Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
File:                     hOOlVdJh3TLxBhVGYpV82qCdDQY.mft (raw, json)
Hash identifier:          EtU9M6jQGyE47Gj3Y11KSzDNIuPYGl2t1z3H7v5Ay1g=
Subject key identifier:   FF:B2:5C:5C:F8:17:E9:3C:6F:F4:0B:36:9C:2F:70:5A:8D:8A:FF:5B
Authority key identifier: 84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06
Certificate issuer:       /CN=F36E05BFAF/serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
Certificate serial:       05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
Manifest number:          05
Signing time:             Tue 12 May 2026 05:36:16 +0000
Manifest this update:     Tue 12 May 2026 05:36:16 +0000
Manifest next update:     Thu 14 May 2026 05:36:16 +0000
Files and hashes:         1: hOOlVdJh3TLxBhVGYpV82qCdDQY.crl (hash: c9CuktmSmjkdjOL3LUyE5vDJP1LKJKNqlXH+Aefdvf4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E05BFAF, serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
        Validity
            Not Before: May 12 05:36:16 2026 GMT
            Not After : May 14 05:36:16 2026 GMT
        Subject: CN=6a02bc50-a560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:04:06:6e:cc:87:43:44:80:d8:2a:54:d4:
                    09:48:8e:e9:c5:2b:57:a2:df:25:37:13:c8:dc:cf:
                    e0:20:75:7e:3c:2a:ab:0a:15:98:93:36:bf:10:40:
                    df:04:5e:44:28:5f:55:42:b2:7b:77:ff:99:dd:34:
                    ef:66:29:60:99:e1:ee:32:ff:12:6c:27:7e:93:5a:
                    29:e4:c8:b5:dc:bc:a4:92:c8:81:5c:aa:77:1e:1b:
                    bc:65:92:0f:3b:b0:07:df:b7:f0:f3:32:69:99:fc:
                    bf:77:bb:95:de:03:bd:30:d2:24:cd:6b:5e:6b:22:
                    1a:1f:0f:08:43:fe:b3:fd:e2:94:f9:4b:34:02:4b:
                    2a:4e:22:4c:88:d7:3f:f9:a9:09:ce:80:89:e1:16:
                    c7:1d:15:f3:f7:5a:84:17:de:53:c0:89:1c:bc:6d:
                    c4:eb:7e:83:29:db:78:d0:8c:35:c2:30:b9:33:65:
                    c3:64:e0:b0:7a:34:8b:d1:b4:18:01:4c:11:b6:38:
                    4a:9c:ca:e5:b7:c2:ac:6d:0f:b3:6b:12:95:11:24:
                    5c:43:87:50:e1:cb:1c:54:3f:1d:93:3f:8d:4f:3b:
                    64:3c:12:46:59:9c:6b:60:fa:10:38:5a:e4:51:41:
                    2f:c1:34:fa:0f:d4:d9:a0:b8:53:df:fb:e0:4a:03:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B2:5C:5C:F8:17:E9:3C:6F:F4:0B:36:9C:2F:70:5A:8D:8A:FF:5B
            X509v3 Authority Key Identifier:
                keyid:84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0c:49:b8:19:c7:0f:47:fa:0e:0f:ce:f8:e1:ec:72:f1:aa:
         43:b6:6e:10:12:95:3d:75:1b:48:40:07:19:3a:94:c6:8d:8b:
         a0:f3:91:c6:76:7b:f8:44:a7:a9:b8:b2:41:ba:f3:97:99:6d:
         54:d4:77:29:47:ea:de:d6:7e:93:6c:00:2e:67:19:58:d8:af:
         5d:ad:c2:ba:c9:69:67:93:20:2f:21:65:17:ef:f3:8d:8f:25:
         07:28:0b:09:a6:0f:c5:13:a6:54:c0:f8:06:67:e9:ec:19:a8:
         2a:34:93:bf:e3:1d:5a:47:ba:6b:bf:35:2e:53:4f:f6:ff:70:
         52:bd:72:57:b4:b1:66:0c:5b:1f:a6:62:3c:31:46:8e:1f:8b:
         8e:c9:d4:24:7c:9b:45:16:62:2b:15:c8:26:d7:4d:67:ff:41:
         a9:0f:6f:9c:52:61:0f:aa:d6:e3:66:6b:83:0f:51:1e:85:63:
         b6:a2:3e:3f:37:eb:d8:d2:68:67:42:75:dd:e6:94:5d:ee:3f:
         71:56:06:16:f2:90:49:a1:32:97:3d:2d:c7:60:c9:bd:e3:95:
         ac:6e:06:88:75:03:53:fd:4e:b4:ce:53:24:ac:d6:67:50:16:
         12:75:88:7b:9a:c2:68:da:6d:39:1d:73:4c:a0:1a:f9:4d:17:
         09:a2:0c:79
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
MDVCRkFGMTEwLwYDVQQFEyg4NEUzQTU1NUQyNjFERDMyRjEwNjE1NDY2Mjk1N0NE
QUEwOUQwRDA2MB4XDTI2MDUxMjA1MzYxNloXDTI2MDUxNDA1MzYxNlowGDEWMBQG
A1UEAxMNNmEwMmJjNTAtYTU2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOVpBAZuzIdDRIDYKlTUCUiO6cUrV6LfJTcTyNzP4CB1fjwqqwoVmJM2vxBA
3wReRChfVUKye3f/md0072YpYJnh7jL/EmwnfpNaKeTItdy8pJLIgVyqdx4bvGWS
DzuwB9+38PMyaZn8v3e7ld4DvTDSJM1rXmsiGh8PCEP+s/3ilPlLNAJLKk4iTIjX
P/mpCc6AieEWxx0V8/dahBfeU8CJHLxtxOt+gynbeNCMNcIwuTNlw2TgsHo0i9G0
GAFMEbY4SpzK5bfCrG0Ps2sSlREkXEOHUOHLHFQ/HZM/jU87ZDwSRlmca2D6EDha
5FFBL8E0+g/U2aC4U9/74EoD+psCAwEAAaOCArgwggK0MB0GA1UdDgQWBBT/slxc
+BfpPG/0CzacL3BajYr/WzAfBgNVHSMEGDAWgBSE46VV0mHdMvEGFUZilXzaoJ0N
BjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTA1QkYvODU0Q0RCM0E0QkFDMTFGMUE2Mjg0MTA2Q0YxRDM4QjAvaE9PbFZk
SmgzVEx4QmhWR1lwVjgycUNkRFFZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaE9PbFZkSmgzVEx4QmhWR1lwVjgycUNkRFFZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFMDVCRi84NTRDREIzQTRCQUMxMUYxQTYyODQxMDZDRjFE
MzhCMC9oT09sVmRKaDNUTHhCaFZHWXBWODJxQ2REUVkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADYMSbgZxw9H+g4Pzvjh7HLxqkO2bhAS
lT11G0hABxk6lMaNi6DzkcZ2e/hEp6m4skG685eZbVTUdylH6t7WfpNsAC5nGVjY
r12twrrJaWeTIC8hZRfv842PJQcoCwmmD8UTplTA+AZn6ewZqCo0k7/jHVpHumu/
NS5TT/b/cFK9cle0sWYMWx+mYjwxRo4fi47J1CR8m0UWYisVyCbXTWf/QakPb5xS
YQ+q1uNma4MPUR6FY7aiPj8369jSaGdCdd3mlF3uP3FWBhbykEmhMpc9Lcdgyb3j
laxuBoh1A1P9TrTOUySs1mdQFhJ1iHuawmjabTkdc0ygGvlNFwmiDHk=
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:38 2026 by rpki-client