Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
File:                     9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft (raw, json)
Hash identifier:          dKpeMjImP2mIX9Qd3jXrkgqXHG1ULqhHGvspSezFEuM=
Subject key identifier:   1E:A7:55:72:D6:8D:4F:CD:87:AA:21:87:D8:98:ED:BF:7E:9C:98:10
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Certificate issuer:       /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial:       0D85
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
Manifest number:          0D96
Signing time:             Wed 25 Mar 2026 01:10:51 +0000
Manifest this update:     Wed 25 Mar 2026 01:10:50 +0000
Manifest next update:     Fri 27 Mar 2026 01:10:50 +0000
Files and hashes:         1: 9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl (hash: 4IfbxCaLzK9utyO0zdTkqY9eN7fquvyGn2TwK3aziI8=)
                          2: 9602703EF4F511EFB099CDB5762E951A.roa (hash: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=)
                          3: 0809CD56F2A511EF9A1CF353762E951A.roa (hash: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                          rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3461 (0xd85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AR, serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
        Validity
            Not Before: Mar 25 01:10:50 2026 GMT
            Not After : Mar 27 01:10:50 2026 GMT
        Subject: CN=69c3361b-d13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:13:cf:ab:24:dc:6e:53:e4:81:e1:45:e5:
                    47:f0:67:ba:c8:de:31:1e:2d:44:51:1b:0a:8f:41:
                    a1:d2:1b:ac:43:e9:62:8f:3c:e2:f1:42:f2:b7:9b:
                    22:3b:04:a9:15:a8:2f:03:bb:b5:7d:52:a4:94:7a:
                    ab:f9:07:88:b9:18:a6:09:53:ca:ba:93:42:53:21:
                    a8:c7:ac:43:3d:33:7d:f6:10:d3:74:9e:95:99:0d:
                    c9:72:a1:24:ac:e6:3e:e1:fb:8c:9c:48:34:84:24:
                    d2:a4:a6:97:bf:82:7e:99:d0:50:80:2b:f4:68:6a:
                    35:d3:ee:10:97:a2:fe:1b:31:32:0d:36:d7:4a:83:
                    75:a1:56:cb:96:aa:0a:43:bb:27:16:d7:32:93:43:
                    d9:49:48:bf:70:19:25:71:06:05:12:ea:32:ed:25:
                    1b:79:e3:00:71:58:61:fd:07:25:b4:87:14:2c:a4:
                    aa:34:72:6f:6f:2a:1b:cd:17:e2:e8:cd:3b:a4:bf:
                    3d:68:0e:df:61:5d:5d:a0:b7:00:4c:c2:f6:c6:80:
                    0b:81:77:63:5f:f6:8d:da:41:94:b4:dc:a2:4e:9d:
                    57:06:be:5c:1d:20:44:e0:5f:5e:8e:68:76:b4:14:
                    ec:aa:d4:74:3b:18:65:8c:e5:65:22:83:e1:89:d2:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:55:72:D6:8D:4F:CD:87:AA:21:87:D8:98:ED:BF:7E:9C:98:10
            X509v3 Authority Key Identifier:
                keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:67:a4:15:58:4b:80:21:9a:fc:3f:08:22:07:54:d9:e8:f2:
         e7:38:00:de:ff:b4:59:f3:6d:b9:68:3a:56:c6:a4:a8:c3:ff:
         20:00:3d:ee:10:ad:ba:cc:1b:3d:4d:bd:57:39:1e:d6:1e:d6:
         87:ef:46:aa:27:b2:96:57:31:bb:62:d3:fc:70:01:c1:14:75:
         7c:74:75:c4:98:db:18:83:ee:e6:80:9b:d0:66:d6:4f:42:cf:
         3d:9c:89:36:e5:2e:a0:98:0e:46:18:d1:d4:86:9b:36:9b:8e:
         38:d2:a6:b8:30:13:8e:0c:5f:48:fe:5c:33:c2:53:6f:66:05:
         35:45:d6:66:84:27:ec:77:e0:4c:12:f0:f5:1d:33:25:29:e2:
         ed:71:8d:97:ec:a9:d2:21:1e:71:87:73:4d:d3:2a:f8:0b:7b:
         4a:91:3c:fe:5d:df:23:13:0a:00:91:8e:9b:2c:e0:a3:73:ad:
         d1:83:97:cc:87:45:83:49:87:ac:52:3a:57:3d:eb:b6:a7:f8:
         ed:9b:c4:72:cf:2a:8f:eb:ed:61:b4:52:0f:d7:a5:27:68:40:
         fd:cb:9a:34:60:d3:d6:cd:73:d2:bb:aa:fd:ab:60:ce:9b:ae:
         50:77:75:c9:85:7a:0d:6c:15:a0:2e:b3:39:63:9e:cb:58:28:
         a5:01:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:02 2026 by rpki-client