Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          1O+NKW5+Q4Wa+BRgVvim1sGnx5nV651N8KBijSxFzW0=
Subject key identifier:   81:BC:85:FA:5D:EB:B6:A7:53:19:EB:3A:39:C9:C4:62:72:52:75:F1
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       0811
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          0808
Signing time:             Thu 07 May 2026 01:57:39 +0000
Manifest this update:     Thu 07 May 2026 01:57:39 +0000
Manifest next update:     Sat 09 May 2026 01:57:39 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: RHBrcNAC14w/p5vZ1Kc36sm9mnwSiwRsLfKmJvxuBXE=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: May  7 01:57:39 2026 GMT
            Not After : May  9 01:57:39 2026 GMT
        Subject: CN=69fbf193-95b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:14:6c:94:65:75:35:63:67:e6:14:ee:2d:
                    09:27:de:07:f8:b8:eb:2c:fb:e5:33:bc:b6:6f:b7:
                    ef:d9:7f:4b:2a:bc:65:ca:c6:e9:a1:3c:94:55:32:
                    69:c4:cb:3b:51:c1:25:40:f2:32:9f:df:56:43:11:
                    19:c3:a8:7c:f5:6c:42:de:57:39:48:44:1c:20:5e:
                    49:74:81:eb:58:33:66:5d:06:71:2b:9e:58:88:8f:
                    6b:4e:eb:f7:0c:a3:ea:6c:ff:76:70:1e:a5:f5:c3:
                    6f:0b:54:db:18:fa:d7:31:03:de:d7:7f:ac:8a:84:
                    a3:fd:2a:4f:8a:20:14:5c:55:54:ff:68:ae:a2:6f:
                    e3:8b:ca:55:c5:27:e0:c4:26:4d:14:78:e7:d9:4a:
                    f4:fb:8a:46:2f:15:a4:03:bd:17:d5:50:d4:38:68:
                    83:c6:88:d3:2d:06:36:01:f6:50:69:09:6b:f2:24:
                    18:79:59:5c:a3:b9:cb:e7:91:cb:b8:ba:f5:8c:d0:
                    08:23:98:b2:1f:81:1c:c0:4c:0f:d8:1d:93:b6:d3:
                    15:ba:9f:fe:e4:e0:96:75:7a:be:23:b3:b7:3b:6f:
                    68:d1:fc:d7:ab:92:b4:a9:f7:b0:0c:f0:73:ab:74:
                    20:1d:25:75:a5:6f:ac:99:1d:64:c2:55:04:a7:ac:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BC:85:FA:5D:EB:B6:A7:53:19:EB:3A:39:C9:C4:62:72:52:75:F1
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e5:62:31:c9:26:dc:2c:56:ef:4c:24:55:06:c7:5e:97:5e:
         a3:e9:dc:d8:3c:33:bd:11:dc:6f:7a:04:be:aa:02:83:88:56:
         11:6f:58:46:a9:67:ed:c4:f5:29:c9:29:79:c1:2e:a1:eb:c7:
         8a:52:1c:8e:9d:d1:07:bf:a1:f0:5b:c2:5f:3b:20:de:22:1e:
         8c:1a:ae:85:fd:18:39:58:09:81:10:2f:de:9b:e6:b3:9d:5c:
         ee:04:7f:aa:be:25:4e:69:65:58:2f:32:82:0a:72:a5:8c:47:
         6e:b8:29:c3:5b:c9:82:3b:4b:25:90:ad:99:5f:0b:cc:8b:e4:
         53:ad:12:5c:c1:cc:c4:f5:fb:a4:ed:8c:23:46:0e:8f:6a:db:
         47:ba:0a:25:0c:07:19:6c:ab:c6:66:30:0c:fd:e2:56:cc:96:
         93:87:de:2e:73:98:d6:8f:22:c7:bd:8d:8b:c7:34:1f:53:9a:
         06:60:57:44:c1:16:73:71:0f:14:90:d7:45:4a:fe:aa:4c:0b:
         f7:a5:61:c5:98:76:93:f7:2f:5f:db:3f:ce:56:60:fb:d9:57:
         e7:ce:97:5d:b4:d3:50:77:2a:eb:29:6c:09:d1:25:24:d7:f6:
         81:7c:fa:47:48:4a:25:51:1a:a6:91:41:4d:09:d4:5d:c3:c0:
         cf:8d:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:39:37 2026 by rpki-client