Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          MDXXMX5tTF+WmugEw7WRTKJwldZjfWfrdqkCJvXfm2s=
Subject key identifier:   D5:FA:D7:A9:0E:62:9E:D4:A0:D6:29:14:89:02:C6:04:CD:24:F4:FF
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       02D3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          02D2
Signing time:             Fri 24 Jul 2026 04:25:45 +0000
Manifest this update:     Fri 24 Jul 2026 04:25:44 +0000
Manifest next update:     Sun 26 Jul 2026 04:25:44 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: FM3m9sRk+5Hy2yk5K05SWj4kdoQ9pCwahZkmnBssY8Q=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Jul 24 04:25:44 2026 GMT
            Not After : Jul 26 04:25:44 2026 GMT
        Subject: CN=6a62e949-f0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:24:1f:93:66:1a:93:91:f8:38:d1:d4:e4:
                    37:5a:03:d7:6e:7f:9c:af:40:8b:a9:ef:45:9c:fd:
                    aa:aa:eb:6e:8d:47:83:ec:1e:cb:ef:b4:8d:9a:63:
                    2c:3d:26:5b:c8:9e:a1:55:c9:e5:a2:66:aa:e3:c2:
                    66:65:8f:cd:38:d5:61:32:cb:1d:ec:1f:38:67:f7:
                    e1:e8:bd:dd:82:f6:f9:0e:d5:d4:83:b2:fb:c2:39:
                    2e:8b:31:b8:dc:50:0c:16:e4:cb:52:07:a5:b3:5c:
                    98:0b:35:80:18:54:9e:36:0f:2e:89:19:25:ba:90:
                    36:82:59:7c:63:f0:df:e7:89:5a:e5:e9:7a:40:82:
                    2a:0f:02:e0:56:86:61:44:de:d1:75:7c:01:a4:af:
                    a5:d4:09:62:f8:4d:17:a2:c3:55:79:b1:95:77:4f:
                    f0:79:e3:32:cc:09:85:5c:b4:36:34:fa:f4:7f:3e:
                    ca:83:f6:97:9b:08:8a:ff:0a:0a:04:7f:bc:8e:0d:
                    c8:fc:e8:0f:aa:7a:10:eb:c3:b6:47:e0:17:bf:c5:
                    c4:10:4e:2e:7c:34:aa:24:c5:7b:16:c8:5f:51:6d:
                    86:cf:45:ef:db:dc:7d:06:1c:55:cb:cc:a9:cd:09:
                    20:ff:6a:40:83:d2:76:24:5d:79:da:bd:3d:75:7c:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FA:D7:A9:0E:62:9E:D4:A0:D6:29:14:89:02:C6:04:CD:24:F4:FF
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:19:3b:0b:32:9a:4c:ec:33:b2:2d:4e:77:24:b0:a5:82:
         c3:41:28:4d:20:c6:68:03:4c:9f:ed:70:56:8e:88:10:14:91:
         81:03:b8:66:5f:27:63:c0:87:03:55:9c:16:ee:c2:35:3e:e3:
         19:ee:28:03:c3:8a:05:20:27:56:00:f1:b6:8b:a9:cd:60:5b:
         59:46:3d:96:43:3a:57:9a:a7:89:72:8d:98:54:4d:e0:23:ac:
         f0:0d:31:a3:b3:c9:d8:36:c8:33:28:a4:94:8a:c7:bb:dd:e3:
         ae:bb:9a:fd:3e:91:6d:2b:dc:ef:25:69:ff:78:1a:76:8f:d1:
         a0:93:f4:2c:6b:c9:13:aa:30:2e:69:ff:13:41:ad:23:9a:8f:
         c2:66:0d:8b:18:00:a6:1b:ad:aa:6d:73:d3:13:7d:c4:96:fe:
         d7:b4:e2:d0:80:a1:ec:a6:3a:b1:07:3d:2a:ba:58:75:e0:ae:
         9c:fc:e4:34:f4:82:43:cf:7c:40:cf:7b:2c:47:68:14:b5:75:
         30:ee:26:4a:20:58:ea:1e:55:35:8e:71:05:64:2a:be:05:ff:
         f8:db:c2:ec:76:ef:ae:0c:f9:94:be:67:a3:00:35:58:01:82:
         cb:e0:30:8f:15:7b:22:1e:f9:4b:7f:ae:f8:7d:3b:61:f2:da:
         51:c6:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:29 2026 by rpki-client