Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
File:                     HzhXx5DQI1940ThbDraTCwjzqOc.mft (raw, json)
Hash identifier:          Xns8e+JvXIlA2gOlSSnL8oN5P4uGjfOpM1MZkeWkUKg=
Subject key identifier:   CD:37:48:1F:6C:CC:35:BE:31:A0:43:9E:45:5C:24:71:A1:01:A0:44
Authority key identifier: 1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7
Certificate issuer:       /CN=F365D714AF/serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
Certificate serial:       07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
Manifest number:          07
Signing time:             Mon 23 Mar 2026 06:38:25 +0000
Manifest this update:     Mon 23 Mar 2026 06:38:24 +0000
Manifest next update:     Wed 25 Mar 2026 06:38:24 +0000
Files and hashes:         1: HzhXx5DQI1940ThbDraTCwjzqOc.crl (hash: 5Gd2uhh/LW13e65h5CECgD1cag9btujUnlcCsGAeKbE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365D714AF, serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
        Validity
            Not Before: Mar 23 06:38:24 2026 GMT
            Not After : Mar 25 06:38:24 2026 GMT
        Subject: CN=69c0dfe1-df40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:38:73:d8:c6:30:ce:0a:17:de:ea:38:c0:
                    8f:72:d6:a8:ce:6d:84:7f:82:b3:eb:a8:5b:75:9c:
                    4a:c8:11:91:b0:59:96:97:9e:a4:98:5c:8a:8d:c4:
                    ab:11:d3:f5:25:b9:d5:3f:9f:2f:c3:18:83:df:4d:
                    a5:01:a9:d1:fa:09:52:c8:22:5f:af:25:48:e0:95:
                    1d:08:a8:0e:22:f3:77:b6:85:b8:f1:76:f2:e4:2a:
                    2d:c0:bd:eb:22:eb:b8:40:71:5e:29:f3:86:0f:cb:
                    f5:b1:36:bb:2f:73:fd:53:24:80:34:e7:2d:9c:ad:
                    f6:ee:bd:4d:94:a4:8b:ec:b5:3c:8a:8d:ea:20:e8:
                    cc:cb:cf:d8:c0:f4:a1:fa:6b:02:e7:63:ba:3a:ce:
                    8b:bd:a1:e9:51:e6:c9:6a:1a:99:b4:34:ef:ad:ad:
                    e0:20:c9:24:a9:bd:de:86:28:1b:1c:22:1c:75:85:
                    44:66:87:27:bc:c9:36:eb:10:7d:5e:91:21:db:94:
                    85:b5:b4:d6:31:84:9a:d2:50:06:18:fc:34:0b:d7:
                    9a:db:a0:c2:fc:79:dd:93:c8:b3:d5:7c:9d:a9:8b:
                    23:4c:e6:7f:62:56:a7:e0:4f:9b:f7:f3:f3:8c:a7:
                    95:b7:46:e1:04:4f:aa:6a:51:33:a2:79:6e:d2:f1:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:37:48:1F:6C:CC:35:BE:31:A0:43:9E:45:5C:24:71:A1:01:A0:44
            X509v3 Authority Key Identifier:
                keyid:1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:06:66:bd:4b:43:15:aa:ab:ea:10:d0:5a:15:28:b2:a1:
         1d:58:83:c5:53:52:86:dd:4a:1c:fc:9c:10:3f:67:68:6b:49:
         08:e8:62:26:21:07:48:4d:77:67:e7:aa:ce:fd:10:a9:a6:f4:
         06:35:ee:e5:20:d8:43:00:50:a1:91:bf:20:c8:ce:a7:af:b8:
         c6:9e:f5:b9:e8:14:33:9d:bc:1d:e4:2d:79:32:8e:0c:99:54:
         8b:ae:97:ac:58:7a:49:21:ed:79:5c:28:ee:f4:77:71:52:f9:
         7d:99:cf:24:d1:30:11:23:d7:ea:83:06:d6:fe:f5:f0:f8:c7:
         ef:ea:e3:9b:9c:60:73:b6:b7:a4:a1:2b:a4:3c:a0:0a:d9:51:
         af:bf:38:9c:d9:5a:d3:b9:84:ab:d0:47:62:d3:c3:a6:70:a6:
         e7:e8:5a:e0:49:d2:66:06:8e:0f:d1:37:6f:03:50:2f:ab:4c:
         cc:78:8b:ee:a6:00:f3:a3:9b:70:29:ff:da:61:32:12:b7:5b:
         14:96:78:56:45:54:98:76:de:d2:7b:e7:98:d2:b2:44:2b:fa:
         fd:67:09:0f:9a:ab:72:0b:72:e3:22:e8:7e:bb:5a:94:c5:1d:
         61:f3:57:7d:d8:75:e1:c8:a2:9f:8b:35:d0:27:78:d3:16:d8:
         a0:9e:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:19:42 2026 by rpki-client