Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
File:                     iNIzyaKwFij9KfyxIJhpkPWebZs.mft (raw, json)
Hash identifier:          5EKMszXUS9S0Tfjqce6X0imazjZwUmQcMHL/+IQxuFA=
Subject key identifier:   EE:DA:27:6C:A8:AC:D4:09:36:A0:19:B4:5B:36:5F:C6:CF:B7:1E:9F
Authority key identifier: 88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B
Certificate issuer:       /CN=F3636791AR/serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
Manifest number:          23
Signing time:             Tue 12 May 2026 05:31:41 +0000
Manifest this update:     Tue 12 May 2026 05:31:41 +0000
Manifest next update:     Thu 14 May 2026 05:31:41 +0000
Files and hashes:         1: iNIzyaKwFij9KfyxIJhpkPWebZs.crl (hash: 5Q0tm0XQ579kh9NSN0XEbY6AT6fTx7t/8RLbI7z+cpI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                          rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AR, serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
        Validity
            Not Before: May 12 05:31:41 2026 GMT
            Not After : May 14 05:31:41 2026 GMT
        Subject: CN=6a02bb3d-8ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:75:50:6d:d5:f3:f9:57:45:b9:e3:9d:c1:
                    ac:fe:0a:c1:91:86:af:11:86:dc:29:5f:58:d9:1e:
                    8d:a3:74:52:e4:ae:52:f2:f5:80:6d:f9:18:85:f9:
                    57:67:92:10:7c:74:ee:d8:cf:ad:8a:b1:75:3a:9d:
                    a9:d8:d9:d8:e2:f5:d0:11:af:27:4e:59:19:41:6c:
                    84:e2:53:f5:30:73:29:b4:1c:28:30:39:58:d5:96:
                    29:67:45:46:b6:3d:20:bc:00:ee:5c:23:85:ff:57:
                    83:f2:6c:bf:bc:dd:23:f6:65:9a:d2:2f:8e:dc:b5:
                    7c:c5:aa:9b:97:6b:28:64:5a:7e:41:71:13:f4:1a:
                    f2:35:a5:4f:9f:58:72:3a:f6:6c:16:ef:f1:78:4c:
                    b5:93:26:e5:fe:12:62:f2:8b:65:4a:47:18:87:aa:
                    93:69:f5:3b:0a:e5:ec:e5:1c:c7:17:2d:6a:fd:48:
                    23:45:e1:e6:4b:e7:17:20:a7:61:7a:32:a3:79:03:
                    76:80:bb:92:fd:f1:ad:69:09:8c:fb:43:57:3a:b4:
                    99:9d:c2:08:a5:cb:97:37:d5:3b:18:65:8a:61:ff:
                    f6:fa:95:08:b3:9b:d5:09:1b:d6:9a:14:18:66:3a:
                    15:df:69:9c:55:a9:a3:e1:7d:a1:8b:37:dc:9d:4f:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:27:6C:A8:AC:D4:09:36:A0:19:B4:5B:36:5F:C6:CF:B7:1E:9F
            X509v3 Authority Key Identifier:
                keyid:88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:71:dc:64:4a:40:19:ca:22:26:56:a8:7b:1a:28:6e:dc:4f:
         ab:f8:ad:58:50:dc:db:1a:e3:52:86:f8:fb:32:a1:9f:05:50:
         5e:0e:8a:4b:97:83:24:69:46:f6:7b:21:86:d9:7d:7e:2b:f8:
         0c:85:79:7c:f8:7e:e6:71:a4:40:2a:b9:e7:ad:e2:58:8b:e8:
         58:ad:09:46:6f:c3:92:30:78:fb:ee:b5:c2:80:09:ad:7d:bb:
         70:b5:20:d9:f5:23:be:96:7a:b6:88:25:22:6a:2c:e8:ca:d0:
         6f:8e:a0:26:30:ff:e5:87:64:c4:7e:89:e9:c9:08:f1:b1:12:
         b4:66:2c:ee:44:2b:7d:55:4a:8e:90:60:48:20:ce:94:ee:6d:
         61:77:dd:95:1a:b6:de:59:6a:60:e8:0b:18:d6:af:b0:e8:2b:
         a0:f7:4c:3a:3b:58:f1:f6:76:af:6d:43:db:ea:b2:a8:f9:58:
         cc:c9:be:82:f4:d3:34:51:44:5c:9f:75:7c:1d:81:4e:dd:14:
         9d:53:d2:ed:ea:67:c3:e6:18:c2:64:3a:4b:b6:16:f4:ad:28:
         2b:62:89:91:4a:2a:49:87:64:15:4b:5e:d1:6f:b0:3b:aa:c1:
         00:4e:c5:98:7b:70:b6:e7:d3:b2:bd:ab:63:54:1a:01:be:92:
         d2:ab:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:19 2026 by rpki-client