Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          DAPOf/WqALG4tlL4QMlXEKZCg7Z3BzON7t0X3wWU+UE=
Subject key identifier:   A7:C5:62:23:9E:85:22:55:BF:79:28:EF:8D:58:66:92:0B:DC:64:61
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       0441
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          043D
Signing time:             Thu 26 Mar 2026 04:01:50 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:49 +0000
Manifest next update:     Sat 28 Mar 2026 04:01:49 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: ZVXSnnXrMtaXymzn9fHWfUofJKx4yfHGjZLnXM/OH5Y=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Mar 26 04:01:49 2026 GMT
            Not After : Mar 28 04:01:49 2026 GMT
        Subject: CN=69c4afae-731c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:ae:61:5f:84:18:81:e5:61:d6:68:a3:fd:
                    3f:90:df:31:58:79:1b:25:97:f7:b8:86:95:fc:b6:
                    7e:a9:78:14:06:cb:b2:70:96:15:e0:a7:75:c1:7f:
                    07:bb:e0:ad:f8:19:ed:e6:c2:e3:04:0b:fd:2b:34:
                    85:b4:12:33:68:83:64:ff:27:16:6d:d7:fc:c8:ec:
                    07:7a:4f:36:be:67:e0:81:80:fa:88:68:2f:bf:e3:
                    22:17:48:f0:12:a6:d8:b0:fe:89:60:4b:44:d9:6a:
                    f6:7c:fd:08:36:d6:f1:2c:fd:a1:47:63:9e:e9:fb:
                    0d:b6:87:a5:3d:90:51:a6:ae:97:17:39:d9:c9:38:
                    fd:95:6a:9f:ec:ee:35:f1:04:1e:4f:af:7c:2b:3e:
                    ef:f4:fb:8e:26:83:b5:56:04:29:83:ac:5d:5c:c1:
                    3b:2b:1d:48:1c:69:56:35:6c:a0:d1:7c:0b:68:90:
                    2f:8d:94:1e:13:01:c9:4a:7f:d4:99:ec:0f:11:e9:
                    3d:72:75:cc:a4:ff:fd:9b:7b:24:bc:5c:9b:4a:cc:
                    0b:01:d6:e1:e9:cf:ec:fb:e6:17:4c:48:d9:02:75:
                    91:1e:5e:06:48:be:20:87:1a:12:ab:d7:95:2c:32:
                    50:e0:d7:0a:c7:97:52:d5:cb:a5:8d:74:1e:e9:66:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C5:62:23:9E:85:22:55:BF:79:28:EF:8D:58:66:92:0B:DC:64:61
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:84:1b:74:3d:bb:54:de:fa:03:c1:46:f5:33:5a:2c:10:51:
         25:8f:6d:8f:fd:6e:c2:84:4f:14:a2:e9:92:60:0b:22:2a:ba:
         b0:1a:3b:91:20:9c:49:46:69:4f:46:0a:45:d0:99:b8:3f:9d:
         be:96:48:79:43:10:28:7a:0a:6b:eb:11:cf:23:5a:7b:71:cc:
         16:4b:bb:ff:f6:29:15:66:7e:b8:43:af:cf:36:54:10:42:fd:
         74:9b:28:fa:fb:20:07:03:f1:06:8d:a9:9d:ac:55:63:96:bb:
         2c:76:43:77:29:18:f5:97:da:a0:61:3e:6b:b5:03:c2:09:0d:
         ed:d9:3c:8c:6f:9d:dc:2b:f0:b3:e0:38:c5:ea:78:e6:a0:64:
         15:be:cd:33:f7:bf:9f:b4:09:7b:20:76:df:e3:7d:05:16:ee:
         43:e6:e6:6c:39:72:c2:0e:0e:55:b0:50:f1:c6:43:85:4b:0e:
         58:64:60:f7:7b:89:7b:51:a9:70:ea:ad:f8:2c:96:98:51:47:
         92:9a:53:36:93:d2:c5:51:03:89:f1:3e:81:b0:09:f6:29:71:
         50:5a:b8:3d:a0:69:93:24:38:a3:fd:bc:dc:44:05:c9:51:2a:
         3b:e1:fe:5d:55:97:59:31:25:99:ed:5e:2c:36:1c:30:7f:ee:
         ca:7e:ae:8c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUwNURBRjExMC8GA1UEBRMoMUREQjhFOTMxRjU3QTkyODE3NjQ5ODMwQzRFRDhB
REQ3NEVGNDlGOTAeFw0yNjAzMjYwNDAxNDlaFw0yNjAzMjgwNDAxNDlaMBgxFjAU
BgNVBAMTDTY5YzRhZmFlLTczMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQgq5hX4QYgeVh1mij/T+Q3zFYeRsll/e4hpX8tn6peBQGy7JwlhXgp3XB
fwe74K34Ge3mwuMEC/0rNIW0EjNog2T/JxZt1/zI7Ad6Tza+Z+CBgPqIaC+/4yIX
SPASptiw/olgS0TZavZ8/Qg21vEs/aFHY57p+w22h6U9kFGmrpcXOdnJOP2Vap/s
7jXxBB5Pr3wrPu/0+44mg7VWBCmDrF1cwTsrHUgcaVY1bKDRfAtokC+NlB4TAclK
f9SZ7A8R6T1ydcyk//2beyS8XJtKzAsB1uHpz+z75hdMSNkCdZEeXgZIviCHGhKr
15UsMlDg1wrHl1LVy6WNdB7pZszhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUp8Vi
I56FIlW/eSjvjVhmkgvcZGEwHwYDVR0jBBgwFoAUHduOkx9XqSgXZJgwxO2K3XTv
SfkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MDVELzFGQjFCNEIwRUU1RjExRURBODIxOUM1QTRBRDlFNkZDL0hkdU9r
eDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkdU9reDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjUwNUQvMUZCMUI0QjBFRTVGMTFFREE4MjE5QzVBNEFE
OUU2RkMvSGR1T2t4OVhxU2dYWkpnd3hPMkszWFR2U2ZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGhBt0PbtU3voDwUb1M1osEFElj22P
/W7ChE8UoumSYAsiKrqwGjuRIJxJRmlPRgpF0Jm4P52+lkh5QxAoegpr6xHPI1p7
ccwWS7v/9ikVZn64Q6/PNlQQQv10myj6+yAHA/EGjamdrFVjlrssdkN3KRj1l9qg
YT5rtQPCCQ3t2TyMb53cK/Cz4DjF6njmoGQVvs0z97+ftAl7IHbf430FFu5D5uZs
OXLCDg5VsFDxxkOFSw5YZGD3e4l7Ualw6q34LJaYUUeSmlM2k9LFUQOJ8T6BsAn2
KXFQWrg9oGmTJDij/bzcRAXJUSo74f5dVZdZMSWZ7V4sNhwwf+7Kfq6M
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:26 2026 by rpki-client