Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File:                     HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier:          ZXnz2S/iMYY8N684jh07uQycx2Xb5DegJGJMOpmU8AM=
Subject key identifier:   FF:A3:76:BB:3B:7A:66:C5:2D:DF:D8:5C:B8:A0:FB:D4:B5:99:D9:5F
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer:       /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial:       0488
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number:          0487
Signing time:             Sun 21 Jun 2026 03:26:35 +0000
Manifest this update:     Sun 21 Jun 2026 03:26:34 +0000
Manifest next update:     Tue 23 Jun 2026 03:26:34 +0000
Files and hashes:         1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: p9q28fVAvNSJZ2IHLd0s6z0teHTP3ALjXNfLzGHJVnw=)
                          2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
        Validity
            Not Before: Jun 21 03:26:34 2026 GMT
            Not After : Jun 23 03:26:34 2026 GMT
        Subject: CN=6a3759eb-ec4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:83:ec:0d:30:bf:13:d0:51:ea:32:26:4c:
                    fd:bd:15:4e:8f:c4:39:ff:45:c5:e5:47:dd:1b:fc:
                    44:48:64:db:13:8f:54:8a:3c:82:88:5a:e1:c4:b5:
                    a6:b8:69:4c:de:3b:86:7f:97:85:52:a1:64:7f:22:
                    ff:7c:cb:b2:fe:6e:99:87:dd:bf:9a:36:75:f6:8e:
                    73:6e:d1:b4:06:d9:2c:c2:10:c3:72:2e:fc:f1:1e:
                    76:09:c2:41:58:5f:e4:50:66:f3:d0:bf:47:ea:9e:
                    30:e0:8c:6e:ef:90:a6:0a:02:4a:0b:94:b6:9e:96:
                    dc:cb:1c:fc:4a:a0:5f:af:f3:bc:3b:a8:23:ad:96:
                    58:61:d8:48:47:52:3c:25:b4:00:22:07:8b:d7:9c:
                    c1:80:47:63:6e:0d:1a:3e:3c:64:8b:db:9c:47:db:
                    14:44:a2:eb:df:10:36:b6:73:0b:67:7b:7e:4c:25:
                    ed:18:81:eb:61:03:00:54:e0:e1:b5:ad:e3:45:00:
                    ae:ef:d9:4e:11:88:d7:b8:65:4a:25:61:d5:7a:bb:
                    3b:9b:66:11:b0:01:0d:e7:f6:2a:16:20:37:d6:ab:
                    fa:59:63:cb:ff:72:1c:3c:8a:e6:c4:cc:e7:c9:c4:
                    39:ed:1c:3b:fd:de:8a:d3:e9:e4:bc:83:12:66:92:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:76:BB:3B:7A:66:C5:2D:DF:D8:5C:B8:A0:FB:D4:B5:99:D9:5F
            X509v3 Authority Key Identifier:
                keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:76:de:e6:1e:3e:2a:d8:43:d1:51:32:a9:72:48:51:32:a8:
         aa:f8:ed:00:96:36:47:4a:54:4f:1e:f9:9c:3e:c7:72:b5:78:
         a1:82:39:26:51:cb:fc:5c:34:0b:0b:69:74:65:33:ba:5c:37:
         6f:5e:af:3e:83:82:33:a6:c1:5a:ac:84:e0:83:7e:6a:3d:22:
         06:64:f6:5e:b1:20:77:4d:43:f2:8a:ff:64:a7:41:42:df:71:
         cf:79:6c:47:e2:b9:c8:9f:e8:19:46:42:6d:00:2e:04:56:9b:
         6b:9e:b3:f0:a9:9f:04:17:44:2a:7c:40:76:93:2f:06:0a:dd:
         6f:c1:a1:d7:a1:eb:d8:71:5d:10:30:d1:2f:bd:be:8d:43:60:
         0e:71:b6:a6:98:ca:35:d9:e8:78:08:69:79:1c:79:58:2e:7d:
         70:60:0c:29:10:0e:c3:f9:3a:93:64:82:c2:69:66:fa:a3:ac:
         e5:2e:29:48:43:55:f7:c3:b5:16:9d:25:1e:b5:71:4a:bd:e1:
         68:e2:7e:a3:76:68:a1:5a:b0:c1:76:71:f9:3b:75:c5:13:ef:
         e3:bb:1a:cd:de:44:5c:ea:62:ed:21:3a:31:62:e2:07:e8:d2:
         dc:af:bc:ff:26:03:8d:fe:6c:13:1a:08:b4:06:f3:60:cf:95:
         9a:2d:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:39:38 2026 by rpki-client