Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          uLNK3Ykew9QYyNYYS9YAlP+4XfaIBkFzfHphyEm8yNM=
Subject key identifier:   7B:A5:0D:A5:26:DB:90:A4:FB:E6:E7:C4:D0:44:ED:54:78:32:97:FE
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       05A4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          05A3
Signing time:             Thu 23 Jul 2026 03:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 03:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:48 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: NRgLB26y8Z59jfIs6jaS4zvlCDPOxUA0FBa+gil+VLw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Jul 23 03:00:48 2026 GMT
            Not After : Jul 25 03:00:48 2026 GMT
        Subject: CN=6a6183e0-fd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:4e:36:5a:0a:72:22:6d:0f:85:5e:c9:3b:
                    e8:f3:bb:bf:6e:48:56:22:b2:db:fb:17:8b:ff:43:
                    ca:98:c5:5a:f7:0d:9e:5a:07:89:65:cd:79:3d:a3:
                    64:77:20:37:3b:c8:89:47:bb:c3:23:58:f4:96:45:
                    b7:63:34:49:b1:47:cf:07:3f:93:06:71:50:85:c8:
                    9d:c5:b3:a0:c5:51:37:c0:38:c3:e1:96:34:b2:b5:
                    cd:89:cc:f3:95:12:41:7a:b1:9d:eb:90:d5:9e:af:
                    4f:33:57:3f:d8:ef:c7:f5:a3:7b:e0:8c:f8:78:a3:
                    de:d3:84:81:c3:13:d5:b3:7c:6b:93:95:37:2a:86:
                    b8:7d:95:5b:9a:92:3b:7b:0a:d4:46:3c:57:5a:af:
                    a0:be:c0:57:19:6b:6e:b1:63:2d:a2:af:f7:1b:5d:
                    00:7a:d3:93:e7:85:95:f8:4f:fd:af:c7:40:1c:b8:
                    6d:18:f7:37:d1:d5:f0:3f:7b:04:5f:3b:f4:ae:87:
                    63:96:09:61:69:97:b6:0c:f6:fc:29:87:66:0c:42:
                    5d:5b:c8:23:7d:16:ff:ca:ab:cd:52:40:2c:de:a6:
                    13:74:c7:04:df:6b:db:fa:c2:25:24:69:ae:b5:0e:
                    52:dd:13:ea:1b:41:1c:85:a7:e7:04:f2:05:a3:eb:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:0D:A5:26:DB:90:A4:FB:E6:E7:C4:D0:44:ED:54:78:32:97:FE
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4d:2b:2f:17:14:7a:b2:08:1b:64:c0:79:0f:cb:82:8c:33:
         2e:81:15:1f:ab:53:a9:49:c6:12:f6:60:b5:21:70:1f:51:90:
         05:01:37:bc:a9:31:7e:06:22:b3:bb:48:aa:8d:ae:32:4b:e9:
         24:c3:88:2a:37:8d:97:0f:9a:60:fc:68:b8:cc:1f:c3:fb:bf:
         3f:72:fe:bf:53:6c:58:f6:de:8b:e0:75:0c:71:ad:21:27:79:
         c5:45:62:e2:d9:42:c0:04:77:bb:6b:22:3b:13:68:af:13:2f:
         94:89:2b:5d:bb:0f:ed:62:32:2c:f0:83:87:fa:de:47:4e:6f:
         7c:cd:f1:e8:40:9c:69:ca:05:0d:f3:c0:13:12:a4:de:56:0e:
         50:df:82:c5:90:f5:5f:be:ed:4e:3c:ab:b9:01:aa:3a:1e:a0:
         dc:8f:2b:ec:3f:64:18:3e:bc:f5:8b:72:04:41:be:9c:4f:d6:
         f5:db:aa:0c:23:3a:11:ee:9a:ba:e6:43:1b:b2:1e:b0:31:d7:
         a3:1e:c9:ae:28:42:d1:97:5f:8d:4a:0a:26:16:e7:0a:7a:da:
         e3:e3:e9:cc:8e:ae:df:f4:c3:ac:03:3d:25:6c:e4:f5:8e:2d:
         26:eb:c5:9f:a9:8f:6a:bb:21:a3:48:9d:ae:8d:da:96:67:01:
         30:47:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:24 2026 by rpki-client