Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          GuOarn3cH9E+qAnRc1sQQZ/ierQ/6GtqDbX/I9nG5no=
Subject key identifier:   B8:76:1B:4D:7F:65:B2:09:40:60:3B:D2:79:D2:38:3B:A6:18:B1:12
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       033C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          033B
Signing time:             Wed 25 Mar 2026 04:40:22 +0000
Manifest this update:     Wed 25 Mar 2026 04:40:21 +0000
Manifest next update:     Fri 27 Mar 2026 04:40:21 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: kP568tNriy7AhnF+Ra8AEXHt534cfsEE4DSdRLs0II4=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Mar 25 04:40:21 2026 GMT
            Not After : Mar 27 04:40:21 2026 GMT
        Subject: CN=69c36736-cccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:9d:76:c0:2d:a3:e2:51:53:89:8a:02:58:
                    c7:21:1c:40:30:35:9c:ca:8a:9b:8f:78:ca:d4:09:
                    80:44:72:6c:66:68:df:f6:e9:b3:a3:36:1c:95:d3:
                    0b:7b:19:a3:63:3c:7b:5a:b2:da:47:4b:97:ff:22:
                    b3:51:d1:07:64:47:dc:b2:e9:90:5b:89:dc:a8:f2:
                    7b:23:78:94:43:70:cb:53:a0:e6:c8:50:da:99:2f:
                    80:75:0b:76:43:61:08:62:8a:cf:ef:c3:54:48:2c:
                    94:68:f3:12:e2:98:7c:94:ec:4a:01:95:d2:d0:54:
                    59:6d:9e:52:27:ea:07:f0:b1:32:51:78:40:ff:fd:
                    46:e5:1b:92:4a:a6:01:95:66:bb:42:62:42:9e:d5:
                    2c:76:03:9a:9e:df:f4:6f:78:c0:b4:79:db:dc:38:
                    96:da:49:68:69:fb:e8:c3:80:14:2b:21:5d:7a:04:
                    87:a3:e6:97:28:a3:4e:93:3d:ba:3a:91:24:80:3d:
                    7f:d6:cb:1e:45:36:42:72:f1:1c:da:fe:a9:62:12:
                    89:11:d2:22:a8:9c:c7:b2:6d:7d:36:7f:d3:49:c2:
                    34:00:60:6f:f0:3e:5b:c5:57:05:15:0a:f4:6a:9b:
                    53:9f:9d:9a:69:52:ff:e6:35:3a:f3:d4:ff:ff:1f:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:1B:4D:7F:65:B2:09:40:60:3B:D2:79:D2:38:3B:A6:18:B1:12
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:a3:c8:f1:1f:06:d0:42:ac:2b:41:72:6e:d1:53:ac:5e:
         88:8b:10:94:e5:2b:28:b9:a5:33:08:cf:a1:6f:37:14:2e:9e:
         9f:cd:fe:4e:fc:bf:40:9e:a5:9d:bf:86:a7:3d:a4:60:01:ff:
         52:07:4f:60:a9:a4:08:d3:10:87:69:8a:4c:77:4d:29:62:f9:
         82:1d:02:48:23:a2:6d:19:3d:c6:27:66:81:25:c3:f2:1b:09:
         4e:bd:89:fe:7b:d3:73:f6:6e:68:cb:cc:2f:ad:9d:cb:0f:4c:
         27:5f:2c:f1:de:1a:d8:84:33:d8:de:7b:3b:57:71:8b:0f:d2:
         04:e1:26:60:a7:ea:d3:1f:1a:fb:08:0d:8c:d9:1a:72:04:22:
         55:2a:32:d1:3a:97:32:d1:7c:7a:fb:eb:be:fd:43:7b:e6:b4:
         db:d5:5c:33:ac:73:22:30:ca:84:84:53:ea:40:7d:f9:a3:fd:
         9a:6c:ee:3a:db:a8:7a:35:79:91:bc:91:85:5d:96:23:61:bd:
         09:c6:6a:98:8e:c8:c0:7c:99:36:ff:08:37:22:c0:ba:84:df:
         0e:12:07:8e:12:91:67:a2:f5:f8:f3:7e:ae:2c:3d:e6:30:e9:
         44:39:a2:e3:2c:8b:e2:22:43:5f:92:d8:47:70:e1:61:e3:a2:
         79:31:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:11:03 2026 by rpki-client