Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          BzFUPm0czPTcukco8ky2L0Yy0OzwC6mvy1eU3jRWVbc=
Subject key identifier:   DA:5B:A6:F1:A0:9A:3C:46:9A:7E:06:9D:C6:6E:B0:96:7E:16:7E:D9
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       05C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          05C2
Signing time:             Sun 23 Aug 2026 03:01:07 +0000
Manifest this update:     Sun 23 Aug 2026 03:01:06 +0000
Manifest next update:     Tue 25 Aug 2026 03:01:06 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: t25W7MeAXLBBvf2wK8E9MYils7g5MwMhBCjRUoQXt9g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Aug 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Aug 23 03:01:06 2026 GMT
            Not After : Aug 25 03:01:06 2026 GMT
        Subject: CN=6a8a6273-e67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:47:86:8a:c9:c4:f6:02:ad:e7:e4:4a:db:8b:
                    02:c2:ec:cb:5e:65:fa:62:a9:6d:3a:2b:bf:e0:98:
                    c3:4d:2b:0e:15:0b:9b:fb:12:1e:4b:1b:2f:8b:b9:
                    57:f3:7d:75:06:4b:d1:41:26:09:1e:aa:3f:8b:80:
                    7c:88:c3:96:d9:e5:42:19:e6:0d:5a:5b:1e:a6:b6:
                    77:72:bb:62:7f:5a:bb:55:3b:c1:d8:5c:73:3e:2f:
                    43:23:dd:bb:9d:48:9d:e0:c5:dc:b7:38:25:6d:b3:
                    9e:b9:a4:83:27:2d:24:04:ad:2f:ad:b8:b2:4c:2d:
                    06:1c:1f:28:b6:97:8d:0f:06:17:ca:bf:74:7b:e0:
                    b7:07:ba:d9:29:9b:89:80:17:c9:15:1b:c0:72:38:
                    a7:32:fc:03:88:a7:a5:cd:05:38:a8:9e:c7:88:b5:
                    d7:f3:21:cb:15:b0:3b:de:17:54:ca:7d:67:a5:da:
                    f7:7b:3f:d1:d7:98:13:6d:fb:d3:5c:6a:e4:55:e8:
                    e2:6d:3a:69:01:20:c4:2f:85:29:8d:7d:b4:f6:1a:
                    ed:f8:dd:4b:bd:00:e7:bd:b1:f0:cd:49:88:2e:9f:
                    92:ff:05:ab:57:ee:86:a2:e0:cc:84:73:35:11:3b:
                    a2:00:9e:7d:8c:0f:24:d8:88:9f:1f:6b:09:36:8b:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5B:A6:F1:A0:9A:3C:46:9A:7E:06:9D:C6:6E:B0:96:7E:16:7E:D9
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:00:c7:ff:c2:5d:6a:26:17:ee:00:14:d9:42:5a:91:37:fe:
         4c:38:a9:34:22:29:ac:b5:08:1c:40:82:53:20:3c:40:61:69:
         b0:14:81:d9:5e:84:44:56:45:94:65:31:58:33:d6:e9:60:41:
         23:92:e1:9d:5f:f3:45:77:12:55:b3:56:59:01:32:39:1d:5f:
         44:03:bd:fb:20:7b:7e:75:92:38:8a:ea:0b:a7:15:ed:f1:85:
         e7:ff:17:6f:bf:0c:cb:e8:4d:a9:d5:53:40:e3:ee:14:d9:48:
         5b:55:c7:89:c3:a2:6b:1b:26:6e:b7:c0:1d:ac:60:01:d7:c4:
         18:ed:2f:ce:c6:47:04:f4:90:5e:47:87:4f:ff:2e:72:e8:5e:
         d3:90:f8:51:f9:45:87:23:34:26:95:5a:55:6e:c1:08:fe:ca:
         ca:04:66:43:ae:65:a0:36:92:ac:cc:7a:5d:94:0b:02:c8:a2:
         5f:ba:bb:b2:20:5d:56:de:0a:ac:e8:24:25:38:ae:4f:14:17:
         0f:71:a4:50:e2:d4:41:96:ed:16:58:81:13:1d:31:75:63:7d:
         74:ef:4c:90:21:c3:4e:da:16:56:52:29:20:69:4a:d5:b9:78:
         63:6c:89:1b:9b:76:94:73:28:20:9c:be:92:6d:d6:88:fc:a7:
         43:9d:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----