Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
File:                     HcMxuzT85bGxnG1RA4RwUkV1CPE.mft (raw, json)
Hash identifier:          jP1ZR+LXh2MfPhtaOLJT6ajXDKqr6Ge1AbLGKF3vg5k=
Subject key identifier:   A5:74:37:CA:F5:A3:D9:AD:B7:9F:6C:7D:A4:25:7A:53:7D:76:37:73
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Certificate issuer:       /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial:       0531
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
Manifest number:          0530
Signing time:             Thu 07 May 2026 03:04:06 +0000
Manifest this update:     Thu 07 May 2026 03:04:05 +0000
Manifest next update:     Sat 09 May 2026 03:04:05 +0000
Files and hashes:         1: HcMxuzT85bGxnG1RA4RwUkV1CPE.crl (hash: W4WavMEAKSmPw4iWpsJGz7+cS3ieOnbVgA9Z7zn2gig=)
                          2: 98BB02A409D411EE86E7404E4AD9E6FC.roa (hash: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647C6BAF, serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
        Validity
            Not Before: May  7 03:04:05 2026 GMT
            Not After : May  9 03:04:05 2026 GMT
        Subject: CN=69fc0125-8c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:64:d7:e2:48:25:7d:63:27:3d:f7:8d:f8:
                    4d:23:85:a5:f4:1b:ad:ff:8d:0c:8a:51:da:23:43:
                    d9:7b:87:dd:03:50:09:3e:5d:76:e4:15:04:87:ee:
                    4f:90:10:3f:6a:31:df:1b:de:24:ae:fc:40:36:a8:
                    38:fa:36:93:46:ec:08:b6:2d:77:a5:01:d4:ce:bf:
                    03:2e:9c:92:6b:05:cf:ff:8d:20:90:eb:44:be:b0:
                    88:ba:96:e2:aa:f3:6b:0e:fe:71:13:8a:ff:76:5e:
                    23:c1:b0:22:77:5f:c2:33:82:a8:f5:fc:f6:7f:ce:
                    66:5e:b4:a8:e1:fa:34:d2:53:c8:5f:7e:23:45:95:
                    d4:f1:a5:34:66:a7:a7:cc:fc:f3:e1:a7:38:5c:d2:
                    90:ff:ad:5c:02:57:39:c0:82:1e:32:b3:55:1a:4c:
                    63:96:3f:21:b6:be:b9:17:fb:43:67:ac:5f:d9:20:
                    4a:d6:4e:ee:ee:a6:e6:f8:12:63:63:57:1b:21:15:
                    78:c7:87:8f:85:aa:34:8f:34:f8:af:c7:33:8a:ca:
                    fb:ac:a4:bf:bc:80:cb:d7:78:51:09:a0:d4:08:46:
                    3c:35:b0:a6:7d:c8:2e:cd:41:b5:40:00:b4:46:b5:
                    fc:7a:37:25:f6:a0:79:4c:4b:1f:58:25:a7:c6:9a:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:74:37:CA:F5:A3:D9:AD:B7:9F:6C:7D:A4:25:7A:53:7D:76:37:73
            X509v3 Authority Key Identifier:
                keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:5d:0d:54:b2:02:fc:43:6a:d7:26:8f:71:fd:1a:e7:0b:85:
         88:aa:df:f3:ad:12:02:b7:fa:d8:7f:23:16:ad:39:b2:58:9e:
         37:4c:fd:01:98:89:b1:05:ab:ea:99:32:c0:41:b5:b5:26:22:
         dd:e9:66:38:3d:20:4a:30:42:68:15:18:b7:7f:e6:97:4b:32:
         69:03:36:99:38:90:78:08:44:5e:9e:c4:7f:9a:54:5c:54:54:
         81:14:df:5d:8f:de:e2:41:3e:94:b5:60:cf:4f:29:af:bf:77:
         12:8b:16:34:24:29:3c:53:9f:89:2a:fe:3b:db:33:6b:1a:e3:
         7e:91:27:4a:0f:64:67:ed:57:0f:15:93:77:ab:21:5a:87:58:
         04:a6:d0:32:94:74:22:f8:0b:04:4f:bf:2b:bf:4d:f1:e7:28:
         ef:bc:35:f7:1e:30:94:24:b6:10:f4:f2:71:12:2f:a9:01:4d:
         eb:d4:c9:16:5a:39:42:ed:13:79:96:6e:03:bb:c0:5e:07:6b:
         c2:45:56:33:60:e0:b9:6e:bb:d6:97:d4:a0:88:10:fe:d0:36:
         da:ec:c6:b0:f2:cf:5d:b4:a5:ab:b3:f5:59:dc:b6:09:a6:f1:
         84:69:93:4a:4d:81:af:30:7d:a1:ec:44:42:0a:58:91:75:db:
         77:5c:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:34:33 2026 by rpki-client