Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          Wf0KhFGBW1d0sEcKKDSrxQpURmGvJaZIC7Uy49Qc9uc=
Subject key identifier:   A3:3B:3F:32:46:3B:C9:3A:71:94:8F:BB:7B:50:2B:70:1B:AC:09:18
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       01B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          01B7
Signing time:             Wed 17 Sep 2025 04:23:26 +0000
Manifest this update:     Wed 17 Sep 2025 04:23:25 +0000
Manifest next update:     Fri 19 Sep 2025 04:23:25 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: 1ynL/7BoIv60tnYgcR2TeV4bolMn7XY+WqRP/nzTlg0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF, serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
        Validity
            Not Before: Sep 17 04:23:25 2025 GMT
            Not After : Sep 19 04:23:25 2025 GMT
        Subject: CN=68ca37be-54d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fa:90:2a:96:ec:d3:2f:20:8f:c0:ed:0c:11:
                    a0:0a:c4:02:63:db:ee:66:13:d9:27:12:ad:27:2b:
                    3e:ed:05:eb:cb:37:34:84:8b:86:5b:55:a5:14:31:
                    73:a3:0d:6f:15:2d:7c:5c:c5:a7:2e:f4:5e:92:54:
                    8c:c5:7e:94:0c:15:21:d4:54:30:c1:97:99:36:dd:
                    2c:a7:6b:53:8d:1e:2a:fd:b9:bd:ef:de:bc:a7:0e:
                    59:73:e7:2c:4b:43:41:ea:b0:35:c3:da:03:b0:93:
                    66:af:f4:2f:96:6b:64:0c:5f:8f:f5:f7:69:6b:a9:
                    af:c8:c4:f9:ac:df:3c:e3:34:1a:28:1e:de:ed:64:
                    0c:d9:70:5a:6b:ad:31:50:b5:1a:2e:7e:c9:cf:43:
                    d1:6e:c3:98:c3:af:a5:c1:c3:0b:9c:47:60:74:1a:
                    b0:0a:c6:a1:49:cc:33:d6:5e:10:58:b9:30:56:90:
                    1e:d9:19:ec:88:5f:8e:a6:70:0e:cd:76:f7:a8:2b:
                    27:73:db:4b:aa:99:e9:7d:b0:05:17:28:df:2f:84:
                    1d:41:1a:8c:23:4d:dc:25:48:48:3c:50:62:cc:16:
                    a2:a6:62:88:f6:c8:94:13:bf:12:be:45:93:b1:45:
                    62:9a:ee:de:50:e8:cd:82:6c:9a:60:f3:d9:b1:23:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:3F:32:46:3B:C9:3A:71:94:8F:BB:7B:50:2B:70:1B:AC:09:18
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:03:a3:fb:37:d7:cf:06:a8:ab:a6:c9:78:6a:73:c6:1d:
         43:48:17:c9:0e:de:f5:f9:5e:31:b0:d4:ad:a1:e4:91:9a:cf:
         02:88:2f:a4:8e:42:5b:c2:bb:08:ad:5e:fe:b2:c1:d9:92:a9:
         00:33:9a:46:fb:62:36:85:10:8c:1e:ed:51:2f:13:c4:ed:6e:
         3b:8a:a0:8c:57:e7:07:68:4b:94:b8:78:7b:34:86:75:aa:b7:
         ea:2d:70:91:c0:2e:ae:36:9a:ad:d2:9e:15:38:90:44:35:2a:
         9e:03:02:ae:e2:77:4d:ed:71:9a:55:bf:91:e1:69:97:82:22:
         79:ae:e6:cf:eb:6a:9d:9a:b0:4b:f7:fa:54:77:5c:24:e6:3f:
         7e:44:5d:2c:62:91:e8:02:b5:8d:8c:39:b3:ad:cf:43:e7:86:
         27:05:3d:4b:e8:20:95:ea:6d:0e:aa:1a:cd:8c:24:05:45:1a:
         87:78:25:13:51:e4:45:ab:bd:ff:31:16:2b:ed:3f:0e:a9:8e:
         f5:2c:cb:4e:26:a4:cc:d9:40:7f:b4:c5:8c:a5:cf:f2:05:ec:
         20:98:b0:64:a4:f7:8c:3e:90:e2:ce:16:f0:25:31:9d:2a:24:
         e5:80:fd:6b:23:f4:19:a9:bf:d7:2e:1f:7d:68:48:b5:a8:f4:
         95:89:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:21:36 2025 by rpki-client