Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          JrVjp2beuiGg7EYuYYG2ZHIe9mPsE85vCnDnczLhAU4=
Subject key identifier:   12:36:8D:26:C4:80:B6:25:1C:2C:65:00:8E:06:AE:CE:90:7E:38:78
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          02A2
Signing time:             Thu 07 May 2026 04:19:38 +0000
Manifest this update:     Thu 07 May 2026 04:19:37 +0000
Manifest next update:     Sat 09 May 2026 04:19:37 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: vl/CKtKukS2wMxpOKOV1pnCTMQozXA1xFLnu88guMdU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF, serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
        Validity
            Not Before: May  7 04:19:37 2026 GMT
            Not After : May  9 04:19:37 2026 GMT
        Subject: CN=69fc12d9-01ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:a6:a7:f2:bd:23:3e:f2:4f:3a:c5:40:fe:
                    cb:a8:bf:db:1b:07:27:54:13:2c:68:60:22:c9:c1:
                    b1:b0:e6:d2:c5:6a:da:3a:35:5b:43:26:0f:2d:a9:
                    70:26:87:72:e2:32:e6:37:63:1a:c5:6b:f4:08:22:
                    3b:0d:72:fb:e1:dc:74:41:1f:c6:f8:b3:7e:a4:46:
                    b1:24:aa:22:b7:60:69:37:eb:97:4a:8a:00:c4:b2:
                    38:30:5c:c3:36:16:24:14:47:81:fa:0a:a4:41:cc:
                    f3:45:f1:75:b0:62:f7:ed:ad:84:05:5d:bb:a6:91:
                    d7:3f:0e:0a:dd:c6:bf:2c:0a:8b:b4:08:ad:a3:b0:
                    27:29:b0:a2:21:4f:4e:92:ad:f0:4f:af:54:df:6b:
                    76:84:36:50:14:b2:ef:10:34:36:c0:dd:3d:38:e8:
                    b7:de:87:07:3c:10:f5:f2:de:4c:5b:d1:ad:68:2c:
                    dd:48:9f:9f:4a:f3:be:35:6d:4e:13:6f:8b:71:ee:
                    a3:1c:11:70:ba:69:bc:ca:8a:89:11:5b:50:a7:ec:
                    f7:6b:72:4a:ec:19:83:db:eb:2d:7b:6d:d4:0a:2c:
                    b2:f8:11:be:ba:7e:c6:70:98:49:b8:21:9f:2e:90:
                    da:2b:57:2e:90:31:85:40:4b:99:c7:50:f8:71:0a:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:36:8D:26:C4:80:B6:25:1C:2C:65:00:8E:06:AE:CE:90:7E:38:78
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:c6:c4:b3:e3:f8:62:7c:80:20:a0:69:f9:39:39:44:e2:
         03:a0:64:ec:86:dd:2a:5a:cb:af:c7:8b:19:b1:3d:da:99:d1:
         52:fc:2a:46:b0:10:aa:59:fe:8b:6c:81:3b:05:60:c3:19:59:
         29:a1:28:e4:ed:47:4b:79:c6:08:7b:6d:27:a1:5e:98:1c:9d:
         bf:4d:79:1a:e2:16:38:b3:93:0c:f7:d4:85:fe:2d:95:53:f1:
         be:98:ff:64:87:77:71:5c:5e:e2:e2:c6:a1:7d:35:e7:8c:d0:
         14:56:0f:9c:3c:ff:a5:bb:b2:66:a7:93:39:e3:66:08:68:ce:
         d2:a6:f2:80:fc:75:39:ea:59:33:5d:8d:21:21:5b:cd:1d:8e:
         cd:2b:6f:d8:29:d9:34:36:93:5a:67:e0:91:c0:cd:74:1a:bf:
         26:01:4c:8d:be:53:ce:97:89:63:c8:b7:39:70:af:e9:5d:11:
         2e:ed:b6:74:10:b9:8b:12:ae:a7:51:2f:c8:38:11:47:a1:31:
         a1:2e:3e:69:1b:3f:d7:17:d7:61:e1:39:a8:58:5c:dc:01:f6:
         ec:2f:ff:38:ab:aa:97:3a:de:7f:5e:00:4f:d5:67:bd:a7:81:
         bc:f1:d5:2b:45:76:9d:49:ba:46:9f:a7:48:13:02:66:a7:2b:
         45:b0:60:19
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdBNUJBRjExMC8GA1UEBRMoODZGRTczRUQzNjhGRjkyODkyMEEzNEI0OTc1QjRF
NkQxRTU0RTA2MzAeFw0yNjA1MDcwNDE5MzdaFw0yNjA1MDkwNDE5MzdaMBgxFjAU
BgNVBAMTDTY5ZmMxMmQ5LTAxYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCu+aan8r0jPvJPOsVA/suov9sbBydUEyxoYCLJwbGw5tLFato6NVtDJg8t
qXAmh3LiMuY3YxrFa/QIIjsNcvvh3HRBH8b4s36kRrEkqiK3YGk365dKigDEsjgw
XMM2FiQUR4H6CqRBzPNF8XWwYvftrYQFXbumkdc/Dgrdxr8sCou0CK2jsCcpsKIh
T06SrfBPr1Tfa3aENlAUsu8QNDbA3T046Lfehwc8EPXy3kxb0a1oLN1In59K8741
bU4Tb4tx7qMcEXC6abzKiokRW1Cn7PdrckrsGYPb6y17bdQKLLL4Eb66fsZwmEm4
IZ8ukNorVy6QMYVAS5nHUPhxCrODAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEjaN
JsSAtiUcLGUAjgauzpB+OHgwHwYDVR0jBBgwFoAUhv5z7TaP+SiSCjS0l1tObR5U
4GMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QTVCLzZDNURDRTQ0NDM0NDExRUZCNzYyOURCRTc2MkU5NTFBL2h2NXo3
VGFQLVNpU0NqUzBsMXRPYlI1VTRHTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2h2NXo3VGFQLVNpU0NqUzBsMXRPYlI1VTRHTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjdBNUIvNkM1RENFNDQ0MzQ0MTFFRkI3NjI5REJFNzYy
RTk1MUEvaHY1ejdUYVAtU2lTQ2pTMGwxdE9iUjVVNEdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpqsbEs+P4YnyAIKBp+Tk5ROIDoGTs
ht0qWsuvx4sZsT3amdFS/CpGsBCqWf6LbIE7BWDDGVkpoSjk7UdLecYIe20noV6Y
HJ2/TXka4hY4s5MM99SF/i2VU/G+mP9kh3dxXF7i4sahfTXnjNAUVg+cPP+lu7Jm
p5M542YIaM7SpvKA/HU56lkzXY0hIVvNHY7NK2/YKdk0NpNaZ+CRwM10Gr8mAUyN
vlPOl4ljyLc5cK/pXREu7bZ0ELmLEq6nUS/IOBFHoTGhLj5pGz/XF9dh4TmoWFzc
AfbsL/84q6qXOt5/XgBP1We9p4G88dUrRXadSbpGn6dIEwJmpytFsGAZ
-----END CERTIFICATE-----
Generated at Thu May 7 21:38:11 2026 by rpki-client