Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          dDdLfwt7UWW3w8T8qob3qPrSbgrl16fjB2SEtILQFQI=
Subject key identifier:   56:D7:32:5A:88:DC:AA:AE:9A:CF:1A:17:6B:C9:75:DC:9A:7A:E0:78
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       0330
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          032D
Signing time:             Sun 21 Jun 2026 04:09:42 +0000
Manifest this update:     Sun 21 Jun 2026 04:09:41 +0000
Manifest next update:     Tue 23 Jun 2026 04:09:41 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: fLf/IyxMB+svqU8yrzyCOq6ikEYEhKBI4U2FCopjOg4=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: Jun 21 04:09:41 2026 GMT
            Not After : Jun 23 04:09:41 2026 GMT
        Subject: CN=6a376406-05fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ad:05:83:09:86:52:1e:c4:77:5c:00:4a:4a:
                    73:ef:01:92:9e:cf:71:e8:28:88:ad:e8:3e:23:79:
                    66:8e:00:55:05:f5:04:d8:48:6c:f0:dc:46:b5:93:
                    96:59:f9:d4:f5:bc:a0:9e:b6:b4:de:dd:62:19:ff:
                    93:ad:67:36:65:c2:c9:f0:4d:7a:4a:c3:35:0e:74:
                    91:d8:f9:ce:1c:ae:32:a3:6d:8e:87:7b:fa:a1:c9:
                    ed:b1:2b:fb:87:c0:b4:54:88:69:87:38:ba:b2:46:
                    12:27:07:bd:63:f7:3c:33:12:ac:84:98:82:bf:9b:
                    90:cb:51:0d:f1:7f:72:94:d3:46:d2:57:e1:66:b4:
                    ce:87:37:59:56:0a:75:ba:41:5b:74:b4:35:ec:37:
                    32:62:28:b3:f0:48:99:93:20:c5:eb:bd:bc:e8:41:
                    13:51:09:18:fb:75:f7:18:57:ca:cb:22:a2:10:3f:
                    e3:03:a3:c3:b8:ee:e5:76:d9:65:ec:70:2c:d0:48:
                    b2:28:1b:c5:c2:be:97:d0:1e:40:62:1a:7e:5e:ee:
                    ff:4d:09:34:15:f9:92:af:88:7f:83:6c:19:7b:e4:
                    35:81:40:9b:44:81:5e:70:ff:9b:01:65:ef:b9:6c:
                    06:5a:85:8f:32:31:af:60:d5:5e:aa:60:96:19:e0:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D7:32:5A:88:DC:AA:AE:9A:CF:1A:17:6B:C9:75:DC:9A:7A:E0:78
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:14:63:6e:d7:61:82:ed:13:6b:8a:82:a3:9f:93:e6:c2:
         cd:5f:a1:a0:a6:2c:a5:4b:41:26:1f:64:27:34:9a:18:e5:8f:
         a7:fc:a8:f3:7d:3b:87:b6:8d:7a:06:e6:af:ee:f8:70:2c:b7:
         ad:f7:2e:32:3d:b1:00:e5:0c:58:8c:2e:6b:f2:57:f8:e7:63:
         5e:8a:8d:b8:dc:59:14:f0:10:9e:37:ed:e5:ff:0f:98:3d:14:
         39:50:2c:48:92:78:ce:4d:fd:d1:c5:16:49:bc:ff:ea:ad:7c:
         00:ce:4c:06:a6:08:48:31:9e:be:b2:8c:37:c0:26:75:47:03:
         2c:cf:ec:ed:15:70:d4:76:77:e6:d2:39:b5:53:7e:57:8f:1d:
         a1:f0:92:e4:d5:f3:b6:0c:3c:75:73:96:94:83:99:3e:61:09:
         1e:e9:ae:d3:8a:c5:92:bd:96:25:fe:f2:6a:41:27:2a:bb:da:
         d6:36:21:d7:94:97:b7:31:2a:2d:c5:23:8b:7f:49:5b:db:c4:
         72:84:d7:ce:51:fe:87:f4:5c:66:8c:8b:4a:9d:53:7d:45:45:
         ad:8b:c0:d6:0d:2c:59:b1:d0:93:23:05:34:ce:6f:8a:0b:95:
         d6:58:59:ac:f3:54:26:ac:33:f6:87:0e:bc:f7:24:78:07:97:
         ef:e1:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:42:04 2026 by rpki-client