Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
File:                     HcMxuzT85bGxnG1RA4RwUkV1CPE.mft (raw, json)
Hash identifier:          s9o+BUu5igzZzadtFxWzD/tjKBPCBR06M/5zGHdwosE=
Subject key identifier:   F6:EC:44:F0:19:67:BB:A0:E1:37:71:CA:5A:79:C3:4A:DC:CC:D1:0D
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Certificate issuer:       /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial:       055E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
Manifest number:          055D
Signing time:             Sun 21 Jun 2026 03:04:11 +0000
Manifest this update:     Sun 21 Jun 2026 03:04:11 +0000
Manifest next update:     Tue 23 Jun 2026 03:04:11 +0000
Files and hashes:         1: HcMxuzT85bGxnG1RA4RwUkV1CPE.crl (hash: RGLr5eDJH8EIOp2lOf9Qa3SF/7yzzXMjdP6DRcHRFBI=)
                          2: 98BB02A409D411EE86E7404E4AD9E6FC.roa (hash: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647C6BAF, serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
        Validity
            Not Before: Jun 21 03:04:11 2026 GMT
            Not After : Jun 23 03:04:11 2026 GMT
        Subject: CN=6a3754ab-b1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:c0:c1:1a:85:d7:9e:f9:c8:4c:22:b0:8b:
                    c1:12:fb:00:72:6d:f4:db:a4:ea:72:b0:fc:d8:06:
                    1a:3a:2f:24:d8:91:15:ef:a5:98:f6:ef:44:68:a2:
                    d2:c7:20:68:8d:11:47:60:a1:dc:ba:1b:61:4e:57:
                    34:e9:91:be:6d:36:93:94:0e:df:dc:29:fc:a2:ca:
                    cd:f1:d2:a1:46:c4:b3:53:76:80:e8:d1:5d:6c:d2:
                    e5:00:cb:fe:65:b6:9f:42:4c:96:6d:34:21:7a:35:
                    47:b2:94:3b:ce:ae:07:2a:df:e4:63:54:b4:f3:b0:
                    e2:d6:00:b0:c3:f7:9d:0d:74:b5:ac:df:46:b0:aa:
                    33:f9:d9:12:69:d8:a6:aa:a6:10:e0:2d:4d:80:23:
                    f1:a2:fb:df:a8:ea:50:05:78:44:6b:dc:05:fb:94:
                    04:07:e3:50:1c:bb:80:da:67:27:89:d9:70:5e:21:
                    d0:0e:98:d8:bc:0b:16:7c:50:a6:0c:4c:37:d8:d4:
                    70:c4:9c:a3:66:ac:44:f6:b1:9e:47:b7:1c:eb:e6:
                    7d:8e:e0:a6:07:9e:5a:c7:d9:d4:b8:10:41:43:d5:
                    ba:3b:c3:86:7b:c1:ed:ef:a8:35:b8:aa:e5:5c:4b:
                    e8:f1:0c:3f:61:c5:18:e0:3a:83:47:f4:01:b1:af:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EC:44:F0:19:67:BB:A0:E1:37:71:CA:5A:79:C3:4A:DC:CC:D1:0D
            X509v3 Authority Key Identifier:
                keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:d2:58:96:04:2d:11:e2:bd:48:c1:8e:72:9b:8e:4f:6f:
         c3:3d:c1:3a:52:ca:8b:98:ab:65:fb:e1:f4:94:85:cb:53:cd:
         c9:20:d7:29:ca:b8:c8:c2:cf:56:e8:9b:6b:0b:bc:3b:de:f6:
         98:86:6e:fd:67:04:db:8d:66:d3:1a:97:be:9a:88:fd:2d:73:
         d1:e2:ad:ad:e5:25:19:2c:dd:d9:2e:e4:dc:1c:df:11:15:dc:
         c5:7b:6d:ac:c4:81:4e:9b:e8:af:64:a3:49:b9:33:0e:16:1c:
         65:8d:fa:0e:9a:7d:8c:fb:23:99:d9:ae:fc:22:65:77:26:3c:
         36:13:b3:01:e3:61:f1:f2:4e:84:14:2d:8c:e4:2b:f5:74:89:
         99:3f:22:55:7e:25:8d:64:55:9c:6a:fd:b7:53:53:27:19:19:
         7e:fd:a2:ad:f3:c0:af:d9:bb:ab:c7:45:c7:96:b8:9d:1d:b2:
         72:3f:9d:a0:50:f7:70:bc:da:75:8a:22:d4:29:75:04:89:35:
         79:e0:bc:3a:1c:fe:0c:08:ee:4f:7c:56:db:6d:33:31:10:bd:
         59:c7:22:fa:07:ba:38:75:80:f6:93:0d:f2:3a:b3:f4:a9:d6:
         fc:de:91:df:68:5c:41:d4:6f:c8:21:7f:d7:0f:3d:b8:43:43:
         29:d4:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:37:26 2026 by rpki-client