Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          jz7mqm4LI2O07QXl9C4Wu4s5Dv1cnutELZ+HOtrolU4=
Subject key identifier:   AA:08:A8:77:84:AD:DF:4D:1F:C0:74:ED:4F:B1:97:AA:B9:E1:20:C2
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0A2C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0A2B
Signing time:             Wed 13 May 2026 01:23:27 +0000
Manifest this update:     Wed 13 May 2026 01:23:26 +0000
Manifest next update:     Fri 15 May 2026 01:23:26 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: ihmIEpAdh8KSMBy9USjtYTUZQUKKaT3RWURe18fonrY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: May 13 01:23:26 2026 GMT
            Not After : May 15 01:23:26 2026 GMT
        Subject: CN=6a03d28f-053a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:9e:a3:c8:cf:b4:ee:c9:be:33:f2:ae:27:
                    e8:3e:a0:59:ab:dd:ff:a1:4e:06:21:0b:c8:9f:a3:
                    37:39:ed:5e:1f:6c:98:98:0b:d1:55:33:61:ae:68:
                    05:73:99:28:d4:97:8b:6f:52:9f:79:d8:f1:92:5e:
                    a7:a4:06:13:52:79:c6:2b:c8:5c:17:cf:15:56:8e:
                    2b:04:f8:8f:d0:4f:90:e4:05:23:99:f4:22:6f:51:
                    9c:af:5e:13:2a:0f:d9:a5:60:1f:01:a8:52:02:5f:
                    bb:fc:a4:10:ec:23:bb:83:21:1c:7a:3f:e4:4e:18:
                    82:21:af:a6:7a:89:76:95:ce:29:f4:d4:1a:94:56:
                    c6:9b:5b:db:e0:7b:a3:a5:96:28:e7:f1:f7:5a:db:
                    1d:74:c1:16:43:30:cb:23:a3:65:26:3d:5c:b3:f9:
                    fe:96:19:e4:93:ad:4d:1d:5b:48:b6:9a:f0:b2:e3:
                    c1:20:c1:ea:45:4a:b3:d4:7b:1c:ec:1f:a5:db:69:
                    d2:2f:f0:e9:14:15:51:65:08:26:90:ae:86:41:2b:
                    8e:48:76:47:4a:ae:1d:da:7f:90:ef:e4:c7:65:0f:
                    17:51:55:ce:3d:dc:69:17:4f:73:b9:27:20:16:88:
                    93:f4:85:19:c8:b5:d2:e1:33:cb:49:f8:f7:b5:0a:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:08:A8:77:84:AD:DF:4D:1F:C0:74:ED:4F:B1:97:AA:B9:E1:20:C2
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:16:be:ce:56:c5:cc:2e:c4:58:21:2d:29:a8:d9:74:b7:46:
         bb:3c:7a:1f:c0:f8:6c:14:fd:58:75:2c:96:24:7a:bd:dc:3c:
         ad:ca:25:5f:7d:65:e5:1f:90:5e:0d:37:24:4f:60:d1:3e:c3:
         3f:c0:9d:a8:0d:c1:0c:d0:2b:71:c8:04:95:8f:5e:6a:4a:1b:
         48:84:45:c3:66:af:8c:d4:52:b3:7c:76:77:88:f4:f7:8a:5d:
         e3:e5:4b:80:0a:f5:c7:58:b5:ff:b6:22:e4:3c:80:6a:9a:e6:
         f8:8e:86:f4:c4:e8:93:a0:e1:f3:9a:63:4c:ea:ae:f0:4d:a5:
         70:bd:72:61:62:1d:df:89:4d:96:db:5a:40:ee:81:93:76:77:
         48:6d:5e:31:7d:82:5a:21:f8:e4:cd:ff:0a:f2:2c:a4:1d:9a:
         9a:94:67:6e:ce:2b:22:bb:b4:8d:0a:f1:63:45:f7:54:0d:13:
         b5:af:ad:d2:0d:67:8d:8b:0c:7a:4f:5f:a9:84:05:b0:72:52:
         41:e1:e6:31:1d:f5:f6:53:ee:42:af:b5:31:77:05:ac:ad:e9:
         3f:fd:15:0a:e5:af:e1:19:77:b6:d5:2a:4c:eb:8d:b0:e1:92:
         59:a3:a9:c7:9d:b1:c9:d9:40:d2:46:a3:59:e9:bb:97:a9:f9:
         e7:cb:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:32 2026 by rpki-client