Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          O3/6OWj/hsAXXcqLjuHXwwQiefMZdsA5WWKB8T8Wkcw=
Subject key identifier:   92:57:57:83:49:78:9C:02:92:E3:69:98:C9:35:CC:25:E3:5C:55:50
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0A24
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0A23
Signing time:             Tue 05 May 2026 01:23:45 +0000
Manifest this update:     Tue 05 May 2026 01:23:44 +0000
Manifest next update:     Thu 07 May 2026 01:23:44 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: F56QvmaLEnT6UrMlEKcmlZOcyDvmUiBo4As1l4l5rNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2596 (0xa24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: May  5 01:23:44 2026 GMT
            Not After : May  7 01:23:44 2026 GMT
        Subject: CN=69f946a1-e56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:79:69:fb:72:5a:40:83:0d:2a:26:f5:63:
                    3c:35:8b:82:5e:ec:2d:07:99:d5:39:d2:59:6d:00:
                    c2:00:27:4b:87:a6:6a:02:c2:9d:e2:ba:0c:2a:4f:
                    9d:13:52:d9:77:44:7d:3f:7b:75:81:f4:6e:a7:dc:
                    12:7e:19:83:d6:34:d6:f7:0c:02:c4:2f:85:7b:90:
                    63:58:70:b0:a2:93:5c:59:2f:43:9e:6b:d6:46:3d:
                    09:46:82:41:5b:cd:2c:62:3a:33:a1:50:af:a2:3f:
                    bf:6b:62:0f:7a:c8:54:20:e7:5d:52:66:bf:dc:55:
                    af:04:44:ee:d0:63:00:43:43:db:8f:67:56:c3:6d:
                    a6:40:aa:b4:8f:f0:4e:05:f5:8f:7c:8e:a6:fc:b8:
                    5e:e1:52:11:69:6c:03:91:cc:6f:0c:4a:82:bb:da:
                    45:12:9b:7e:39:cc:f5:eb:23:df:c6:db:b3:6c:9e:
                    cf:4a:d9:d8:e1:ee:44:a7:09:36:a0:df:de:01:08:
                    57:44:16:66:de:85:84:e4:7c:54:12:d1:df:33:11:
                    6b:87:2a:74:60:59:30:e2:3d:42:40:c5:8e:78:f9:
                    66:da:35:39:e3:02:42:03:5c:c9:29:07:ea:6a:69:
                    58:11:96:92:da:cc:f0:45:b0:2f:99:3e:4f:20:02:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:57:57:83:49:78:9C:02:92:E3:69:98:C9:35:CC:25:E3:5C:55:50
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:71:6f:8e:70:ba:14:44:68:4a:b9:a8:39:a5:31:0a:4c:
         4a:69:00:9d:2e:24:e8:44:be:7e:b8:f7:48:9d:51:d6:91:36:
         27:f0:81:e5:39:96:d4:55:31:e3:23:0f:e4:4a:8e:1c:c9:e4:
         3b:18:3a:23:65:c4:2a:1e:8a:62:2b:b8:4a:ba:86:f7:d7:68:
         b4:9d:81:6c:95:7a:65:3f:c0:17:41:38:1f:76:0b:4b:ea:3d:
         a5:38:45:c1:7f:08:ec:11:94:e4:ad:40:0a:1b:d4:8f:09:7f:
         dc:a5:62:bb:8c:25:1a:af:11:80:fa:5b:16:f7:bf:78:75:ad:
         19:57:84:7a:68:8b:16:6d:d4:2b:c0:2a:1e:b4:da:6a:0b:8d:
         e2:3a:62:7e:e6:97:f8:64:41:19:a6:db:04:ed:a7:27:c6:18:
         06:de:05:ff:88:5a:69:a1:55:93:98:3f:33:7a:7e:4e:1e:64:
         26:a9:a1:5d:32:e0:5b:50:7b:40:46:5b:b7:f0:10:7a:9b:64:
         5d:bd:56:ae:fa:22:86:49:e2:90:e0:86:8b:52:bb:5a:29:6c:
         be:08:cb:a6:af:0d:7e:83:66:c8:cd:e7:61:06:e2:88:4c:d3:
         3b:40:85:11:f6:41:89:e5:0a:0d:11:aa:42:32:e6:7c:e7:f0:
         55:c6:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:12:59 2026 by rpki-client