fb:79:48:15:5c:3b:a6:01:5e:
                    cc:d0:5e:af:6a:8e:ec:20:f0:b6:1c:87:c6:04:a8:
                    1f:cc:9e:9d:af:fd:d9:86:57:b1:63:6f:6f:6b:74:
                    e9:05:26:16:a8:d5:a1:69:28:f0:e5:8f:3a:ab:e3:
                    15:cd:16:b9:c4:cd:d9:91:58:23:8d:14:88:92:dc:
                    26:e9:c4:71:32:1c:16:58:5a:6c:b2:c6:a8:84:7a:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B8:0F:B0:ED:39:09:1C:3C:64:5F:6A:0E:DC:BE:98:74:14:E9:E0
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:13:9f:3a:bb:ff:f3:be:ec:bf:aa:5c:02:d5:0d:3f:d1:
         52:27:44:a8:a9:8b:1c:d3:ab:3c:72:37:ea:f6:d4:16:be:41:
         d7:7a:01:da:62:0c:c6:eb:28:09:e5:f5:85:36:43:2d:87:bd:
         0d:2b:44:7e:2a:13:35:23:5a:1e:0c:8e:10:96:7d:ac:e0:1c:
         bf:03:38:91:47:ad:ee:8a:2f:33:1f:6f:c8:7f:c4:63:ac:0c:
         9b:d1:f9:29:f7:1a:e0:d4:0c:79:68:65:75:f1:1c:c8:ad:e3:
         02:ce:8e:c0:99:d9:55:10:7d:38:d9:c0:d7:b7:de:6e:62:f8:
         ce:d9:68:60:0e:b4:1b:67:13:71:96:d9:23:0b:6e:5c:c3:e5:
         af:4f:e2:5a:11:08:62:a5:a6:a2:71:9c:ad:e8:33:d3:73:12:
         06:2c:c7:14:fe:e7:f8:91:81:8c:ea:04:7e:15:06:ca:fd:53:
         96:7b:ea:de:b5:be:cb:95:76:d7:71:bc:dc:15:70:96:c2:81:
         a0:aa:b0:1d:69:d5:f7:43:99:49:ba:2f:c8:3a:24:92:71:c0:
         73:d3:6a:7e:2f:7b:12:9e:fe:e7:55:35:bc:fb:b5:8d:eb:e1:
         d3:5c:9b:95:a4:06:04:7a:12:46:30:01:79:70:3e:6c:56:9f:
         ba:a6:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:18 2026 by rpki-client