Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
File:                     FINhai-2NCU1g2xD_pc41PF-nxI.mft (raw, json)
Hash identifier:          iVQ6bEt8kstxC1t4H48KQA/AgzNUJ/H5YeN3zNKi8vk=
Subject key identifier:   9C:D3:FE:57:79:55:CC:9E:AC:D8:B9:B4:45:8B:E8:DA:09:E3:41:E7
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Certificate issuer:       /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial:       0A09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
Manifest number:          0A03
Signing time:             Sun 21 Jun 2026 01:33:00 +0000
Manifest this update:     Sun 21 Jun 2026 01:33:00 +0000
Manifest next update:     Tue 23 Jun 2026 01:33:00 +0000
Files and hashes:         1: FINhai-2NCU1g2xD_pc41PF-nxI.crl (hash: SSstgSYCr8p4cf8WXq6gSLUId0LLtqpHTTrMvB0v30E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569 (0xa09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0F10AF, serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
        Validity
            Not Before: Jun 21 01:33:00 2026 GMT
            Not After : Jun 23 01:33:00 2026 GMT
        Subject: CN=6a373f4c-f5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:06:a3:fa:62:cc:9e:41:33:68:ef:d9:6a:
                    09:e2:cc:db:c6:51:9d:79:ca:84:8e:14:d3:ad:8a:
                    88:6f:c9:cb:c6:3f:cc:e2:e0:e0:a7:8e:4a:3e:79:
                    82:1d:8c:40:0c:07:c2:d4:29:fe:83:4e:56:51:ae:
                    29:90:c8:46:19:06:c8:2d:d7:01:e5:f9:53:c6:06:
                    40:a2:77:90:7e:ea:9b:08:36:5c:4c:aa:e6:8e:9b:
                    cc:12:31:a2:a9:8a:74:d6:d4:a8:fd:28:2f:7a:33:
                    cf:5d:8f:e3:91:1e:9b:2d:3a:8a:dc:50:c2:b3:4d:
                    4a:c3:f9:16:c5:b9:4b:42:b0:d4:77:1d:14:de:14:
                    f4:17:f7:47:98:60:ff:f9:16:c3:88:06:e5:81:c1:
                    45:0c:5f:4c:59:1a:dc:59:1f:28:67:8e:fd:0d:52:
                    92:13:70:3b:39:11:1e:ff:68:db:43:c1:66:a1:91:
                    ed:6a:7a:13:80:f9:34:55:2c:1a:34:06:39:d0:e3:
                    ba:24:f4:13:41:48:cd:94:e9:a6:4e:93:bf:1d:e4:
                    9e:11:fe:0a:54:2f:17:cd:c7:33:08:d3:02:31:13:
                    88:83:d1:f0:cc:d8:2b:8e:bb:64:34:21:94:39:75:
                    35:ea:56:c1:61:35:e0:a9:7f:8d:81:f6:7b:fd:c2:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:FE:57:79:55:CC:9E:AC:D8:B9:B4:45:8B:E8:DA:09:E3:41:E7
            X509v3 Authority Key Identifier:
                keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:cc:de:c9:e0:61:63:52:14:80:fe:ff:6a:36:4e:ca:d9:
         72:7f:68:68:fe:2f:b6:d2:c4:64:29:00:16:d4:b1:f0:5d:46:
         09:0d:45:cf:1d:fa:cc:bf:2f:2b:b0:cb:7c:92:83:7a:aa:b0:
         15:5d:ff:85:9f:df:a9:0e:a3:eb:3c:a7:ff:59:98:ab:a8:5e:
         13:d2:db:76:5e:a1:95:a2:f1:06:f0:7c:b1:45:4b:06:7b:9c:
         0d:c7:02:9c:70:3a:dd:03:e7:8e:8f:be:a0:94:46:9b:71:76:
         6f:9d:9f:5a:44:07:68:5b:aa:4e:ca:f5:8e:67:db:5c:ac:86:
         7c:6b:64:f0:8e:c4:f3:da:9f:74:aa:23:70:25:43:ff:e5:cc:
         e9:71:ee:96:94:f9:ba:65:ea:3a:86:29:04:db:ae:df:fc:bb:
         08:16:72:92:98:a3:c6:01:a7:99:6a:4a:93:49:6d:f7:f6:68:
         7e:4b:4c:fa:dd:39:75:95:1e:e8:ee:7a:c7:57:07:55:77:a6:
         48:27:e6:00:17:e1:8d:27:83:f9:03:50:26:6b:85:86:b9:96:
         ce:2e:ab:ea:a8:73:a4:d5:3c:bf:54:66:05:29:d7:e2:6c:94:
         a7:41:61:68:c3:20:ff:ed:a7:4d:30:f4:a7:7c:d8:2b:a9:0c:
         1c:e8:f1:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTBGMTBBRjExMC8GA1UEBRMoMTQ4MzYxNkEyRkI2MzQyNTM1ODM2QzQzRkU5NzM4
RDRGMTdFOUYxMjAeFw0yNjA2MjEwMTMzMDBaFw0yNjA2MjMwMTMzMDBaMBgxFjAU
BgNVBAMTDTZhMzczZjRjLWY1ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+8Aaj+mLMnkEzaO/ZagnizNvGUZ15yoSOFNOtiohvycvGP8zi4OCnjko+
eYIdjEAMB8LUKf6DTlZRrimQyEYZBsgt1wHl+VPGBkCid5B+6psINlxMquaOm8wS
MaKpinTW1Kj9KC96M89dj+ORHpstOorcUMKzTUrD+RbFuUtCsNR3HRTeFPQX90eY
YP/5FsOIBuWBwUUMX0xZGtxZHyhnjv0NUpITcDs5ER7/aNtDwWahke1qehOA+TRV
LBo0BjnQ47ok9BNBSM2U6aZOk78d5J4R/gpULxfNxzMI0wIxE4iD0fDM2CuOu2Q0
IZQ5dTXqVsFhNeCpf42B9nv9wlPfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnNP+
V3lVzJ6s2Lm0RYvo2gnjQecwHwYDVR0jBBgwFoAUFINhai+2NCU1g2xD/pc41PF+
nxIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUwRjEwLzc3MDFBMEZDQzRCQzExRTk5NjM2OEIxMUY4QUVBMjI4L0ZJTmhh
aS0yTkNVMWcyeERfcGM0MVBGLW54SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZJTmhhaS0yTkNVMWcyeERfcGM0MVBGLW54SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTBGMTAvNzcwMUEwRkNDNEJDMTFFOTk2MzY4QjExRjhB
RUEyMjgvRklOaGFpLTJOQ1UxZzJ4RF9wYzQxUEYtbnhJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaZczeyeBhY1IUgP7/ajZOytlyf2ho
/i+20sRkKQAW1LHwXUYJDUXPHfrMvy8rsMt8koN6qrAVXf+Fn9+pDqPrPKf/WZir
qF4T0tt2XqGVovEG8HyxRUsGe5wNxwKccDrdA+eOj76glEabcXZvnZ9aRAdoW6pO
yvWOZ9tcrIZ8a2TwjsTz2p90qiNwJUP/5czpce6WlPm6Zeo6hikE267f/LsIFnKS
mKPGAaeZakqTSW339mh+S0z63Tl1lR7o7nrHVwdVd6ZIJ+YAF+GNJ4P5A1Ama4WG
uZbOLqvqqHOk1Ty/VGYFKdfibJSnQWFowyD/7adNMPSnfNgrqQwc6PE1
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:43:35 2026 by rpki-client