Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier:          e3KW1Ca68BOTVSOB7BPdqh2+mxGyVKLSr/4JhWar8N0=
Subject key identifier:   C2:EC:93:B6:30:7B:12:84:36:11:E4:2B:25:9C:A7:14:35:87:1A:E5
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer:       /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial:       0E5B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number:          0E57
Signing time:             Thu 26 Mar 2026 01:06:10 +0000
Manifest this update:     Thu 26 Mar 2026 01:06:09 +0000
Manifest next update:     Sat 28 Mar 2026 01:06:09 +0000
Files and hashes:         1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: j1gLphvA9WWmiw8UVfcUt4utDY4TFF3jMaygfzUDQWI=)
                          2: 6FAF8B00619B11EDB6AEE1D6F1222468.roa (hash: /1/Pa04qpcI/k7X0iybt5AEzlNkplFgiGrqG6zpxJw0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                          rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3675 (0xe5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Validity
            Not Before: Mar 26 01:06:09 2026 GMT
            Not After : Mar 28 01:06:09 2026 GMT
        Subject: CN=69c48682-d466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:d1:a9:c7:e5:95:de:56:a8:7d:74:e1:6c:
                    c6:8d:57:2f:3b:19:a7:0a:ee:e6:29:10:9d:87:b5:
                    9d:bf:c8:23:e0:d6:8e:54:ac:33:02:1d:e1:43:24:
                    4f:09:ea:d7:99:35:13:74:70:f6:44:87:ba:1d:67:
                    d5:fd:ab:21:38:17:47:2c:5f:61:ba:dd:8a:23:d4:
                    14:fc:d2:35:75:f0:8e:df:5e:70:62:c3:c9:a9:0e:
                    69:67:c8:b4:db:ac:24:40:7b:8c:85:a3:00:7c:b0:
                    ec:5d:ba:de:1e:13:ca:ca:77:8a:e8:88:c3:44:f8:
                    6d:02:90:4f:8a:3f:fc:36:df:f3:84:92:64:6b:73:
                    fe:1a:8a:72:64:64:cd:96:3c:be:47:35:7a:68:5a:
                    f7:1a:69:21:65:54:35:dd:0b:64:46:6d:97:dd:65:
                    17:af:df:f2:b0:44:5e:91:1e:af:92:a5:b4:bc:83:
                    25:b0:50:fe:f5:4e:c7:a9:c1:57:24:12:95:ab:17:
                    c3:12:37:87:fd:77:03:f8:90:da:b2:3b:5f:53:74:
                    ce:f5:cf:8d:ee:1b:c7:24:15:9d:fc:5d:3e:df:e7:
                    06:c9:45:e7:9d:61:8a:e3:da:c5:80:61:fd:e8:7f:
                    54:35:be:ff:f7:c3:32:c8:03:99:2b:e6:ea:80:fb:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:93:B6:30:7B:12:84:36:11:E4:2B:25:9C:A7:14:35:87:1A:E5
            X509v3 Authority Key Identifier:
                keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:0f:3f:43:c0:d0:a9:74:7e:bb:2b:9c:56:c0:80:9b:ad:
         7d:73:16:92:8e:08:97:6f:3f:01:b8:97:83:ed:0f:04:2c:77:
         37:4e:15:cf:72:26:51:57:3f:65:49:49:fc:b3:eb:43:21:b3:
         24:27:b0:58:a2:90:f9:cb:dd:85:f7:ba:61:fb:95:03:da:5f:
         9f:c4:28:a9:58:15:4e:05:84:70:8c:3a:5f:9b:bc:87:ec:56:
         3a:1c:9f:25:3a:8f:fa:97:d9:d4:3e:2c:3f:18:59:de:f0:6b:
         ff:00:30:80:25:03:16:e7:95:29:33:12:a8:c1:63:80:94:c5:
         b8:97:85:97:e9:55:52:77:2d:6d:b0:82:b8:1e:4a:66:98:e7:
         2d:fb:46:b6:64:0b:94:ef:53:66:9d:83:56:ed:e9:18:cd:07:
         81:6f:30:6e:c3:41:de:ef:34:20:a9:9c:df:c9:ab:b0:fc:8b:
         43:2b:53:25:b9:c1:c0:c9:8e:92:76:2a:67:7e:d0:33:69:a9:
         4d:69:fa:9a:ab:1c:99:6c:f7:4d:38:95:0b:94:8d:02:d5:62:
         50:cb:23:c0:40:66:c3:91:f0:7c:2a:ab:34:b7:ee:58:7d:d8:
         55:ea:b7:55:c3:7b:39:d7:c5:15:44:60:bf:05:4c:a1:5f:1c:
         32:96:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:53:31 2026 by rpki-client