Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          z7t/GWD5you7QUsZDCwxVZQRoF9vXblDtTKCXp+ooiU=
Subject key identifier:   78:C3:D7:70:6D:D3:83:41:CC:90:5C:26:14:BB:50:F7:F8:7C:D9:C1
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0A20
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0A1F
Signing time:             Tue 05 May 2026 01:24:34 +0000
Manifest this update:     Tue 05 May 2026 01:24:33 +0000
Manifest next update:     Thu 07 May 2026 01:24:33 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: H2K1VGIMXowb+NnWJ0grXkJ0RtcplF9F2xIxRcsNi8k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2592 (0xa20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: May  5 01:24:33 2026 GMT
            Not After : May  7 01:24:33 2026 GMT
        Subject: CN=69f946d2-8629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:04:46:14:6f:12:51:74:50:88:43:41:76:
                    c7:ef:d0:6f:38:f2:0f:1f:d3:07:ba:0e:08:32:61:
                    75:b4:9e:d8:2f:61:7f:67:d5:40:21:e7:c4:4a:8f:
                    4c:57:13:f8:db:63:ac:d5:8d:ab:93:5e:83:9f:4c:
                    5d:c9:34:32:2e:02:d3:0a:eb:5b:2d:40:8d:d1:c8:
                    de:d5:cc:9d:a0:0f:be:05:28:b4:ba:c5:59:68:6c:
                    c7:82:25:7a:a5:b8:28:04:e7:27:a3:c4:36:b1:62:
                    8c:db:ce:1b:e4:46:e5:28:15:9a:3d:97:42:81:61:
                    ab:20:70:68:ce:8a:51:a6:54:fa:cb:c8:a4:a0:6e:
                    6f:c4:d2:98:a8:60:ee:8d:6e:c7:31:93:7e:f2:61:
                    39:1f:b4:9b:b2:0d:93:19:09:6d:5e:0f:84:56:a5:
                    db:ef:7a:38:28:f1:27:cc:b7:ca:21:5b:f5:4c:92:
                    ea:6b:d4:93:8d:85:6a:11:54:4b:66:56:bc:6c:82:
                    02:1f:c0:41:06:ab:65:30:b1:ce:01:33:ca:21:42:
                    0d:10:6d:aa:21:70:2e:50:55:e4:76:69:55:15:15:
                    5e:06:1c:5b:5f:60:94:88:c8:72:2b:30:90:e3:2a:
                    0b:35:74:1e:d3:ad:47:03:b0:9b:3a:5d:d3:03:ce:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C3:D7:70:6D:D3:83:41:CC:90:5C:26:14:BB:50:F7:F8:7C:D9:C1
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:72:70:eb:9c:b9:17:ca:76:2e:ea:3b:13:bb:69:84:63:
         0d:63:a5:8d:aa:14:da:87:44:a7:2f:7f:2a:54:49:02:00:28:
         9f:5f:6c:35:12:f8:63:e5:08:c7:20:b1:55:33:95:7c:7c:d2:
         5b:ac:fe:ac:18:b3:cd:90:96:97:48:32:14:65:69:04:dd:fc:
         34:93:73:0d:70:d7:ab:41:a6:af:ae:37:cc:10:d4:7a:bc:b0:
         50:37:76:44:89:89:e0:62:ec:38:f1:c1:4f:87:72:fe:3c:af:
         21:6f:af:cc:35:59:cb:8b:4f:63:20:d8:20:a1:e8:78:7d:6a:
         58:54:ab:28:d4:91:22:e8:d1:0a:35:39:af:44:a9:93:16:8b:
         c7:94:68:4e:af:59:71:eb:92:66:1b:43:c6:10:74:d1:16:5a:
         7b:10:c4:68:a2:c6:59:e0:46:63:93:30:16:2e:9d:0b:10:92:
         d5:50:9d:9f:d8:96:43:8b:ac:cb:9f:eb:2c:07:ae:5f:e1:b8:
         6b:0a:62:10:15:b7:67:03:0e:96:fa:72:16:3a:4f:a3:79:2c:
         5b:bf:c2:3a:0a:a6:55:fd:4b:3d:17:db:c3:e2:bb:15:f9:74:
         a6:02:ba:a7:a6:bc:17:09:df:78:a6:da:3b:22:77:e1:4d:27:
         ca:1f:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:12:58 2026 by rpki-client