Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
File:                     HzhXx5DQI1940ThbDraTCwjzqOc.mft (raw, json)
Hash identifier:          jgZLtDUdA/KejmHxrmt7SpM6WSCGzjfGwdKYLxSypy8=
Subject key identifier:   6F:C1:E0:D7:A8:33:85:A5:61:29:8C:08:6A:D3:41:83:2E:9B:5E:CF
Authority key identifier: 1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7
Certificate issuer:       /CN=F365D714AF/serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
Certificate serial:       37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
Manifest number:          36
Signing time:             Thu 07 May 2026 05:30:30 +0000
Manifest this update:     Thu 07 May 2026 05:30:29 +0000
Manifest next update:     Sat 09 May 2026 05:30:29 +0000
Files and hashes:         1: HzhXx5DQI1940ThbDraTCwjzqOc.crl (hash: S06Ohb/1wrMcMhZsfc6tHG8vkXNtVUjjMFUdJto1r44=)
                          2: 8F463D3227AF11F1930A44A7DAE4EC9C.roa (hash: olApEm5VDBpoyz8XFSGTWF+ZGrgDV6oxvgIY+GR8RDU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365D714AF, serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
        Validity
            Not Before: May  7 05:30:29 2026 GMT
            Not After : May  9 05:30:29 2026 GMT
        Subject: CN=69fc2376-bc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8a:90:2f:94:59:6e:5d:c7:4d:b8:b6:5b:e9:
                    d3:5d:36:6b:a1:3b:35:a1:aa:0e:2e:fc:e5:9d:24:
                    49:c1:c4:e0:e8:c8:c6:96:cc:aa:26:4e:d4:0e:3b:
                    76:e8:86:c2:99:ed:ea:ab:4d:27:5d:60:40:83:c0:
                    0b:f6:28:bc:38:6c:38:53:82:70:d3:b5:c3:2d:f6:
                    f6:36:dd:69:bb:e6:b7:86:50:8e:a2:73:d2:9c:43:
                    f3:17:76:d2:34:cd:73:4f:47:b1:f2:3b:80:6f:6a:
                    b9:a0:ea:03:68:26:83:6e:39:b1:7e:ba:43:d3:67:
                    a6:cc:a5:34:03:1e:21:1f:b5:8a:d0:10:02:fd:06:
                    9b:71:84:88:5b:99:6b:e6:c2:99:f6:0e:e7:68:81:
                    8d:20:d8:0d:c2:e8:f8:cb:c5:fb:a2:88:d9:3d:2c:
                    51:0e:b7:11:3c:71:ac:f4:ca:c7:a7:f9:09:1a:d8:
                    b8:e5:e1:16:a2:f5:69:c6:5c:6d:b9:e1:1c:67:06:
                    16:3a:f9:4d:27:ae:01:46:e3:fd:27:ec:26:c6:18:
                    f5:c2:c0:24:dc:11:2a:74:da:fa:51:d2:97:71:57:
                    d8:78:91:4e:50:45:9b:f0:48:fe:da:63:12:f4:1f:
                    aa:e3:46:40:07:0c:63:a8:0e:bb:6a:fa:36:bb:45:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:E0:D7:A8:33:85:A5:61:29:8C:08:6A:D3:41:83:2E:9B:5E:CF
            X509v3 Authority Key Identifier:
