Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          w2ub8wWHSlwdvQFNwXCJQPycsQWnP3Bj2UjcmLfcksw=
Subject key identifier:   49:AE:AE:33:D6:FF:CD:04:3F:1E:C5:89:A9:49:2B:30:EB:0E:13:2C
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       07B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          07AC
Signing time:             Sun 21 Jun 2026 02:04:48 +0000
Manifest this update:     Sun 21 Jun 2026 02:04:48 +0000
Manifest next update:     Tue 23 Jun 2026 02:04:48 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: BSZIbhYld4bRb5gjsDZpVPYyC7svdRnCBHMYOb3CQaA=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
                          4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Jun 21 02:04:48 2026 GMT
            Not After : Jun 23 02:04:48 2026 GMT
        Subject: CN=6a3746c0-343c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:18:f6:70:ac:12:bf:8f:53:3a:9d:88:79:c1:
                    2b:84:64:b9:ff:1d:a7:3e:dc:53:57:14:37:d4:d4:
                    cc:68:1f:d7:ed:75:cd:52:aa:95:ae:7f:83:6b:c3:
                    77:13:1c:38:1f:9d:24:af:6a:ec:28:68:94:f7:f4:
                    3f:94:e5:de:fe:cb:f1:e0:df:d2:9e:30:07:44:12:
                    69:8a:53:29:06:0e:be:28:bc:9d:19:e4:10:6f:73:
                    97:11:f8:e4:ec:eb:71:99:d1:5d:54:95:7a:e5:a0:
                    b6:93:bb:f9:37:ae:c6:53:cd:5b:0f:ea:cc:60:20:
                    64:a8:d7:81:ff:e2:da:af:ab:fd:83:51:40:01:e3:
                    71:7b:36:30:95:a2:e1:dd:42:40:e0:36:e5:d3:aa:
                    cb:bf:86:80:a3:34:28:14:ba:ee:3a:25:86:c4:be:
                    f6:02:65:45:a4:9b:ab:c7:bb:74:4f:19:8b:3c:f5:
                    e3:2d:b6:ef:fc:f8:c6:66:41:a4:a4:21:3a:0d:07:
                    3f:64:e7:c4:21:d7:25:cc:4e:81:28:d1:ee:60:7a:
                    1f:4d:dd:79:88:9a:ea:f4:88:0d:8e:5e:e7:f4:56:
                    1f:2b:0c:b8:48:52:ce:1d:cf:db:25:91:21:8f:21:
                    a9:c4:d2:75:86:b9:c4:71:86:36:ea:b2:dc:00:8f:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AE:AE:33:D6:FF:CD:04:3F:1E:C5:89:A9:49:2B:30:EB:0E:13:2C
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:39:14:50:35:60:fc:d0:a6:60:e2:09:75:13:5e:26:2e:
         c1:74:d1:23:91:45:b6:28:55:80:13:39:1a:e2:bd:73:16:a6:
         08:cd:c3:c8:58:e1:6c:46:66:6a:d8:1b:a9:70:46:19:76:c5:
         20:2d:a0:5c:5d:9e:41:2c:92:c4:f1:e8:44:cc:ff:27:35:87:
         c0:28:e8:4a:8f:2f:77:9c:62:e8:b3:29:c2:a9:63:6f:5c:eb:
         6d:5c:6f:ad:9c:c4:db:fd:72:28:29:6d:07:5c:78:54:a4:e1:
         ec:d6:9a:fa:97:a6:44:1b:1a:92:6d:47:0f:a8:b8:ba:65:6e:
         26:da:48:e9:5b:5f:11:03:aa:cd:92:eb:a7:3a:2b:74:d8:9c:
         04:18:d2:5a:26:c9:9c:fc:12:02:98:07:20:d7:e2:a5:26:90:
         4f:ef:aa:6d:e7:9d:2c:2e:d6:0a:87:53:b8:7d:90:fd:8a:1e:
         7b:40:18:2a:32:e6:12:e7:0e:c6:82:76:75:22:a7:5c:48:e4:
         24:ff:e2:22:77:b7:38:85:f0:90:e0:38:7b:b8:8b:d8:28:04:
         b9:ee:9e:5d:94:77:a3:ec:9a:bd:0f:70:26:a6:80:14:90:f6:
         b0:f3:76:fb:b8:8e:d2:d8:0b:fa:f4:c3:00:bb:ec:3b:55:5b:
         c2:d6:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:44:08 2026 by rpki-client