Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File:                     hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier:          J5rK5dmGm4tPWtLJ33GldOcKbcjYF6X/ebePyW/+8PQ=
Subject key identifier:   21:55:26:B1:34:10:E0:E1:0F:F2:45:8E:4A:AF:5B:74:FB:DB:49:84
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       0839
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number:          07EF
Signing time:             Wed 23 Sep 2026 02:21:32 +0000
Manifest this update:     Wed 23 Sep 2026 02:21:32 +0000
Manifest next update:     Fri 25 Sep 2026 02:21:32 +0000
Files and hashes:         1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: 2q+rEVOPOrZwdrIL1HLAxa/BrPPOJbpfSo1CuF17+bw=)
                          2: 3B0BC528A8E011F08381ECAFDAE4EC9C.roa (hash: p8rygDaqMlfKM5+mFXH3h51l6FuqzUHfYdCJkipQXZk=)
                          3: 5D4E3E2CB42911F1A7228ADFCE1D38B0.roa (hash: Sg21FeRg0sCbvKh+6dJ2xNE1rFfw9mLKthCDLQtSl8w=)
                          4: 582E5A0E1FB311F1988F6B9FDAE4EC9C.roa (hash: 0HSfpxd6RJw1dDAmVY8F6DqPcLyoD2dBDFLG8DPE+ZM=)
                          5: BF074D607AB911F19544E1E5CE1D38B0.roa (hash: qFoBsejg9FN/FDV2O6h7qkRNG5vip+EUMILXAArsA6s=)
                          6: 7C11FB3A8FD711F194865F12CF1D38B0.roa (hash: xF16zWSmkM/c3V8YjQqugs+5p0JlSIff3givFahh+9Y=)
                          7: 973F091E1FB311F18E80869FDAE4EC9C.roa (hash: CzHZTufJFyhjGHkpFVZuM6wyww8c6DnqEF6oCbO8Cz0=)
                          8: 004B1DF2B36811F0A98458F0DAE4EC9C.roa (hash: zkIpkIt6ml3z7EI6+y3S5IJ7YdnJfqyc+dJmlhiixtc=)
                          9: 31E310CCB5C411F1AC8E7ED9CE1D38B0.roa (hash: iWVWVjP77LsNaKIjHC8sf05lelaswMjolhlVLp8YwMA=)
                          10: E0978148B5C411F1A36DE3DDCE1D38B0.roa (hash: z5bG46DBUE3vNLEVMpI+LUmEIzU52A9/RHq13j9q2E0=)
                          11: 6DA8BDECBEF711F0BC88C8C8DAE4EC9C.roa (hash: mr6RFujr9br3UnulbLDbQG/tKZZBLEAMX2oMaBzTflg=)
                          12: DF36CBCABEF711F08A36B0CADAE4EC9C.roa (hash: AOAhdb8NfSG9X3GlC/Vi6d309IftduVQ5MLyZDqd8CA=)
                          13: 36A614CEB42A11F180BEC6E5CE1D38B0.roa (hash: aj9KPPBD12Iwz9ZD1UE6JBIBWDkqvN+k6I+NvFlEqAI=)
                          14: A59DE662B5C511F1B97B67E2CE1D38B0.roa (hash: D2enViRD9nEBljcCW0p8G2Wrk/CPIlQ8omhKxmpbPAE=)
                          15: FD95FA44B5C511F1BD3C9EE4CE1D38B0.roa (hash: JbbjFtzo3g6b4VR4ureyvlDyIMVyw9Db1qIxz067tJ4=)
                          16: 27636ED4B5C511F194E419E0CE1D38B0.roa (hash: ewBZP+o3gFUaiXSh3dLy0P/FBmeqa9KK37P6TR8GuE8=)
                          17: A0124150B36611F092119CE7DAE4EC9C.roa (hash: KPAVGIR+9gV2f09zVyhq7pMlJ/S3+kwqXxT6U4gqUlY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 23 02:21:32 2026 GMT
            Not After : Sep 25 02:21:32 2026 GMT
        Subject: CN=6ab337ac-a68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:ec:7a:4c:5c:f4:af:72:c1:54:7d:87:ff:
                    bb:9f:6f:81:57:47:cf:e0:88:e0:80:dc:7c:e8:6b:
                    65:4f:90:72:23:a7:db:d0:9a:26:b4:75:cb:25:99:
                    39:f8:be:ad:23:6a:f5:c8:25:95:09:6c:04:4c:b6:
                    de:8c:47:cf:b9:69:87:b8:1c:e8:58:1c:e9:5b:1c:
                    56:0d:7c:10:18:bd:51:9d:0f:b1:26:b3:87:d4:db:
                    76:59:47:9a:62:cf:81:35:7b:10:8d:bf:c5:ee:a1:
                    7d:22:75:da:1b:cf:60:e3:4a:b4:af:dd:20:42:7a:
                    93:c2:e1:4b:f1:5e:57:9b:cb:b8:2f:7a:2b:4f:66:
                    cb:5a:ba:a1:ea:cf:c6:5b:d0:36:de:ef:09:04:c0:
                    be:a3:f8:d4:7f:aa:cb:df:eb:41:a1:73:bd:1e:31:
                    e8:03:fa:b0:6b:ae:7d:0a:55:02:d0:77:67:ec:ef:
                    d0:f0:75:a4:1f:07:d6:1a:b4:8f:28:e0:f6:a7:50:
                    24:db:af:dc:1f:ef:a9:f8:af:11:f6:b0:96:0b:5e:
                    b7:25:83:b1:7f:5e:5b:77:e7:53:08:77:51:c4:e7:
                    07:11:c3:cb:29:6d:41:60:d4:ed:c5:e8:1d:47:1b:
                    65:84:7c:89:fb:26:2e:2e:e4:ac:ac:15:72:6f:ac:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:55:26:B1:34:10:E0:E1:0F:F2:45:8E:4A:AF:5B:74:FB:DB:49:84
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:20:62:39:fe:8e:07:30:d3:4c:2c:75:b5:16:47:61:dd:50:
         23:0c:26:65:27:2e:f9:47:6a:07:73:0b:b4:b9:0b:c8:c1:21:
         ed:fe:1e:b6:82:92:9d:0e:7f:35:e8:3e:66:17:75:13:1b:f9:
         bb:44:f0:a3:7a:5b:b5:ee:62:17:df:fd:96:9a:90:0f:dc:5f:
         a3:be:74:e3:2b:87:7e:ca:48:42:4f:4e:9c:8c:c4:33:0a:9f:
         71:f2:65:ad:af:f9:c4:84:d3:e6:46:e1:b3:88:66:bf:30:39:
         61:59:48:5a:4e:0c:f0:b2:f9:f4:ea:04:85:33:c5:1f:a0:46:
         62:be:2f:c6:bf:0e:58:37:e3:c9:1e:b2:79:dd:ca:fe:75:e6:
         ce:5f:36:16:d4:0c:f1:01:5f:61:08:84:6b:cf:f1:d2:2d:50:
         3c:c1:13:4d:32:b6:a4:e7:ab:ca:3c:b5:b6:5e:d9:d2:d5:a4:
         94:62:9e:02:75:80:49:de:f1:c1:59:0f:00:5f:8b:b9:2b:03:
         89:5c:01:d7:3a:58:31:6d:9d:3e:c0:98:ea:b0:b8:33:f9:cf:
         80:f7:cb:36:de:18:c9:a6:86:da:80:ea:88:5b:78:68:e8:af:
         93:19:4c:10:b8:e2:3d:71:73:c5:d0:c5:6b:56:da:db:27:df:
         d7:63:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----