Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File:                     rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier:          t9292/h9b4w/IHINWec8yO6h6U8g8/PQhP1bI9PaGcQ=
Subject key identifier:   3C:DF:86:89:34:72:33:BA:0C:90:E6:D7:EA:49:C9:A5:C6:6D:D2:EC
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer:       /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial:       0431
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number:          0425
Signing time:             Thu 26 Mar 2026 04:05:19 +0000
Manifest this update:     Thu 26 Mar 2026 04:05:18 +0000
Manifest next update:     Sat 28 Mar 2026 04:05:18 +0000
Files and hashes:         1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: mOl2kEQXzV9nJoyQiIp11OZt1pWN9h2lKauqTKIMUR4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                          rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
        Validity
            Not Before: Mar 26 04:05:18 2026 GMT
            Not After : Mar 28 04:05:18 2026 GMT
        Subject: CN=69c4b07f-bfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:16:48:10:28:da:91:e3:a2:2f:4f:53:2a:
                    97:1d:02:8d:9f:b7:c5:b9:7b:bc:97:b9:3b:8d:3b:
                    7f:8b:94:22:cf:6a:08:41:04:b5:d2:e3:5f:19:f2:
                    83:4f:b7:f1:e5:59:a6:1d:93:1f:44:b0:71:d2:55:
                    5c:9a:a3:4f:65:c5:c9:49:8e:1f:98:96:41:a3:74:
                    b2:17:1d:a6:97:75:41:83:13:7c:79:f7:45:dc:b6:
                    86:63:e4:28:8d:20:aa:b2:b5:57:b3:25:58:71:3b:
                    9f:65:b9:08:b3:41:e1:92:41:15:f9:ba:f0:86:dd:
                    48:bc:1e:39:51:c1:f5:97:c0:99:82:c9:1f:7d:72:
                    5d:c5:56:92:c3:b3:f4:f4:0d:61:8f:57:6e:ab:e2:
                    c2:ec:fd:69:55:c1:36:b3:fc:f8:97:80:3b:32:3c:
                    d5:b7:37:60:8e:7f:33:9a:f8:84:10:9c:da:35:e2:
                    aa:35:52:10:1b:57:ee:87:70:4b:a5:2f:7f:2b:dc:
                    9b:74:f0:84:dd:d7:28:80:92:fd:a6:cb:b5:dd:0e:
                    6c:4a:1b:3d:6d:d2:77:48:80:86:2f:a4:3c:a0:a5:
                    a4:89:5a:50:c3:11:6d:fc:fd:9e:9d:b7:23:30:40:
                    1d:3e:89:b5:0b:a4:67:9a:61:86:e3:53:ef:92:90:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DF:86:89:34:72:33:BA:0C:90:E6:D7:EA:49:C9:A5:C6:6D:D2:EC
            X509v3 Authority Key Identifier:
                keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:33:d3:46:d7:3f:aa:22:29:07:50:a4:2a:4f:42:2e:47:
         6e:2e:26:c2:4b:af:08:ff:73:f9:07:c0:ea:f8:ef:93:17:a5:
         43:ff:fc:b9:ab:32:fe:7e:52:b7:f8:8e:9c:ae:cb:33:8d:a9:
         4d:39:c6:46:a8:20:d1:4a:68:ca:b0:6e:3f:da:5b:62:e7:4f:
         c7:a4:c4:e0:d9:1b:6d:8f:19:12:4e:24:8e:ad:f4:73:bd:e8:
         eb:c5:56:d7:5d:6f:48:91:5f:46:57:d8:3d:26:4e:b7:3b:90:
         d0:40:6e:b1:54:b0:93:5d:73:ec:cc:36:13:b7:e0:b2:18:f8:
         1a:9d:52:57:c8:2b:f5:af:8f:c7:29:01:11:4a:f6:1a:ab:ab:
         57:71:44:cd:a1:dd:e1:ee:9b:ea:0a:b7:9a:a9:d4:23:33:c2:
         fd:65:d3:2b:bc:02:5f:f7:d3:64:e9:ee:69:bc:3c:d7:79:4f:
         7c:88:ce:fc:2e:83:bf:5b:10:63:b8:bd:4e:b0:51:fd:4b:32:
         50:56:04:6c:de:46:ab:09:f7:b9:4b:1d:fe:5e:cc:45:f2:73:
         e4:4e:c0:e0:5a:5b:62:8e:4e:94:90:db:ab:12:ba:88:ea:fd:
         d9:d2:ea:e9:ba:f7:6d:95:63:32:15:e0:ee:2d:d4:35:cf:94:
         18:14:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:32 2026 by rpki-client