Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File:                     HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier:          WosvhV+BnoNgB8jMAB7t5EY3njbT/lFtWfhzZ2Wx6tQ=
Subject key identifier:   68:F6:B7:F9:2C:1B:83:D3:9E:68:79:D6:32:00:1E:7E:6B:11:50:8B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       073D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number:          06EE
Signing time:             Sat 21 Mar 2026 02:49:25 +0000
Manifest this update:     Sat 21 Mar 2026 02:49:24 +0000
Manifest next update:     Mon 23 Mar 2026 02:49:24 +0000
Files and hashes:         1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: zZ/yTWNPleMyQjNxXMlWI7A71lK5Vz231PW7gVlfkgQ=)
                          2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
                          3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
                          4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
                          5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
                          6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
                          7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
                          8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
                          9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
                          10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
                          11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
                          12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
                          13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
                          14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
                          15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
                          16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
                          17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
                          18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
                          19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
                          20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
                          21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
                          22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
                          23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
                          24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
                          25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
                          26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
                          27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
                          28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
                          29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
                          30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
                          31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
                          32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
                          33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
                          34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
                          35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Mar 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Mar 21 02:49:24 2026 GMT
            Not After : Mar 23 02:49:24 2026 GMT
        Subject: CN=69be0735-58ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:3a:db:79:72:8d:25:52:f3:40:ef:72:a7:
                    f7:eb:20:80:e3:6c:cb:4c:72:4b:d7:db:7e:c5:e6:
                    30:77:64:a0:00:89:ee:48:be:c7:72:f4:7e:10:06:
                    06:31:6e:9f:6c:af:3d:97:6e:0c:9f:0b:68:de:f4:
                    01:d4:47:16:20:ce:4b:d3:82:4e:c9:9e:70:47:db:
                    e6:5c:c2:85:4a:26:62:aa:18:c8:9b:3f:82:2c:dd:
                    7d:40:66:25:56:e4:b4:fa:f3:2d:2c:e8:19:0c:10:
                    30:6f:55:94:bc:ee:ce:4c:0e:d9:96:7c:9c:87:86:
                    a8:50:f7:1c:7f:0e:14:88:fb:3d:ef:c5:62:06:63:
                    0e:2b:d1:d9:a3:f7:80:18:cd:8b:e5:ac:ea:e2:55:
                    87:0f:bf:7b:6c:2c:48:b4:6a:06:6e:d8:95:cb:6f:
                    e3:2f:12:78:ae:15:6f:b1:3b:52:4b:f0:11:ea:64:
                    c1:8c:71:da:d3:9e:bc:83:b3:81:0a:8a:36:3b:fe:
                    6b:c9:02:c8:d6:70:88:df:47:ff:8e:87:f9:9e:73:
                    a8:46:6a:93:f4:4a:9e:80:63:65:26:d5:10:e7:e3:
                    70:45:df:d7:99:b0:b5:f7:65:b4:61:fd:44:22:e4:
                    c2:dc:31:a8:91:3f:e1:24:11:15:24:e4:f0:8a:0f:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F6:B7:F9:2C:1B:83:D3:9E:68:79:D6:32:00:1E:7E:6B:11:50:8B
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:41:c2:16:95:21:97:c2:e8:b5:e5:00:6d:0e:e5:e4:c3:32:
         cc:9e:d4:23:fa:f5:02:89:2a:e3:e7:15:5e:7a:39:0f:32:54:
         05:59:4e:c9:fb:42:9a:43:b4:75:48:0a:e5:2f:e8:4a:1b:51:
         64:02:7d:a2:e0:47:00:09:27:c9:78:58:27:d7:f2:3c:4d:73:
         ce:b7:44:8f:65:84:3d:40:15:30:13:a7:df:b3:67:82:22:36:
         6c:f8:73:74:b5:b6:bf:af:af:94:07:cc:20:f6:b4:64:57:b2:
         72:dc:9e:2e:16:5b:78:48:3d:b7:ba:80:c1:9d:b8:33:de:8c:
         cc:fb:bd:d4:da:b0:4c:e1:47:27:25:bf:96:9c:3e:cc:a5:74:
         50:74:5b:d7:1e:28:b7:9d:c4:27:3c:3f:64:cf:98:ca:4e:8f:
         c0:4c:24:54:30:d0:ef:33:87:bd:4b:0d:5a:c5:08:c7:60:12:
         c4:69:63:42:10:cf:a2:46:32:38:83:41:65:ff:b3:ff:3a:8e:
         14:8b:bb:15:92:1f:75:24:1e:a2:c2:b7:5a:53:bc:59:3e:1a:
         fa:97:17:ac:8d:fc:ea:e8:47:d4:67:89:75:56:f9:a8:de:c5:
         a1:3f:ba:a4:d5:e5:bf:37:27:3a:ab:1e:85:56:6b:38:75:e9:
         54:a3:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:59:46 2026 by rpki-client