Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
File:                     htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft (raw, json)
Hash identifier:          aB0ZfBvbse4o9px7roI6ehpyCrUzdCyCCKOKOKujL+I=
Subject key identifier:   EA:D0:38:3C:CD:A7:E7:FA:3D:6D:F8:75:2E:48:43:F5:1D:4A:BC:8A
Authority key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Certificate issuer:       /CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
Certificate serial:       0653
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
Manifest number:          0652
Signing time:             Mon 27 Jul 2026 02:40:13 +0000
Manifest this update:     Mon 27 Jul 2026 02:40:12 +0000
Manifest next update:     Wed 29 Jul 2026 02:40:12 +0000
Files and hashes:         1: htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl (hash: p5q4G2VLxFvm/G+3AldGxmMd7N9Gwsy9Hmh5cK0Bzz4=)
                          2: 79EE3F02B0EE11ECBF890E845A40D577.roa (hash: Ubonh4WupVYX7KDVzMvxh6Y6MxDnvCg7ttFECjnjgfI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Jul 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBAF, serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
        Validity
            Not Before: Jul 27 02:40:12 2026 GMT
            Not After : Jul 29 02:40:12 2026 GMT
        Subject: CN=6a66c50d-028c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:11:b7:75:96:f5:f9:5b:ac:68:8e:2f:df:
                    c3:fa:c7:cb:ad:a1:80:be:06:c4:c4:4a:0a:08:8a:
                    6d:f5:4e:82:44:4b:31:91:80:94:e9:4d:49:54:bf:
                    9f:09:3c:d8:f6:17:b3:6e:bd:13:cb:50:30:b4:11:
                    dd:4b:91:e6:be:30:33:36:c1:3e:70:a5:1d:2d:a8:
                    28:18:86:74:c6:f1:e7:c8:04:7c:12:49:a3:48:99:
                    01:10:fa:4b:5d:56:e1:bb:b3:eb:03:00:ca:fb:76:
                    6d:ad:81:80:4a:cc:63:5c:ce:2a:b5:c1:06:d7:af:
                    3f:b3:64:8b:21:fe:ae:a8:3a:dd:83:52:c5:2e:2b:
                    9e:f6:d1:15:5c:7e:94:6f:15:db:13:7c:61:9f:54:
                    ef:5f:32:fb:3c:7e:35:58:13:87:15:0b:c0:de:71:
                    dc:4f:07:07:77:cf:46:dd:cd:a1:90:7d:e3:d4:e7:
                    27:d9:4c:5c:7a:9e:c7:36:b8:13:92:88:99:02:4f:
                    35:ec:5f:2a:99:78:f2:fa:91:85:73:ef:0f:23:31:
                    50:cf:97:a1:d7:7d:eb:a8:3c:ee:5a:7e:75:aa:24:
                    4b:87:51:8b:83:3a:8d:44:95:49:d1:c7:88:11:aa:
                    36:1f:87:cf:4f:85:63:75:93:96:f6:49:39:35:8b:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D0:38:3C:CD:A7:E7:FA:3D:6D:F8:75:2E:48:43:F5:1D:4A:BC:8A
            X509v3 Authority Key Identifier:
                keyid:86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:13:48:c7:5c:40:a3:26:57:2a:d0:3f:c8:5f:eb:a9:4a:b1:
         38:70:cc:93:cd:e8:44:2e:9c:8b:b2:94:c3:ab:9a:d5:73:ae:
         4c:e2:81:f8:f1:87:40:67:da:2b:a2:54:5d:07:c3:0f:97:60:
         88:c7:8b:b8:c8:36:39:f1:9f:df:84:b8:55:a0:17:7e:82:1f:
         04:be:11:fb:18:e9:38:5d:0b:a7:08:3a:c2:5c:19:5a:c6:b6:
         13:f4:03:13:9f:71:f6:c3:5c:25:5b:dd:b0:85:17:6f:7c:43:
         17:fd:43:87:b4:ca:e8:d4:09:f7:e2:b2:cc:ea:ce:61:a9:8f:
         a8:dc:57:a2:ee:a9:8c:b7:47:75:77:22:20:6a:c6:27:bb:6b:
         c0:b5:08:f3:9f:1e:0b:86:ad:9c:10:ef:28:70:87:c0:4e:a3:
         10:23:c9:6c:74:69:dd:48:82:c9:0d:82:10:84:cc:a3:e6:d9:
         e5:04:c9:3e:4e:a5:98:d2:4d:7b:7c:9f:25:32:2e:fe:5b:de:
         00:47:b1:ea:cb:04:55:12:05:13:35:ea:44:3b:74:29:23:bc:
         06:4f:ee:57:5a:96:3a:d5:6b:d7:71:8f:e0:bd:6c:0d:2c:52:
         de:00:95:7a:f7:28:00:21:e5:c9:a9:ea:0b:2c:f2:be:d9:91:
         8f:53:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:28:50 2026 by rpki-client