                keyid:1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:10:25:58:02:6b:08:d6:d3:98:31:17:66:29:15:cd:5a:
         98:76:1d:87:f9:37:7a:90:64:8c:07:73:11:c5:ee:c0:cb:fa:
         00:cd:b5:d4:db:30:b9:5f:c5:5b:bf:77:fc:b2:32:ae:b6:7e:
         da:e5:60:30:19:4f:0a:54:4b:b4:31:fe:a1:6d:88:c8:eb:95:
         34:b8:5e:fc:3f:d1:19:28:a1:59:1a:2a:f2:d5:6a:16:a5:2a:
         e7:f8:13:87:08:77:c9:66:f0:b5:90:ce:2e:b5:84:cc:d3:46:
         42:96:84:11:6c:28:23:aa:ab:bc:bd:f5:04:41:ea:54:d9:52:
         79:13:4b:57:e8:de:ae:76:9d:6c:f1:ba:c8:a1:45:9e:65:ba:
         39:ba:e3:a5:0c:ec:28:69:eb:8d:ed:da:49:58:6f:ac:bc:88:
         86:37:5f:22:65:64:24:3c:f6:82:1b:cf:a0:bb:df:f2:99:ff:
         9f:04:8f:50:04:f1:6d:c4:4e:68:21:cc:7a:26:c1:cc:75:5d:
         33:79:cc:f1:cd:44:40:4b:23:22:33:ae:83:3a:0a:0c:a9:4a:
         bb:2c:1e:17:82:a6:45:ee:20:a1:98:c6:6c:fb:f9:b5:b1:b2:
         59:db:27:95:53:0a:fc:c0:e4:b3:5b:ca:bd:ed:d6:39:d7:a7:
         fd:35:a0:4c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBNzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
RDcxNEFGMTEwLwYDVQQFEygxRjM4NTdDNzkwRDAyMzVGNzhEMTM4NUIwRUI2OTMw
QjA4RjNBOEU3MB4XDTI2MDUwNzA1MzAyOVoXDTI2MDUwOTA1MzAyOVowGDEWMBQG
A1UEAxMNNjlmYzIzNzYtYmM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO6KkC+UWW5dx024tlvp0102a6E7NaGqDi785Z0kScHE4OjIxpbMqiZO1A47
duiGwpnt6qtNJ11gQIPAC/YovDhsOFOCcNO1wy329jbdabvmt4ZQjqJz0pxD8xd2
0jTNc09HsfI7gG9quaDqA2gmg245sX66Q9NnpsylNAMeIR+1itAQAv0Gm3GEiFuZ
a+bCmfYO52iBjSDYDcLo+MvF+6KI2T0sUQ63ETxxrPTKx6f5CRrYuOXhFqL1acZc
bbnhHGcGFjr5TSeuAUbj/SfsJsYY9cLAJNwRKnTa+lHSl3FX2HiRTlBFm/BI/tpj
EvQfquNGQAcMY6gOu2r6NrtFRNcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRvweDX
qDOFpWEpjAhq00GDLptezzAfBgNVHSMEGDAWgBQfOFfHkNAjX3jROFsOtpMLCPOo
5zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUQ3MTQvNTJBMDFGQzAyMjIyMTFGMThEMTMzRENCREFFNEVDOUMvSHpoWHg1
RFFJMTk0MFRoYkRyYVRDd2p6cU9jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSHpoWHg1RFFJMTk0MFRoYkRyYVRDd2p6cU9jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1RDcxNC81MkEwMUZDMDIyMjIxMUYxOEQxMzNEQ0JEQUU0
RUM5Qy9IemhYeDVEUUkxOTQwVGhiRHJhVEN3anpxT2MubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBALjyECVYAmsI1tOYMRdmKRXNWph2HYf5
N3qQZIwHcxHF7sDL+gDNtdTbMLlfxVu/d/yyMq62ftrlYDAZTwpUS7Qx/qFtiMjr
lTS4Xvw/0RkooVkaKvLVahalKuf4E4cId8lm8LWQzi61hMzTRkKWhBFsKCOqq7y9
9QRB6lTZUnkTS1fo3q52nWzxusihRZ5lujm646UM7Chp643t2klYb6y8iIY3XyJl
ZCQ89oIbz6C73/KZ/58Ej1AE8W3ETmghzHomwcx1XTN5zPHNREBLIyIzroM6Cgyp
SrssHheCpkXuIKGYxmz7+bWxslnbJ5VTCvzA5LNbyr3t1jnXp/01oEw=
-----END CERTIFICATE-----
Generated at Thu May 7 21:35:58 2026 by rpki-client