Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File:                     HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier:          jw7lM2GqHVya76DeFBNgkNwDdUkTGnctSoz6/CUFS7A=
Subject key identifier:   F3:99:E4:A0:B9:94:A9:D1:F3:58:AF:3C:6F:CF:A3:7D:1B:83:D1:0C
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer:       /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial:       0460
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number:          045D
Signing time:             Fri 24 Jul 2026 03:36:31 +0000
Manifest this update:     Fri 24 Jul 2026 03:36:30 +0000
Manifest next update:     Sun 26 Jul 2026 03:36:30 +0000
Files and hashes:         1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: NGhf3PQCSYf2gIsUCaXMkRjEk+O3uSXjWTEL2OY3blE=)
                          2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
                          3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
        Validity
            Not Before: Jul 24 03:36:30 2026 GMT
            Not After : Jul 26 03:36:30 2026 GMT
        Subject: CN=6a62ddbf-4b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:ab:76:c7:88:5b:eb:9d:34:5c:99:d4:40:
                    d5:c6:28:ab:4f:df:ac:70:38:6e:67:3f:67:7c:68:
                    dd:bc:f9:9a:7e:56:fe:48:09:7e:4a:05:cf:e3:a9:
                    c2:ef:c2:02:2a:15:44:72:1b:98:e7:93:95:2e:5a:
                    15:fc:b3:48:2e:ee:ef:f5:44:7f:97:32:44:57:8c:
                    df:7f:7d:6e:9b:ae:25:f9:0c:0f:5a:fe:ea:af:2b:
                    f6:39:ec:94:98:f7:07:b8:a1:37:84:cd:ab:b9:93:
                    a3:85:b2:b0:52:e2:66:42:4e:d8:5a:0e:88:27:b1:
                    87:ee:50:d8:fa:e1:9a:b4:95:3f:97:4b:f6:65:0d:
                    9b:ef:57:ac:f3:5a:c8:97:dc:77:73:30:0f:93:00:
                    d2:4a:27:59:61:92:ac:c4:e3:ee:53:9d:c1:6a:a7:
                    24:47:05:2d:80:65:2c:02:63:21:1b:05:26:0a:e0:
                    a7:2c:0b:ae:29:f8:89:7d:9f:94:1e:51:b8:70:dd:
                    b4:39:39:12:aa:9a:ad:0e:bc:47:71:49:c8:b0:5d:
                    71:0d:18:b8:73:0a:50:3b:cb:a1:9b:d5:a5:58:57:
                    21:ad:a3:d9:83:a4:e0:62:f5:4a:6d:b8:0f:81:a7:
                    c7:cd:b9:40:10:7e:bb:33:bd:aa:d7:2a:13:1b:fc:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:99:E4:A0:B9:94:A9:D1:F3:58:AF:3C:6F:CF:A3:7D:1B:83:D1:0C
            X509v3 Authority Key Identifier:
                keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:f6:f9:d3:a0:c6:5e:a5:09:b6:d4:60:d8:3c:f0:f3:99:
         5e:9c:d1:ba:32:08:a2:ce:2d:68:df:31:46:1f:23:db:b6:cc:
         4e:f6:f7:4d:14:fd:08:94:a9:2a:91:86:a2:89:92:c9:4f:54:
         8e:7a:37:ed:26:70:c6:be:9c:74:cd:08:1a:15:1b:22:8a:e2:
         9b:5a:73:68:2e:cf:1a:b4:0f:74:1a:be:81:fc:8f:7a:d6:0b:
         b3:6d:3f:a6:b4:32:b2:58:64:7c:d3:4a:79:56:60:9b:f3:68:
         ae:ee:44:0b:f2:f4:ba:8f:77:27:b4:96:c8:92:e0:0f:f0:58:
         aa:cc:79:17:8c:7f:11:dc:1f:24:38:11:35:8d:09:1d:bf:52:
         7c:e3:b5:13:81:80:e2:24:57:58:25:05:f5:26:96:ff:f6:54:
         2e:13:4e:0b:e4:44:f3:45:d7:8e:8c:ce:c1:99:74:42:00:97:
         db:0f:62:1f:d8:49:62:55:77:d9:9d:16:0d:ff:1d:71:34:26:
         14:18:53:72:b7:0c:a7:96:58:bf:af:1b:4b:29:e1:75:0d:2a:
         96:7d:43:18:3f:86:05:54:4e:18:98:5c:da:f8:b5:be:25:54:
         bd:a0:e7:fa:0d:1e:9d:20:9c:50:6e:63:ef:77:cc:d9:83:45:
         6d:95:a7:3b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjE0M0ZBRjExMC8GA1UEBRMoMUU4OTRFQzBCMjg2QTZFREQ5MzExN0Q3QTNCRENE
OEY1NzcxMDE5RDAeFw0yNjA3MjQwMzM2MzBaFw0yNjA3MjYwMzM2MzBaMBgxFjAU
BgNVBAMTDTZhNjJkZGJmLTRiNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjLqt2x4hb6500XJnUQNXGKKtP36xwOG5nP2d8aN28+Zp+Vv5ICX5KBc/j
qcLvwgIqFURyG5jnk5UuWhX8s0gu7u/1RH+XMkRXjN9/fW6briX5DA9a/uqvK/Y5
7JSY9we4oTeEzau5k6OFsrBS4mZCTthaDognsYfuUNj64Zq0lT+XS/ZlDZvvV6zz
WsiX3HdzMA+TANJKJ1lhkqzE4+5TncFqpyRHBS2AZSwCYyEbBSYK4KcsC64p+Il9
n5QeUbhw3bQ5ORKqmq0OvEdxSciwXXENGLhzClA7y6Gb1aVYVyGto9mDpOBi9Upt
uA+Bp8fNuUAQfrszvarXKhMb/NNRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU85nk
oLmUqdHzWK88b8+jfRuD0QwwHwYDVR0jBBgwFoAUHolOwLKGpu3ZMRfXo73Nj1dx
AZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxNDNGLzU0QkJENzQ0MzE0NDExRUVBRDQ5MzEzRTRBRDlFNkZDL0hvbE93
TEtHcHUzWk1SZlhvNzNOajFkeEFaMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hvbE93TEtHcHUzWk1SZlhvNzNOajFkeEFaMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjE0M0YvNTRCQkQ3NDQzMTQ0MTFFRUFENDkzMTNFNEFE
OUU2RkMvSG9sT3dMS0dwdTNaTVJmWG83M05qMWR4QVowLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXevb506DGXqUJttRg2Dzw85lenNG6
Mgiizi1o3zFGHyPbtsxO9vdNFP0IlKkqkYaiiZLJT1SOejftJnDGvpx0zQgaFRsi
iuKbWnNoLs8atA90Gr6B/I961guzbT+mtDKyWGR800p5VmCb82iu7kQL8vS6j3cn
tJbIkuAP8FiqzHkXjH8R3B8kOBE1jQkdv1J847UTgYDiJFdYJQX1Jpb/9lQuE04L
5ETzRdeOjM7BmXRCAJfbD2If2EliVXfZnRYN/x1xNCYUGFNytwynlli/rxtLKeF1
DSqWfUMYP4YFVE4YmFza+LW+JVS9oOf6DR6dIJxQbmPvd8zZg0Vtlac7
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:23 2026 by rpki-client