Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.mft (raw, json)
Hash identifier:          ObgHu46yU95q054V2Re97wauuC02UF4HYv14fjDSFhM=
Subject key identifier:   B9:B3:A8:BB:54:5C:D9:A5:C7:87:01:52:86:C3:D7:D2:97:55:07:3A
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Certificate issuer:       /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial:       041D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
Manifest number:          041C
Signing time:             Thu 26 Mar 2026 04:04:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:04:18 +0000
Manifest next update:     Sat 28 Mar 2026 04:04:18 +0000
Files and hashes:         1: GS9iV_wr5XP3WbXyvfg9aar_ouc.crl (hash: g5LfwwSRhCsuxYCihhqjB5wS3EzwX9EIpbMJPu9BR1E=)
                          2: A147BE680D4211EF9356066C017001B1.roa (hash: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                          rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AR, serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
        Validity
            Not Before: Mar 26 04:04:18 2026 GMT
            Not After : Mar 28 04:04:18 2026 GMT
        Subject: CN=69c4b043-218f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:80:55:8c:8c:fb:dc:18:b9:02:ea:f1:44:d4:
                    27:33:3f:3e:ef:eb:b0:7c:c8:14:48:6d:1f:ad:83:
                    7d:95:5f:ae:41:9b:f9:95:4f:25:66:60:05:39:32:
                    db:0f:c2:a5:6d:40:75:9b:38:71:33:9d:c2:ca:fe:
                    24:3d:00:3d:ea:ea:8d:6c:18:3c:b9:21:14:9c:b7:
                    7c:9c:d2:ab:d9:f6:f1:e8:a9:62:2d:c5:28:a9:ff:
                    93:1f:04:fb:fe:45:8e:b2:ae:07:6f:43:57:f9:5d:
                    c3:51:6d:98:70:de:c2:02:88:5f:2a:7f:0b:a3:60:
                    12:51:26:82:d6:d0:a5:e5:b9:aa:19:42:9e:6a:c3:
                    d0:44:55:1c:f4:c0:a1:6d:4d:72:58:41:de:a0:1e:
                    c7:05:c0:bf:61:38:af:09:6a:18:20:cf:c0:ff:e7:
                    b1:f8:6d:9f:79:8f:1e:36:3b:b1:21:1e:c2:dc:71:
                    4d:f7:7f:8f:ca:5c:77:f5:4e:e5:0a:42:14:72:4a:
                    1d:63:18:b6:41:57:71:33:d8:c8:f9:09:5e:1c:6e:
                    53:18:c2:96:e8:2c:2e:1e:1a:86:ac:f4:81:68:e2:
                    ca:67:38:f8:c5:2d:2e:3a:35:95:ba:24:14:b9:0f:
                    47:4c:bc:10:ae:f1:36:94:a9:60:52:e4:57:d6:de:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:A8:BB:54:5C:D9:A5:C7:87:01:52:86:C3:D7:D2:97:55:07:3A
            X509v3 Authority Key Identifier:
                keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:88:99:e6:f2:49:fd:11:d8:2a:0d:b6:09:92:ed:cf:66:
         5c:db:02:1a:d6:f2:14:44:3f:bf:75:b3:12:e6:00:45:ad:6f:
         31:c6:23:13:63:7d:43:16:71:83:3a:e8:ff:70:81:1e:a5:a5:
         94:c4:f0:00:98:ab:ec:b4:0a:61:96:04:a5:21:3e:65:94:1f:
         7d:c3:9e:b1:c6:e9:7c:71:be:2f:eb:9c:59:16:48:5e:f0:61:
         f7:73:a5:5d:61:0e:1a:6d:50:b6:d7:29:59:12:00:0e:2d:cc:
         91:e5:ad:83:52:19:ab:22:39:48:13:17:fb:71:8a:3c:55:99:
         7f:9a:dc:45:c2:37:c0:73:7d:89:47:ce:1b:7d:f7:54:aa:4e:
         23:af:87:16:0c:36:11:f0:a6:8b:5b:dd:5e:2c:49:c1:01:01:
         4f:ab:9c:7d:ba:8a:f9:6a:af:27:1c:48:1c:9c:51:06:88:8c:
         86:bd:c1:1e:31:7e:39:fb:bb:c3:d2:11:40:18:60:ff:cf:8a:
         fa:a7:75:aa:2f:4c:5d:56:5b:b0:00:ce:6e:fa:d8:62:de:4f:
         d9:80:7b:a8:e2:80:e3:33:9b:c0:03:46:df:9f:c4:a3:58:4a:
         37:35:ad:db:8a:f6:d1:40:61:cb:df:f6:90:d9:5f:8f:98:9a:
         dd:27:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:13 2026 by rpki-client