Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File:                     Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier:          2X58JTBczHoCxtzw5lWOlrdcoECJtVFbuFWcf+ZmJd0=
Subject key identifier:   FB:D4:D2:82:0E:2D:14:1F:33:DB:DF:22:1C:45:69:4B:09:94:8A:CA
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer:       /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial:       0530
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number:          052E
Signing time:             Thu 06 Aug 2026 03:13:04 +0000
Manifest this update:     Thu 06 Aug 2026 03:13:03 +0000
Manifest next update:     Sat 08 Aug 2026 03:13:03 +0000
Files and hashes:         1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: E64NbrbpgUwdP3lTteyC+wbaef3tNMLenC+VVplfP5o=)
                          2: 27EE2B4290B311F09FE99A99DAE4EC9C.roa (hash: 08bdIyeGAvENvyYR9kdIYMQj8xo49Was4u9/sqMLubc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
        Validity
            Not Before: Aug  6 03:13:03 2026 GMT
            Not After : Aug  8 03:13:03 2026 GMT
        Subject: CN=6a73fbc0-e167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:96:9f:12:a4:8e:3b:30:b4:73:6a:a0:c4:
                    11:7e:11:a3:39:8c:21:a7:03:0d:4e:26:3f:f4:e4:
                    92:bb:8e:9e:18:39:14:a8:d8:8b:f4:51:42:d8:6f:
                    44:d1:ef:f1:3f:e7:88:b5:65:bc:db:4e:37:a0:89:
                    ac:23:aa:3d:39:46:d7:61:c4:74:48:c2:77:8d:59:
                    a3:82:2a:3f:3d:0f:bf:32:3c:ad:15:8e:b4:fd:34:
                    ac:8d:5f:5f:ce:93:fe:c3:d7:aa:73:40:c2:32:b0:
                    e8:a5:18:0b:74:55:a4:55:cc:6e:f8:52:d0:87:b4:
                    52:ec:34:a5:ff:45:a5:e2:7a:7e:67:d0:69:d9:9c:
                    0e:f6:69:61:a0:17:d7:97:9b:d2:a3:91:27:69:22:
                    8e:52:43:05:cb:33:52:df:2c:a9:be:2d:54:ab:2b:
                    4a:35:82:66:fe:2c:f4:25:88:04:92:8c:cc:e9:cb:
                    60:da:d1:f2:cb:03:2e:67:8c:67:20:7c:42:ad:fa:
                    2f:91:7e:37:0a:1e:89:c0:fb:4c:27:eb:62:d2:a7:
                    be:49:7a:c2:21:2f:1f:7f:b3:95:75:15:d1:f3:d5:
                    ca:92:c1:b0:e5:4a:e7:3c:28:6e:91:d7:99:29:5c:
                    5c:e6:12:c7:08:30:fd:bd:96:d3:c4:4a:2c:b2:d1:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D4:D2:82:0E:2D:14:1F:33:DB:DF:22:1C:45:69:4B:09:94:8A:CA
            X509v3 Authority Key Identifier:
                keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c4:06:f7:4d:6f:fa:0e:2e:8b:a8:13:d6:d8:ee:a2:49:ae:
         24:ec:a1:3c:f9:40:ff:54:9d:ef:29:d0:a9:ba:30:cf:3b:5a:
         92:62:01:74:a9:5a:40:61:81:a0:7b:fc:6d:63:05:88:e1:df:
         f5:f5:1f:00:b3:0e:2d:28:f2:0a:a2:93:a9:7f:70:6e:20:e5:
         96:20:7f:85:52:3c:ef:ff:d2:66:5a:47:59:fa:d8:a9:8c:65:
         64:91:7d:89:9d:75:1a:14:5b:db:fd:6a:f5:76:5c:1f:fb:39:
         a9:cf:a4:72:ed:0e:4b:ca:9c:87:4c:e1:c9:55:1f:0c:eb:c2:
         d4:2f:65:c5:db:3c:a3:3b:d9:7a:68:b6:1c:86:a7:0e:79:99:
         93:f9:04:05:e4:ff:e6:37:ad:fc:9e:d3:90:93:65:63:d5:33:
         b4:a6:cf:7d:5e:f8:1d:73:41:8f:0a:a6:59:2d:35:b8:de:9f:
         52:fe:0f:6c:e4:79:0d:e2:95:b2:ee:ce:37:f8:24:14:4c:1c:
         61:d3:8d:f7:2f:47:63:0e:9f:15:b9:b0:06:1a:bb:dd:41:60:
         51:93:da:c0:3f:2c:58:6b:9d:db:87:b6:2a:8f:66:ef:69:9e:
         cf:9f:33:23:ad:a1:b5:8e:25:72:4b:e6:86:4b:5c:62:e1:e4:
         cb:87:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:57 2026 by rpki-client