Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
File:                     H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json)
Hash identifier:          wT0R73jsrMmv9JLSe2dWj6xpkbjTbZ/8g15pmQqnksM=
Subject key identifier:   F1:01:C5:C9:75:AB:09:A7:6E:48:7A:8F:DD:37:6E:E1:63:70:67:8C
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       076E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
Manifest number:          0752
Signing time:             Sun 21 Jun 2026 02:16:55 +0000
Manifest this update:     Sun 21 Jun 2026 02:16:54 +0000
Manifest next update:     Tue 23 Jun 2026 02:16:54 +0000
Files and hashes:         1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: 35KC0cCSV7wHQevABenQ/D/ha+8OWRSMzN2g8MA5BL4=)
                          2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=)
                          3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=)
                          4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=)
                          5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=)
                          6: D8AB9D10C89011F0BEE7EFC7DAE4EC9C.roa (hash: mi8Ptbn8iwhQRbwYylFtD3uAOG7kNqb26/g5AbK5ZUA=)
                          7: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=)
                          8: 2E629470C89111F09FB590CBDAE4EC9C.roa (hash: EFh5M3QCNjeimEXA/mXdWrIx1eozgW+kjskB/TPAG8g=)
                          9: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=)
                          10: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=)
                          11: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=)
                          12: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=)
                          13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=)
                          14: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=)
                          15: 0FBCEAAEDCB711F09DDEE8BBDAE4EC9C.roa (hash: EmQsAEGTM1w3mZK41HDnUozu8PJBPWVc7GCPvEYJ9Vg=)
                          16: 51F4E7CEC0BE11F08C39787ADAE4EC9C.roa (hash: 2W4J7B3ID8LDT8DfX7jRxG+YaxSbNbWFCc4sdyZIaUo=)
                          17: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Jun 21 02:16:54 2026 GMT
            Not After : Jun 23 02:16:54 2026 GMT
        Subject: CN=6a374997-359f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:70:80:8b:67:b4:c6:3c:ad:a8:63:15:53:
                    46:09:bc:97:2c:01:1a:d7:7f:cf:de:2b:76:06:70:
                    41:cb:61:97:cd:14:ad:10:27:40:df:52:a3:c4:53:
                    9d:de:9d:f5:06:a8:31:db:25:dc:18:02:7c:3d:90:
                    5f:e4:d4:05:20:46:80:c8:bb:32:94:d9:a6:e3:a9:
                    87:63:4a:94:bf:b1:ee:46:63:05:7f:84:fd:6d:49:
                    e5:d7:39:7e:79:7d:b7:61:4a:2f:ff:8d:28:8e:74:
                    cf:b3:28:56:04:27:75:34:4f:b9:27:04:15:41:b1:
                    75:f7:6f:bc:fb:1d:d3:7f:03:e8:d2:ab:d8:05:9b:
                    84:5a:2d:7d:84:6e:9a:4c:e8:f0:ad:3e:52:03:f3:
                    f7:6f:67:1d:1f:5c:1a:f3:7c:67:93:a7:c7:e2:82:
                    49:6a:a0:4f:5b:f6:7e:d3:9c:4f:83:41:55:bc:d5:
                    37:60:29:3d:cf:57:d8:7f:13:7b:59:da:44:f7:09:
                    02:87:08:02:bd:1f:1b:3e:28:a5:00:4b:77:1b:1c:
                    03:9c:08:90:5f:f8:f9:f9:ee:9b:6d:55:bd:de:0d:
                    79:17:92:17:e8:46:b7:8c:d0:10:cd:1a:6b:1f:79:
                    30:a5:5a:67:0b:08:d6:6c:c6:25:ba:39:69:4e:73:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:01:C5:C9:75:AB:09:A7:6E:48:7A:8F:DD:37:6E:E1:63:70:67:8C
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:c1:88:50:7d:c1:f9:fb:36:9c:82:57:99:88:48:5d:1d:
         96:63:19:f3:a5:02:dc:fb:9f:7f:db:4b:19:0e:ba:f1:df:17:
         57:df:d6:f8:be:1c:a9:ac:47:8a:a4:f7:1e:c2:63:df:5a:ee:
         eb:4f:09:9e:32:2f:51:17:44:95:f3:01:b2:99:7c:ef:30:13:
         77:fc:19:10:82:aa:d3:20:63:54:02:34:42:16:11:49:cd:1b:
         7f:80:dd:da:ce:d8:04:e6:b9:58:3c:73:0c:f3:d6:55:ad:81:
         4c:85:bc:f6:47:bb:1c:19:b7:0f:92:1f:cd:60:90:77:37:64:
         27:3b:cc:d9:e9:c9:5a:e0:68:4e:8e:18:75:22:5c:5f:15:f7:
         bb:44:d2:23:fe:37:e4:2a:1d:f8:8d:08:d2:5b:73:b3:15:c0:
         c4:86:5d:e4:2e:5a:4b:03:c6:ea:86:50:43:5f:55:e4:e1:fd:
         17:81:f4:d6:73:bc:20:a9:34:1d:42:88:48:11:bc:a4:85:ed:
         63:29:0d:d6:96:e4:11:16:82:2b:f3:50:90:cd:71:b1:fa:4c:
         b7:34:61:78:92:13:2a:b4:ab:91:21:a6:06:b4:17:d6:ea:fa:
         c8:ab:25:c5:21:2f:2d:d1:98:ae:a6:1d:56:7c:80:0d:90:34:
         f0:06:2a:25
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB24wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0
OTg0MkM4RDZBMDAeFw0yNjA2MjEwMjE2NTRaFw0yNjA2MjMwMjE2NTRaMBgxFjAU
BgNVBAMTDTZhMzc0OTk3LTM1OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE7HCAi2e0xjytqGMVU0YJvJcsARrXf8/eK3YGcEHLYZfNFK0QJ0DfUqPE
U53enfUGqDHbJdwYAnw9kF/k1AUgRoDIuzKU2abjqYdjSpS/se5GYwV/hP1tSeXX
OX55fbdhSi//jSiOdM+zKFYEJ3U0T7knBBVBsXX3b7z7HdN/A+jSq9gFm4RaLX2E
bppM6PCtPlID8/dvZx0fXBrzfGeTp8figklqoE9b9n7TnE+DQVW81TdgKT3PV9h/
E3tZ2kT3CQKHCAK9Hxs+KKUAS3cbHAOcCJBf+Pn57pttVb3eDXkXkhfoRreM0BDN
GmsfeTClWmcLCNZsxiW6OWlOc8dtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8QHF
yXWrCaduSHqP3Tdu4WNwZ4wwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI
1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy
R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB
MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrdMGIUH3B+fs2nIJXmYhIXR2WYxnz
pQLc+59/20sZDrrx3xdX39b4vhyprEeKpPcewmPfWu7rTwmeMi9RF0SV8wGymXzv
MBN3/BkQgqrTIGNUAjRCFhFJzRt/gN3aztgE5rlYPHMM89ZVrYFMhbz2R7scGbcP
kh/NYJB3N2QnO8zZ6cla4GhOjhh1IlxfFfe7RNIj/jfkKh34jQjSW3OzFcDEhl3k
LlpLA8bqhlBDX1Xk4f0XgfTWc7wgqTQdQohIEbykhe1jKQ3WluQRFoIr81CQzXGx
+ky3NGF4khMqtKuRIaYGtBfW6vrIqyXFIS8t0Ziuph1WfIANkDTwBiol
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:48 2026 by rpki-client