Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          99L0bTIuGAocsiB3I3StzKoCrQmJvdrckLEeyFxbVug=
Subject key identifier:   75:2C:D5:03:88:A0:EC:0F:FE:9F:34:4A:97:9E:F4:49:E4:5D:A0:C7
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       058A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          0589
Signing time:             Sat 27 Jun 2026 03:00:01 +0000
Manifest this update:     Sat 27 Jun 2026 03:00:00 +0000
Manifest next update:     Mon 29 Jun 2026 03:00:00 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: f18smGS+BOfYt8euvP+CzEgiGVmkb73M2YLOcRL9KVg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Jun 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Jun 27 03:00:00 2026 GMT
            Not After : Jun 29 03:00:00 2026 GMT
        Subject: CN=6a3f3cb1-6368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:81:96:a2:86:18:99:c4:5d:b9:b8:e7:a8:
                    95:51:9f:38:e1:83:0e:b0:54:66:11:4f:41:10:1f:
                    6f:58:89:f3:1d:4e:1d:80:c0:7b:d3:5d:12:c2:a9:
                    ab:7c:5b:f5:81:2c:d5:e4:fe:fd:8b:8e:94:aa:fe:
                    88:31:4c:6d:b1:49:74:a8:78:d2:8e:79:5d:14:04:
                    f3:c7:02:f6:f0:0d:78:8c:67:ae:89:73:b8:06:ca:
                    80:44:46:4d:53:34:42:c9:bc:82:60:4e:a7:d6:8c:
                    d3:22:f1:5b:ef:2a:26:7f:dc:52:82:5d:7f:01:35:
                    7c:dc:30:1b:77:3c:9a:1d:41:17:e7:d4:24:2c:89:
                    e4:40:0a:13:b1:e9:7e:b3:af:23:c5:7c:ea:d9:02:
                    97:b8:b5:6e:9f:21:e7:ad:56:00:f4:b8:6c:bd:5f:
                    a1:7e:3c:6f:90:11:59:f4:3b:93:75:cd:ed:3a:57:
                    1b:c7:45:ba:31:a7:1d:58:7e:78:74:ca:54:0f:e5:
                    d8:c5:b7:f9:5e:64:8f:42:3b:15:83:ee:81:6c:14:
                    e7:fc:d3:a5:88:8a:aa:60:1a:7a:b2:80:48:84:08:
                    e0:c6:90:22:d3:e3:2f:df:77:f3:91:18:b7:84:0f:
                    76:8f:a0:f6:94:f7:fe:da:5c:61:48:be:9b:0a:80:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2C:D5:03:88:A0:EC:0F:FE:9F:34:4A:97:9E:F4:49:E4:5D:A0:C7
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f9:57:f1:8c:b7:e7:74:8a:66:3a:88:86:1e:71:a4:53:b3:
         7b:29:dc:8e:d9:0f:41:16:97:a6:1f:02:50:4d:d8:ba:0f:67:
         43:b9:5c:ae:3d:82:99:db:f9:d8:40:39:a5:5a:c8:e0:b8:5a:
         ba:e4:d5:12:cc:f4:c5:c7:f3:d9:e9:a0:90:2d:e3:40:a1:12:
         e3:3a:23:35:99:ad:f8:32:93:c2:1b:3c:24:2c:db:10:a4:77:
         a5:be:f1:a7:6a:13:8f:eb:a1:80:0e:cb:9a:ca:09:6c:26:ee:
         63:96:11:c1:30:42:85:b9:da:1f:0a:4b:de:4d:36:f1:da:e1:
         89:b0:19:aa:02:f6:fd:c3:f3:03:27:a6:55:ea:fc:a6:d6:a9:
         9f:72:7b:e2:5f:05:7d:f3:fb:4a:0f:bc:21:56:f9:fd:37:a1:
         f7:d7:81:a9:07:b2:ff:8c:b5:5c:63:dd:1b:0d:31:a5:ce:24:
         46:a9:84:44:18:71:ee:eb:ea:54:a0:97:a6:73:74:06:73:ef:
         1b:ca:d5:74:70:6c:1b:3f:b3:59:5a:d8:d5:64:f8:46:90:b9:
         53:26:cb:05:63:b0:70:60:c1:e0:f1:87:32:3b:a5:d6:85:15:
         9e:9b:d7:00:08:4c:ed:ca:cb:90:17:a6:af:dd:6f:84:1d:23:
         cc:65:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:37:34 2026 by rpki-client