Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
File:                     h-G7jI0reZLqTr7rMz_hQp5w7po.mft (raw, json)
Hash identifier:          UJg6IcHr3v5/jMQQfqH0UWHwQq5BjMkj9DGEYa+hiW4=
Subject key identifier:   72:E5:3B:89:A8:F7:5C:4C:8F:26:7D:76:2D:50:4C:06:5E:A3:AE:BD
Authority key identifier: 87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
Certificate issuer:       /CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Certificate serial:       065C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
Manifest number:          065C
Signing time:             Thu 06 Aug 2026 02:40:04 +0000
Manifest this update:     Thu 06 Aug 2026 02:40:03 +0000
Manifest next update:     Sat 08 Aug 2026 02:40:03 +0000
Files and hashes:         1: h-G7jI0reZLqTr7rMz_hQp5w7po.crl (hash: hikv6yMMfkf2ZZxUIL4dTvg4mSXV7zA+wI9M7HLK3yo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAF, serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
        Validity
            Not Before: Aug  6 02:40:03 2026 GMT
            Not After : Aug  8 02:40:03 2026 GMT
        Subject: CN=6a73f404-e4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:7a:d4:95:f6:e3:64:19:cc:1a:f8:fc:94:
                    c7:8d:5a:89:c8:5e:45:ed:4a:ec:74:21:ee:0d:5c:
                    f2:69:67:51:34:89:e4:31:1c:e2:9f:b9:16:aa:a3:
                    95:e7:2e:cd:d3:7e:36:c1:eb:dd:3d:47:03:93:79:
                    35:17:68:2d:42:7e:f0:77:6f:f6:43:e4:ae:71:ca:
                    60:2e:de:cf:74:38:d1:47:22:26:34:ad:ea:28:76:
                    8f:b2:e3:db:67:75:33:be:f2:51:8f:6b:b6:21:2a:
                    d6:03:96:aa:e7:11:c1:4c:83:98:20:4f:f8:5a:e3:
                    ad:4e:23:bd:9a:b0:8e:45:8d:3e:39:62:b2:20:61:
                    a6:d0:ba:a0:3b:e4:81:6c:52:14:6d:25:42:29:a3:
                    6c:3a:77:a0:eb:e5:29:86:40:b4:bb:2e:e7:33:46:
                    b2:1e:ef:8a:68:be:b7:6b:c2:9f:05:ff:bb:a8:2d:
                    3f:7d:83:f0:54:6c:f3:ad:73:07:5d:1d:bc:1e:c8:
                    15:b5:60:5e:b1:61:b7:fb:5b:88:23:5e:44:95:64:
                    cd:9e:41:41:eb:52:7d:6d:cc:8f:df:3d:b3:b5:8e:
                    0f:53:3f:1a:10:2c:1c:cf:78:71:19:d3:7e:d2:98:
                    4c:45:74:60:0c:d7:a2:e1:58:58:20:11:bd:ed:36:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:3B:89:A8:F7:5C:4C:8F:26:7D:76:2D:50:4C:06:5E:A3:AE:BD
            X509v3 Authority Key Identifier:
                keyid:87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:d2:09:c1:1a:f3:78:d2:d8:22:6a:59:6f:5c:fe:02:f9:
         2d:2c:91:f5:6a:7f:d1:5d:dd:05:b8:97:c3:a8:0e:8d:53:65:
         f9:d5:74:cf:5e:ef:af:f2:21:73:2a:a1:a0:67:58:a4:5f:b7:
         32:dd:82:d0:30:9d:66:22:c7:9c:96:92:6a:c3:9e:99:d6:32:
         d9:6c:1f:d0:74:fd:b9:43:06:bb:d7:1c:64:81:45:c4:f9:36:
         fc:e5:e4:d2:41:e7:21:82:c4:0c:f2:76:6a:d1:26:3a:f2:7e:
         19:4a:b2:aa:61:d7:bb:6d:b5:ed:f8:d1:d7:a3:3c:7c:ba:ec:
         fd:8b:be:19:84:43:ce:eb:4b:f5:2e:a3:bb:90:1e:39:c9:81:
         e1:7c:6d:6e:8c:31:ce:e7:c5:95:12:3c:e4:55:5c:bf:0e:ee:
         c5:5b:18:b5:34:bf:80:cd:32:f4:e9:de:e4:01:be:c1:a4:cd:
         7d:c5:6a:01:87:44:95:66:26:74:82:c7:49:93:b0:e1:87:d8:
         8b:5a:99:ca:c1:b9:07:54:a8:33:53:c9:53:02:bf:1f:48:ff:
         0f:ea:2f:6b:be:ba:c7:65:7a:0f:de:04:11:69:14:c1:31:1a:
         a2:5a:2f:8b:d4:e5:b6:27:79:97:34:8f:73:30:30:68:e2:17:
         9e:64:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:42:10 2026 by rpki-client