Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
File:                     HjBtERG9MU9g94_Cmxf7xqsItYk.mft (raw, json)
Hash identifier:          zbD/Sw/StAF6kONL4elZ5zsV5+s5Hm917Uv8zMKSGN4=
Subject key identifier:   74:15:36:58:CD:0E:26:D2:90:76:93:1C:E0:6D:79:DB:64:96:04:87
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Certificate issuer:       /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial:       66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
Manifest number:          65
Signing time:             Thu 07 May 2026 05:25:20 +0000
Manifest this update:     Thu 07 May 2026 05:25:20 +0000
Manifest next update:     Sat 09 May 2026 05:25:20 +0000
Files and hashes:         1: HjBtERG9MU9g94_Cmxf7xqsItYk.crl (hash: OyQC0yx+ztqSKeiJUL5+j4flucrjp2prrpi8mnDPOO0=)
                          2: AE231146010611F1AF8CD7E0DAE4EC9C.roa (hash: yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
        Validity
            Not Before: May  7 05:25:20 2026 GMT
            Not After : May  9 05:25:20 2026 GMT
        Subject: CN=69fc2240-f74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:ac:da:27:af:09:a3:c4:05:f5:c1:fd:a2:
                    ce:d7:f0:a0:cf:bc:20:91:5e:63:e5:4b:e6:db:f9:
                    70:e9:d1:6f:9b:b2:1d:0c:bc:6b:0f:30:26:a4:7d:
                    09:03:95:f6:ae:48:5d:7d:47:a3:d9:46:ea:83:21:
                    2c:3b:d2:0e:69:86:d2:18:86:29:35:dc:76:48:80:
                    2a:d2:50:ec:6e:58:df:13:84:8a:63:5d:0c:fd:ca:
                    bb:ae:32:d5:c7:72:c3:d5:30:8a:e5:c5:b5:ca:70:
                    67:24:68:5d:06:e4:e7:07:d5:74:9a:1f:02:26:f9:
                    f8:11:1d:a2:35:be:01:4c:50:35:5b:a9:4f:56:1e:
                    ed:ed:c2:1f:a3:eb:e9:9d:ac:66:31:11:cc:c3:8c:
                    c3:97:b2:94:27:23:ae:a2:8d:8a:6e:90:9d:c4:28:
                    b7:97:3d:7d:68:5a:f4:39:a8:de:56:48:89:c7:ca:
                    0c:a4:58:10:0b:ef:f1:49:22:24:b2:82:8c:ab:f8:
                    9a:27:72:ac:43:24:ba:29:41:ef:14:63:8b:cb:60:
                    d0:4f:b9:41:20:a5:31:1b:b9:87:03:82:6b:a3:2f:
                    1e:03:50:c8:59:c9:5e:da:26:d5:0f:26:fe:65:b6:
                    80:8d:2d:cc:ea:f2:e4:a1:85:88:e0:05:5e:de:38:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:36:58:CD:0E:26:D2:90:76:93:1C:E0:6D:79:DB:64:96:04:87
            X509v3 Authority Key Identifier:
                keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:48:53:c2:95:43:63:a2:30:11:48:66:68:d6:58:28:53:
         ba:47:15:94:05:7a:30:e5:b0:f7:0f:ea:84:69:16:6c:f0:4e:
         eb:b0:12:e4:d6:bd:16:7e:8d:a2:e3:95:0b:91:f4:34:bb:b8:
         e1:25:af:7f:4c:72:17:2b:bc:e7:81:f5:79:67:09:e4:b9:90:
         46:9e:eb:6b:30:af:c2:02:5a:1d:61:0b:ed:ea:f0:d6:21:e2:
         8e:af:92:ce:89:8a:f1:f4:a8:45:4c:93:0c:cc:b8:91:16:7b:
         95:1b:58:64:44:c0:2c:15:92:04:41:61:74:58:7c:83:0c:2a:
         9d:c8:c2:c8:47:ab:84:f8:82:fd:3e:f7:be:0c:4a:ca:35:1e:
         7b:51:dd:b3:4f:24:21:db:a2:a7:b8:1a:48:56:ae:81:de:ad:
         4e:04:38:da:e1:f8:58:7e:d8:c4:86:b4:0c:b8:97:f0:46:4d:
         d4:92:a0:93:34:ed:4b:2e:c4:47:90:7b:97:5a:c6:a4:a6:19:
         5f:52:88:70:c6:73:c3:e8:16:92:ff:4f:13:21:bf:a0:88:dd:
         ee:c2:57:45:fe:a6:ce:c3:3d:bc:f2:b9:c0:ce:35:de:6f:4b:
         c5:3b:44:a5:67:74:40:94:4b:1b:e5:e5:a7:19:b9:49:a6:a9:
         ff:cd:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:37:02 2026 by rpki-client