Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier:          Hf6wGggENHgg+L15396sRMzMnp89x1nZ1bwSzfYayHo=
Subject key identifier:   6A:EC:1E:C5:06:55:84:D4:4B:F2:E9:A2:8D:E4:82:75:2B:EA:E0:7C
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       09B1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number:          09A4
Signing time:             Tue 17 Mar 2026 01:44:23 +0000
Manifest this update:     Tue 17 Mar 2026 01:44:22 +0000
Manifest next update:     Thu 19 Mar 2026 01:44:22 +0000
Files and hashes:         1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: tMPncxIfBTrr5RRr2KtEXfIDfHzwoWY/jltr1la1dfY=)
                          2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
                          3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
                          4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
                          5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
                          6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
                          7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
                          8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
                          9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
                          10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481 (0x9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Validity
            Not Before: Mar 17 01:44:22 2026 GMT
            Not After : Mar 19 01:44:22 2026 GMT
        Subject: CN=69b8b1f7-daa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:5f:0f:99:9c:c9:10:6e:36:ac:af:fc:57:
                    4e:46:67:1e:05:39:e5:bd:ca:16:39:02:32:d2:8f:
                    14:0c:cc:b8:d8:fc:78:5e:90:e0:d5:bb:ca:70:7c:
                    57:6d:91:6c:ea:65:10:1e:36:ca:3a:15:c2:ca:f1:
                    20:4d:93:e3:79:ef:68:df:09:3f:17:ca:b9:a7:bc:
                    7c:e6:1a:74:9d:d4:2d:5c:8a:69:9f:ef:ac:8c:9e:
                    65:e7:23:cf:22:a3:a2:36:c1:dc:ea:0f:8e:3d:60:
                    ad:46:8b:bd:83:db:d3:67:9e:92:6b:7d:e2:be:f3:
                    73:07:38:d0:c4:d6:ec:c5:59:ad:ed:78:bf:b1:78:
                    d8:f1:7d:9d:5a:16:fa:0b:b8:ef:19:49:07:32:32:
                    81:06:f6:b9:a6:fb:5f:71:12:a4:21:d3:49:b6:1e:
                    0f:28:1e:2c:07:76:12:69:50:fc:31:30:ea:b9:53:
                    0e:d1:5b:85:75:af:74:65:66:52:33:5d:6e:1a:e8:
                    58:f5:77:ee:ca:e8:5d:64:b4:fb:c9:9b:ca:88:05:
                    4d:d7:c0:90:5f:f1:00:48:7d:84:c1:58:3c:53:3f:
                    af:55:d5:42:84:1e:de:52:57:ea:f5:50:1d:ef:fe:
                    f1:b4:84:6f:db:f6:dc:77:49:e5:40:65:29:6a:f4:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EC:1E:C5:06:55:84:D4:4B:F2:E9:A2:8D:E4:82:75:2B:EA:E0:7C
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:40:79:f6:d0:e7:2f:81:dd:69:79:04:44:3c:0a:c2:3a:
         17:e2:13:10:b6:f9:31:7c:80:21:32:e5:76:34:24:d8:98:73:
         39:28:9b:c5:a0:af:51:e9:a2:11:74:ab:f5:5c:8d:db:2f:29:
         c7:98:bb:20:2b:67:56:2b:f9:4f:2c:ce:89:f4:bd:50:6f:da:
         af:e8:24:77:c6:3b:b9:05:7f:05:6b:5f:c5:26:28:52:cd:89:
         a1:ac:00:97:a1:43:9d:cb:30:7f:32:5e:b3:ab:c7:77:86:bd:
         99:22:bb:e6:74:bd:4f:24:b8:2e:7a:07:15:f6:1a:ae:f5:22:
         51:3c:6b:4a:e1:06:67:5f:ed:92:d7:8f:a9:54:8d:e4:9c:d3:
         15:ef:4e:26:0c:0d:57:8e:45:42:cb:b0:68:b0:ea:74:2c:c4:
         58:f3:6f:c8:84:e7:38:8b:25:46:73:69:06:40:e9:11:48:4f:
         1c:d6:83:25:af:ca:80:18:5b:f8:93:98:ce:41:bd:21:df:2e:
         a3:13:d8:2b:a6:63:30:2d:ea:70:86:31:5a:51:30:3a:05:d0:
         4f:39:66:22:ac:3e:87:45:e2:a3:c6:ce:7d:20:dd:3a:c3:85:
         fa:23:9f:0a:66:93:90:ea:14:a3:20:62:77:44:c5:ed:eb:5d:
         ec:35:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 22:44:04 2026 by rpki-client