Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
File:                     mHDlywkkDsWdzHR_wANn6a86DM0.mft (raw, json)
Hash identifier:          V2jswxRnzuGtewopf4B/tt80CRtun+QvXR+yF5kbzdQ=
Subject key identifier:   41:2A:3A:BB:68:91:9E:0F:36:57:8F:F5:3F:92:6F:76:0B:EF:98:6C
Authority key identifier: 98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
Certificate issuer:       /CN=F3692D54AF/serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
Certificate serial:       24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
Manifest number:          23
Signing time:             Sun 21 Jun 2026 05:39:58 +0000
Manifest this update:     Sun 21 Jun 2026 05:39:57 +0000
Manifest next update:     Tue 23 Jun 2026 05:39:57 +0000
Files and hashes:         1: mHDlywkkDsWdzHR_wANn6a86DM0.crl (hash: ldPfuhPH5umitCWM9WEckViPJp1jFFXpeprKcH01EEM=)
                          2: 16CB630E537511F180D8AAD7CE1D38B0.roa (hash: JKBLviW+yQWqYEf8gUdXTrj2d3ebFwRg37GifKHB/Ok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D54AF, serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
        Validity
            Not Before: Jun 21 05:39:57 2026 GMT
            Not After : Jun 23 05:39:57 2026 GMT
        Subject: CN=6a37792e-6b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:d0:99:6a:d9:10:31:f3:21:6d:05:29:a9:
                    3d:11:37:ae:ad:46:81:e9:c7:a3:2d:98:f4:f5:6e:
                    41:a1:f4:75:60:cd:8a:72:5d:48:f7:4e:61:d5:00:
                    61:3b:25:f7:25:a6:66:91:dd:ad:54:df:d3:50:f4:
                    19:dc:59:c4:13:aa:f7:ca:be:a2:0b:91:bc:5e:4e:
                    70:23:dc:65:de:1c:ac:dd:c0:48:2a:f2:7b:9c:b4:
                    f4:1c:14:f8:1f:41:3a:b2:a0:9a:fc:0c:99:fc:33:
                    c6:15:6b:84:27:31:af:37:73:ab:53:3c:8f:20:26:
                    af:cd:ac:a1:5b:02:5b:52:a6:8d:ce:58:06:88:59:
                    d9:d6:aa:1d:7c:4f:5b:4d:eb:f3:1e:66:4a:02:61:
                    b8:f1:ec:d0:ab:c8:9b:f0:35:c9:34:2d:b8:ef:4a:
                    98:9a:26:04:20:b4:51:bd:ef:17:e2:b3:77:8b:99:
                    84:a6:eb:e4:c6:49:7e:da:e0:e4:5f:82:5c:47:a5:
                    63:55:22:19:bf:24:9f:54:65:25:78:62:ee:7f:1e:
                    f7:81:9e:b1:6e:30:27:16:0b:bd:bb:89:ec:f7:57:
                    55:29:5a:c5:89:33:f1:c9:7a:24:0b:08:85:fb:bb:
                    a1:f3:b2:68:aa:b5:3e:e1:00:93:5f:be:9c:91:e7:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2A:3A:BB:68:91:9E:0F:36:57:8F:F5:3F:92:6F:76:0B:EF:98:6C
            X509v3 Authority Key Identifier:
                keyid:98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:33:26:a0:0c:94:ef:d1:5d:31:4e:ec:3e:bc:61:b1:49:94:
         73:46:a5:64:cb:79:d2:a7:d5:a9:a8:28:e4:33:f8:1c:19:a1:
         0c:dd:77:03:27:0c:62:bf:3a:26:e5:e1:bf:8e:8f:14:7c:a2:
         18:9d:e1:f9:53:1c:09:e9:73:01:07:95:fe:98:1c:ce:71:09:
         da:a3:a8:bc:f2:a7:ea:72:1e:ec:86:61:e0:e3:80:b8:e0:00:
         87:de:ec:c1:6c:1c:8b:18:ed:33:07:72:a2:6e:3f:90:1f:8a:
         35:08:73:3d:1f:38:ea:2e:4e:4e:bf:bb:e1:08:77:46:4c:0b:
         bc:4c:63:11:2d:8c:60:3d:64:83:ff:0d:1c:a8:70:68:02:bb:
         b7:81:90:fc:4a:b2:98:6f:8d:1f:b0:20:9e:bd:2c:d2:80:7e:
         40:14:5d:ce:b6:16:db:e0:60:e3:18:12:dd:85:5f:cc:2f:0f:
         a8:6a:19:c1:8e:3b:af:37:48:a8:ec:e7:8d:ca:b4:68:b2:0e:
         2b:58:f6:fa:3e:8e:44:3d:11:32:30:6f:77:9a:4a:8c:61:69:
         77:eb:80:9a:5c:7f:06:c2:2c:b8:b0:b4:31:1c:6b:bc:59:1d:
         e2:6e:5e:7c:08:b1:bc:74:64:b9:a5:87:13:fb:5d:55:a5:8c:
         43:91:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:34:49 2026 by rpki-client