Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          MOmP7yT+H+6xocK+r6r338zY3kyZga9kHiJWBuy0emw=
Subject key identifier:   34:B2:05:91:CB:0C:DE:D3:CF:D2:0D:46:B6:14:56:D5:C3:4C:CD:35
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       08B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          08AD
Signing time:             Thu 26 Mar 2026 02:00:06 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:05 +0000
Manifest next update:     Sat 28 Mar 2026 02:00:05 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: UgjsN94u3evAzzMhGa7hwb6m3R/xQXd8gmKp1co2gJg=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Mar 26 02:00:05 2026 GMT
            Not After : Mar 28 02:00:05 2026 GMT
        Subject: CN=69c49326-1c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:56:88:8f:dc:1e:b8:4a:73:03:aa:36:b3:
                    ce:6c:9a:50:32:55:c5:67:84:54:71:af:81:50:62:
                    78:44:59:de:6c:16:05:5c:cf:b6:82:48:50:fd:18:
                    73:11:27:1d:42:c9:db:9a:85:08:ae:2c:fc:cb:9c:
                    e2:c3:db:b9:dd:20:b5:b8:e4:80:a2:1a:a2:54:d8:
                    fa:88:94:8c:23:2b:c3:1a:6f:63:15:24:59:cd:fe:
                    c7:81:97:8c:e9:2c:f9:5d:fe:2b:4a:77:f4:02:3d:
                    46:1f:ec:ee:66:39:47:74:6d:7c:21:58:e8:30:18:
                    61:1b:1b:d0:1f:7a:69:9b:57:93:14:67:f5:d6:3b:
                    5f:91:0e:da:16:a8:cc:12:c3:6e:cc:b2:40:98:67:
                    8e:9e:a3:aa:a9:81:5f:ac:0b:c0:5b:4a:57:2a:7e:
                    26:cd:b0:5d:8a:7e:89:f6:25:37:9e:ae:c7:70:ed:
                    68:75:b5:3e:e4:a3:2c:5d:7c:a2:77:7e:f5:d5:4e:
                    da:49:38:eb:26:df:91:d2:7d:b8:45:13:70:1a:83:
                    aa:16:90:f0:3a:c5:b5:3a:41:1e:1c:a6:da:a6:bf:
                    e0:b9:38:11:eb:69:f7:ab:6d:35:37:3a:8b:c4:62:
                    cd:43:42:7b:84:97:13:c3:85:a0:71:1c:cd:01:2d:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B2:05:91:CB:0C:DE:D3:CF:D2:0D:46:B6:14:56:D5:C3:4C:CD:35
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:72:6b:c4:8b:b9:ab:d5:ff:6f:f5:e4:66:49:d0:4b:95:98:
         e2:95:85:07:3b:f3:54:9f:ca:f0:6f:cd:87:dc:54:04:5f:d2:
         0b:e2:7b:32:4b:81:81:23:f1:af:54:7d:0a:9b:a5:72:e6:48:
         91:e5:d8:77:8c:3a:3c:16:f7:44:f5:a6:0e:c0:24:04:11:15:
         15:41:82:cf:7e:46:a4:d0:21:17:5e:9b:40:09:d8:06:7e:7c:
         f0:5c:a1:43:d4:c7:97:f9:13:0c:15:ec:a5:ae:11:e0:0f:df:
         bf:65:a3:5d:fd:3a:90:5c:87:03:b3:79:5b:ce:ab:ea:7d:c3:
         12:1d:e9:22:32:8b:cc:41:e0:8b:e0:21:d7:d9:ec:10:ea:24:
         99:68:de:a8:07:4e:03:e5:f4:7d:a1:cc:e0:e0:d3:f8:a6:c4:
         e2:1a:33:87:f8:b8:c6:dc:3d:f6:b3:6f:d5:ba:b8:48:39:ba:
         f0:12:43:e2:cd:67:e0:59:65:7a:24:31:8b:1f:2f:e4:68:f6:
         6e:c1:2c:22:17:8d:db:c6:b3:f6:bb:2b:1b:77:04:23:72:3f:
         69:40:fc:49:c8:cc:f4:9f:ab:d3:75:9e:17:c9:48:d0:ef:2b:
         48:b3:c2:e4:07:68:aa:8d:b6:a7:01:76:07:7c:6f:62:d9:d6:
         8b:e5:4d:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUxNzNBRjExMC8GA1UEBRMoODVBOTVBREQyQ0Y1ODc3NDAzMEI2QTlCOTNCNDEx
Mzg2RkUzMDY0MDAeFw0yNjAzMjYwMjAwMDVaFw0yNjAzMjgwMjAwMDVaMBgxFjAU
BgNVBAMTDTY5YzQ5MzI2LTFjMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOTlaIj9weuEpzA6o2s85smlAyVcVnhFRxr4FQYnhEWd5sFgVcz7aCSFD9
GHMRJx1CyduahQiuLPzLnOLD27ndILW45ICiGqJU2PqIlIwjK8Mab2MVJFnN/seB
l4zpLPld/itKd/QCPUYf7O5mOUd0bXwhWOgwGGEbG9AfemmbV5MUZ/XWO1+RDtoW
qMwSw27MskCYZ46eo6qpgV+sC8BbSlcqfibNsF2Kfon2JTeersdw7Wh1tT7koyxd
fKJ3fvXVTtpJOOsm35HSfbhFE3Aag6oWkPA6xbU6QR4cptqmv+C5OBHraferbTU3
OovEYs1DQnuElxPDhaBxHM0BLckJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNLIF
kcsM3tPP0g1GthRW1cNMzTUwHwYDVR0jBBgwFoAUhala3Sz1h3QDC2qbk7QROG/j
BkAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MTczL0M2MTk0RkRDODYxRDExRUFCQUNFNUYyOEY4QUVBMjI4L2hhbGEz
U3oxaDNRREMycWJrN1FST0dfakJrQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hhbGEzU3oxaDNRREMycWJrN1FST0dfakJrQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjUxNzMvQzYxOTRGREM4NjFEMTFFQUJBQ0U1RjI4RjhB
RUEyMjgvaGFsYTNTejFoM1FEQzJxYms3UVJPR19qQmtBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEcmvEi7mr1f9v9eRmSdBLlZjilYUH
O/NUn8rwb82H3FQEX9IL4nsyS4GBI/GvVH0Km6Vy5kiR5dh3jDo8FvdE9aYOwCQE
ERUVQYLPfkak0CEXXptACdgGfnzwXKFD1MeX+RMMFeylrhHgD9+/ZaNd/TqQXIcD
s3lbzqvqfcMSHekiMovMQeCL4CHX2ewQ6iSZaN6oB04D5fR9oczg4NP4psTiGjOH
+LjG3D32s2/VurhIObrwEkPizWfgWWV6JDGLHy/kaPZuwSwiF43bxrP2uysbdwQj
cj9pQPxJyMz0n6vTdZ4XyUjQ7ytIs8LkB2iqjbanAXYHfG9i2daL5U0e
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:59 2026 by rpki-client