Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File:                     XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier:          hOECyaR0irwCB7QWdWKC8uRhurfy+N+PHHEyRxwgadU=
Subject key identifier:   32:2B:DE:A0:34:F9:5C:C7:59:38:95:1B:71:35:59:8B:84:C6:71:C6
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer:       /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial:       C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number:          C3
Signing time:             Fri 24 Jul 2026 05:22:34 +0000
Manifest this update:     Fri 24 Jul 2026 05:22:33 +0000
Manifest next update:     Sun 26 Jul 2026 05:22:33 +0000
Files and hashes:         1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: 2dhXH9Hi5IXFx7tWvbPngxdOxNv9/Ltx4legWcXMpGo=)
                          2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
        Validity
            Not Before: Jul 24 05:22:33 2026 GMT
            Not After : Jul 26 05:22:33 2026 GMT
        Subject: CN=6a62f69a-52d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:20:56:4f:1b:0c:30:bd:d0:23:91:c1:7a:
                    3b:a1:9b:29:18:2e:91:78:34:b8:24:44:bc:0d:96:
                    30:57:4a:ca:5c:28:44:a3:4a:a5:75:99:3f:93:ba:
                    76:38:04:d1:f8:89:c1:e7:9f:43:ee:69:c9:5b:d0:
                    13:d9:1f:82:03:74:40:50:fa:d1:77:d4:6e:45:66:
                    e2:a6:c1:e7:a2:5a:28:87:c8:95:0c:e6:a4:03:4d:
                    63:42:fc:53:be:84:75:e1:6a:5b:86:af:73:4a:74:
                    fb:43:2d:65:a5:e7:25:fb:d2:08:9d:3b:3d:41:09:
                    a5:6c:6a:02:f3:a4:cd:98:41:47:35:48:dc:2d:21:
                    a0:84:10:66:1f:f3:7b:f2:d5:be:be:67:f7:ff:25:
                    1a:ea:45:a7:4e:e4:f9:37:bf:f7:91:43:0c:2c:dd:
                    95:87:76:ed:86:69:3c:4f:fa:1b:ce:7f:a1:3e:23:
                    f5:c3:19:38:5f:00:db:be:1d:a7:da:b5:13:c9:9b:
                    b9:97:87:1b:4e:f3:bb:61:ce:7b:98:6f:67:27:39:
                    cd:79:4c:9b:1d:68:73:f1:c5:0f:8a:82:c9:c4:3c:
                    a7:28:5a:c4:8a:4c:0a:50:66:95:c1:25:e5:cd:d9:
                    38:e2:ba:08:64:1b:18:e5:af:66:6f:08:94:78:68:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2B:DE:A0:34:F9:5C:C7:59:38:95:1B:71:35:59:8B:84:C6:71:C6
            X509v3 Authority Key Identifier:
                keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:fc:f1:ac:5c:19:db:bb:70:aa:54:60:cf:a9:41:66:59:1d:
         d8:fb:3d:f8:94:14:86:00:3e:2b:34:18:5d:7d:b0:ad:82:1a:
         16:a1:cc:93:f5:1f:0a:34:27:01:28:b4:d6:17:5e:4d:1c:0a:
         1d:2d:63:86:eb:cd:c4:ff:04:64:bb:ee:07:a8:46:fd:db:f3:
         24:22:28:1d:c9:59:6b:14:ec:8a:33:2b:bb:dd:20:b2:e5:64:
         39:c5:d5:fe:10:40:8f:fa:ad:ca:ec:66:a3:cc:ed:bf:66:0a:
         ee:c8:01:8f:71:13:d4:94:4b:b6:a4:40:12:e5:3e:c0:42:7c:
         21:f2:b8:cc:e9:43:65:cd:41:d3:3e:07:ff:a9:02:48:89:7a:
         99:cb:ab:06:ba:d5:d9:fa:37:21:db:63:46:96:08:e5:36:cf:
         01:2e:59:47:1b:b2:b3:60:5b:30:0d:51:52:fb:96:c6:75:3c:
         aa:a5:44:61:a2:94:55:60:03:f5:83:44:34:99:59:97:e7:e4:
         8b:34:4a:8c:f0:55:74:ad:9b:a0:7d:87:7f:5d:8b:16:f8:81:
         cc:ce:b5:17:d6:de:be:9a:bf:88:f3:35:b8:10:af:09:96:ec:
         59:3d:78:37:77:04:b3:fc:eb:b6:05:97:ed:fd:38:fd:08:e8:
         c0:18:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:41 2026 by rpki-client