Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
File:                     htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft (raw, json)
Hash identifier:          wQ4mBoWSbf3xvpa0Yq1ac7lDu/aRfA1sxz6dL6FsOtI=
Subject key identifier:   C1:A8:75:94:F3:73:D2:B1:B9:CB:13:C2:CF:FC:4B:8F:1F:74:03:83
Authority key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Certificate issuer:       /CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
Certificate serial:       0683
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
Manifest number:          0681
Signing time:             Thu 10 Sep 2026 02:39:27 +0000
Manifest this update:     Thu 10 Sep 2026 02:39:26 +0000
Manifest next update:     Sat 12 Sep 2026 02:39:26 +0000
Files and hashes:         1: htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl (hash: 07mxdX2q/3Yshs5HBbAQQ/m1w60lG8U+9bD56k3xSc8=)
                          2: 711CFAE68EFF11F1861E12F7CE1D38B0.roa (hash: YcxFaRYDU93ic2kkJf38rgwio29IQhYMfFVkiCv5/sQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 02:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBAF, serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
        Validity
            Not Before: Sep 10 02:39:26 2026 GMT
            Not After : Sep 12 02:39:26 2026 GMT
        Subject: CN=6aa2185f-9dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:04:ec:06:fb:d2:df:70:4a:9d:f3:1b:0f:
                    b5:1c:22:fb:54:80:52:49:23:89:ae:49:fe:0e:39:
                    43:dc:90:c8:ae:da:92:65:c0:3f:c9:0f:a9:18:dd:
                    83:2e:4b:78:1f:c8:d6:31:8c:d2:af:4f:d3:ba:14:
                    fb:18:4c:d9:63:7b:c7:e7:86:ba:d1:51:d5:33:3d:
                    8d:86:32:c4:fa:56:80:14:a2:bb:80:eb:47:97:2d:
                    52:f5:0a:2b:52:93:98:a6:ad:66:fc:36:1d:9b:49:
                    cc:16:2d:53:62:f5:fd:ca:85:92:b2:bb:ed:a5:00:
                    13:bb:a9:27:0c:ab:c5:f3:f4:6a:98:c2:4d:a1:b6:
                    42:45:fa:f2:ae:21:4a:01:cb:0c:68:f8:d0:a9:78:
                    9a:36:38:a3:ab:af:f2:09:04:26:4e:71:a9:0a:61:
                    ac:44:2c:14:a8:f6:da:5c:98:a3:8f:61:a4:b7:6e:
                    1e:cf:38:a9:45:e8:3e:43:b5:96:42:16:6a:54:14:
                    d1:18:8d:45:f8:b7:cb:1f:4a:12:88:e5:28:29:ef:
                    43:00:1a:f3:28:00:93:61:5b:c7:c7:b3:97:8d:f9:
                    6c:f3:49:95:77:f6:11:2d:a8:df:89:e5:0e:32:8a:
                    6f:b0:06:4a:d1:cb:66:87:0c:21:6f:fc:af:9d:39:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A8:75:94:F3:73:D2:B1:B9:CB:13:C2:CF:FC:4B:8F:1F:74:03:83
            X509v3 Authority Key Identifier:
                keyid:86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:c9:f7:96:af:7c:42:b4:ff:9c:c9:85:ff:1f:90:4b:cc:
         6a:73:31:ad:d1:cf:5b:c2:39:3c:92:a0:52:c5:ef:58:ed:34:
         9b:b7:31:e2:78:f6:d6:17:f5:d4:36:5e:c4:ac:35:cb:14:c8:
         f8:77:9b:b0:5e:d6:ce:ee:64:f4:df:fa:7d:51:95:4c:81:fe:
         1e:28:19:a3:80:c3:2e:87:7b:90:c3:28:fc:b9:1e:58:a4:9f:
         20:a5:8f:ff:93:62:be:b8:9b:ab:17:bc:44:c6:88:db:af:5d:
         0d:6a:3c:f8:23:31:3b:08:f5:80:de:f4:7f:58:54:c6:e2:cc:
         e3:04:52:47:8b:b8:1b:25:43:e1:3d:8a:5b:85:27:2d:dc:e4:
         48:73:2d:6f:91:36:90:b8:fe:5e:ff:a5:03:19:30:90:ba:4b:
         b0:97:53:af:32:23:53:a9:b0:61:9a:ea:72:fb:27:80:52:6c:
         a5:ca:1e:6a:87:1a:4d:be:45:b0:3f:44:dc:ad:ad:b5:95:e8:
         57:3f:ce:12:f1:05:19:42:bc:29:de:6d:32:bd:29:85:cf:57:
         ab:69:0b:66:59:b0:b0:ef:b8:7a:be:4a:7b:25:95:c9:34:7d:
         3c:1c:ae:83:20:14:ee:c2:d9:f0:44:99:d0:53:35:6f:3f:eb:
         7a:87:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----