Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          z9ELugZXrHPL2jjv21ZwGE1U+UrIlMVW9XXPeDukYg8=
Subject key identifier:   5C:E8:CE:2F:5D:66:B4:00:C4:67:FF:F3:67:82:B1:19:0B:2F:02:FD
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       0A09
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          0A01
Signing time:             Thu 26 Mar 2026 01:31:53 +0000
Manifest this update:     Thu 26 Mar 2026 01:31:52 +0000
Manifest next update:     Sat 28 Mar 2026 01:31:52 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: ovsLHxA8qq+5vebrNJ/Zexq+mH6dY7JrkspX4gdDL9E=)
                          2: B2B71F48BBB711F0A55267C8DAE4EC9C.roa (hash: kChp13s64I7ds7m3cFb8J8f9uZBGgnrFBEhdaD7OJR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569 (0xa09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: Mar 26 01:31:52 2026 GMT
            Not After : Mar 28 01:31:52 2026 GMT
        Subject: CN=69c48c89-05a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:ce:b1:84:8a:bc:38:c3:72:b5:8f:bb:1e:
                    2d:90:9b:87:e4:65:c9:0a:87:0b:4d:3e:c9:c6:d5:
                    1b:2d:54:f2:dc:09:c3:91:a4:f0:92:84:39:3e:8b:
                    d7:e2:45:cf:83:69:17:90:e9:ca:6f:7a:00:bb:2e:
                    a9:74:af:2d:3b:d6:88:14:70:fc:ab:e9:83:85:c0:
                    11:43:52:a4:43:86:5c:7e:26:a7:58:f8:9e:8d:67:
                    c4:d9:8f:f7:c1:9b:4d:0a:de:4f:90:f9:06:a9:e6:
                    d4:57:4d:d9:85:06:52:02:55:50:c2:76:ea:54:a9:
                    34:61:3b:1b:d8:92:79:eb:aa:d1:66:b8:78:f6:3f:
                    ab:1d:95:5a:9a:07:d5:ab:10:7e:8e:d4:3b:3a:65:
                    cb:92:9e:ae:a4:9b:db:b5:fb:ed:f0:02:b2:c4:fe:
                    6a:58:a9:65:9f:6c:d9:7f:ba:b7:c7:73:01:20:04:
                    cf:61:f5:b4:28:4b:ca:05:52:e9:42:43:91:86:8d:
                    29:7b:13:c4:5d:9a:54:04:69:0e:16:5c:25:74:fa:
                    ee:8a:46:87:56:98:c7:0b:ec:21:d2:65:41:5f:a0:
                    3b:74:ce:ba:7d:f6:0f:ba:ce:28:d7:72:2f:6d:a3:
                    3b:e5:87:c1:c6:78:0c:f9:df:a1:3e:53:fa:44:b4:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E8:CE:2F:5D:66:B4:00:C4:67:FF:F3:67:82:B1:19:0B:2F:02:FD
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:95:bb:dd:16:fc:50:97:00:cb:ee:65:37:36:d0:21:9c:
         ce:3a:d0:53:07:f2:5e:43:84:23:a1:ff:ae:fd:6f:36:c0:8a:
         9e:62:d0:08:e7:49:53:45:55:1b:b7:29:ea:ea:93:42:3f:5d:
         41:8c:f4:7d:61:4b:6e:f1:54:45:54:4c:76:04:c5:42:fd:8a:
         b9:ae:f9:c0:66:08:c0:f6:41:52:d2:84:db:8a:78:28:ed:11:
         4d:11:cc:9a:25:c8:1d:71:f6:c9:c2:5e:db:2f:90:9e:11:81:
         71:ff:15:31:89:f4:55:ab:02:1a:87:6e:c4:fb:84:ca:4c:3d:
         c0:f5:2f:4a:70:6b:db:04:56:66:71:64:c4:93:60:02:38:a6:
         9e:8e:34:ee:a5:cc:43:25:9d:1d:81:1c:13:39:20:91:77:af:
         10:6f:1d:8f:5e:9f:11:54:34:cb:4d:e2:7b:44:4e:2e:2b:d3:
         97:93:40:9f:b6:62:ce:2a:bc:d6:04:6d:0b:6d:fc:96:9a:a8:
         e8:35:2b:22:fe:2a:28:29:b4:2d:9a:a2:93:8e:b8:9f:bf:39:
         ae:4c:a0:e8:6f:ac:f2:e3:fe:04:bb:07:c3:72:bb:bb:ea:9e:
         f8:4e:3b:03:1e:b8:8a:46:2a:20:63:9b:b6:40:34:51:a2:71:
         f2:71:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:33 2026 by rpki-client