Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          hotxppMViSZGu5Tejb9Q0t0fS9W2I3b4ETHgNakxCoE=
Subject key identifier:   6C:CA:56:07:53:61:F3:02:CC:BE:A3:D2:A9:13:98:BF:32:77:6E:1E
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       0967
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          0963
Signing time:             Wed 23 Sep 2026 01:47:49 +0000
Manifest this update:     Wed 23 Sep 2026 01:47:48 +0000
Manifest next update:     Fri 25 Sep 2026 01:47:48 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: iY+XTNJWxq0uC5bRuBzN86evFmidIP/StnN5CVz7XFk=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Sep 23 01:47:48 2026 GMT
            Not After : Sep 25 01:47:48 2026 GMT
        Subject: CN=6ab32fc5-994f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:10:6d:72:41:0d:18:84:4f:a2:37:80:48:
                    c4:d7:50:d8:e0:04:ca:b9:83:82:62:d3:75:0e:05:
                    ae:d3:5c:77:58:22:75:38:ee:f8:5d:e5:21:d2:29:
                    8b:1a:9a:5a:19:a6:70:b0:40:f4:de:fe:52:1c:6b:
                    46:5e:c4:db:c9:5b:00:71:51:7c:0a:f3:c0:17:b9:
                    8f:0c:65:4a:fa:e6:b7:4f:d5:30:6b:80:13:b8:ad:
                    d5:e3:5b:4d:a3:05:d7:26:f2:dc:bd:50:be:07:09:
                    24:84:7d:60:c4:39:6f:a8:4e:8c:be:d1:e7:c4:72:
                    3a:c8:7b:cc:62:44:82:80:ca:2b:ae:bb:e7:e3:4e:
                    a1:ef:b3:1f:e8:01:e8:45:27:a0:26:8b:38:31:79:
                    59:86:2c:fc:a1:8e:a9:36:6e:7b:55:b1:6d:10:1c:
                    8f:5f:c1:2f:cb:53:52:1e:55:6c:4c:db:b6:b5:a7:
                    c9:d1:b1:7a:e1:83:f1:62:d7:df:b4:de:17:59:72:
                    87:f3:34:9a:00:ad:14:b6:9a:a2:9f:b5:73:14:86:
                    a4:d6:07:11:8f:70:a8:d1:51:67:1f:31:07:19:bf:
                    e2:36:2e:b7:83:16:5f:04:b7:ca:c7:f7:87:00:2b:
                    1b:11:fc:8d:89:bd:a3:ab:f7:08:ab:b6:54:c4:1b:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CA:56:07:53:61:F3:02:CC:BE:A3:D2:A9:13:98:BF:32:77:6E:1E
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:5c:90:ec:24:3b:85:f1:cc:16:49:68:20:5b:3c:5b:8b:
         07:43:1b:7d:1d:80:b5:7f:91:bb:9f:d9:58:9f:77:dd:0d:bc:
         b1:3b:2e:bc:1d:55:50:66:ba:ae:2a:57:08:18:42:0d:29:70:
         84:a0:b3:7c:9d:34:33:b7:9b:6e:6b:27:5d:4a:14:72:87:42:
         f8:a7:51:e5:3a:cb:87:71:b8:df:bf:42:e1:2f:ef:f1:fa:14:
         7a:ea:4e:13:f5:b5:30:c4:eb:56:c2:20:6e:7c:ef:1c:14:31:
         93:8a:f3:b2:b4:87:a6:36:f9:2c:ed:7f:da:e7:19:79:ef:ae:
         ff:f5:db:6e:12:83:db:e5:f1:46:6d:11:6f:c6:75:44:fa:ff:
         5f:cf:d2:aa:51:e2:00:72:2b:46:ea:93:92:24:61:c0:50:68:
         d0:7e:1c:ee:63:f1:2e:4a:87:bc:f1:27:98:95:38:88:20:05:
         ff:88:e5:8b:6d:45:26:90:35:e4:22:3c:67:dc:2a:54:57:00:
         89:ad:58:a5:38:ca:33:71:29:fb:ea:cf:d9:67:cc:4c:ba:74:
         c0:74:eb:53:80:bb:31:51:66:e2:0f:d6:81:13:71:64:97:84:
         7c:22:38:b5:31:23:94:3f:fe:e5:fe:bd:d4:eb:05:88:a5:91:
         88:56:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----