Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          98EbBe1Hd5YOo1lduvRD8RXV+YQl9rwz9QmRN3eUbEo=
Subject key identifier:   A8:CD:EE:AA:E3:24:7F:66:12:A1:43:FD:DD:DF:CC:24:AE:85:77:4A
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       0303
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          0300
Signing time:             Thu 07 May 2026 04:08:51 +0000
Manifest this update:     Thu 07 May 2026 04:08:50 +0000
Manifest next update:     Sat 09 May 2026 04:08:50 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: qyptmOiPcRaSQ8HRV+IgMNM3W5suV5z9rTuhzvltqew=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: May  7 04:08:50 2026 GMT
            Not After : May  9 04:08:50 2026 GMT
        Subject: CN=69fc1053-63db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:03:b9:b0:fc:2b:60:a0:e6:61:f0:38:52:
                    68:f6:13:9d:43:25:e7:c8:04:05:46:02:d4:67:da:
                    83:2f:f5:af:78:28:c4:1d:76:73:d1:9c:3c:b4:5e:
                    28:be:6d:e8:ec:72:03:2f:7b:e8:bd:61:31:d7:12:
                    97:08:9d:3c:62:58:f3:0f:55:f5:9c:2d:6d:e5:dd:
                    00:52:5a:52:6a:05:7d:3f:90:84:11:00:39:ff:a7:
                    06:05:3f:29:ba:ba:68:4f:27:ef:d8:09:19:41:d8:
                    62:95:6e:f6:a4:d4:1e:e0:67:d5:96:c5:e3:6b:e0:
                    78:2d:65:16:3d:d7:58:fa:9d:d9:bf:04:41:34:87:
                    40:77:ad:a8:10:4f:1d:86:af:ed:b8:5a:f5:ce:c9:
                    17:9c:39:50:77:4d:83:f4:71:c9:e6:3c:06:ca:7c:
                    b7:12:68:05:26:53:d8:8b:e6:58:d4:82:03:21:b4:
                    bd:32:fc:a9:45:fb:03:7a:ec:23:91:e0:42:84:5a:
                    64:9d:77:a3:ae:5f:15:20:c7:8f:0e:83:bd:eb:95:
                    e5:d3:63:e1:22:28:d2:4b:f8:5a:27:ab:67:49:4d:
                    e4:62:38:ce:fa:66:70:53:18:cc:df:f6:4b:02:39:
                    d7:16:d4:7d:95:e6:6a:ba:07:32:24:ab:2b:89:b5:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CD:EE:AA:E3:24:7F:66:12:A1:43:FD:DD:DF:CC:24:AE:85:77:4A
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:12:03:50:0c:74:e6:9d:28:76:92:d9:60:ff:5d:50:94:c5:
         98:43:66:08:da:a4:bd:bd:bb:9c:9f:6d:a6:ea:9c:d2:2b:34:
         aa:d2:5b:9d:b5:7c:e8:bc:60:d1:af:c2:7a:68:fe:f4:1f:a8:
         10:de:a8:e0:ef:3f:17:b0:05:17:cc:ca:b9:5f:23:02:ad:df:
         f8:63:40:36:73:f6:95:6e:01:74:11:e5:9f:c9:41:d4:9f:e5:
         72:65:56:25:b3:85:79:85:04:14:ae:c0:c2:9c:9c:6e:f8:f0:
         2e:c3:a7:0d:2b:9b:c2:c7:8b:f2:96:f4:31:e6:23:d5:16:7f:
         59:d6:64:ca:18:de:7d:f8:42:53:00:35:6b:2a:c7:a6:47:8d:
         38:00:22:77:7d:3a:8f:d5:06:a3:07:75:3e:d2:f0:aa:b7:f2:
         e5:17:54:fb:94:a9:1c:e0:e1:3a:a7:95:df:67:61:61:b3:b7:
         73:e6:df:e3:5e:bb:f4:d5:59:43:93:ab:c6:71:b5:56:50:a7:
         ca:50:c6:16:d0:f9:39:e6:f2:a6:33:bf:80:18:08:de:e2:df:
         c2:6a:ae:92:0c:20:5b:fc:e2:74:2d:d3:7d:81:c3:1a:7a:ed:
         6d:f0:0d:98:3f:bf:67:98:c7:91:92:e5:c1:f7:75:bd:7a:ff:
         dd:da:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:37:07 2026 by rpki-client