Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          E3MPGCrvb62uSyy76tPKyBH6QPGe2//j/ZkD6u6DTX4=
Subject key identifier:   8B:BB:CF:E6:B8:39:BE:E1:51:B9:31:42:F5:CD:EC:C6:7C:85:42:46
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       02BD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          02BD
Signing time:             Wed 13 May 2026 04:16:34 +0000
Manifest this update:     Wed 13 May 2026 04:16:34 +0000
Manifest next update:     Fri 15 May 2026 04:16:34 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: krCI1NOM4ucBN4IjcqJv1qLTknxm/ao1wB/mI1HAbPU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: May 13 04:16:34 2026 GMT
            Not After : May 15 04:16:34 2026 GMT
        Subject: CN=6a03fb22-d1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:13:15:a4:45:d2:bd:a8:d7:1d:25:84:89:
                    1d:89:23:67:9f:26:ab:8f:7a:10:f3:40:5c:62:3a:
                    21:70:c1:90:21:3d:91:7f:59:f6:7a:aa:1c:2b:6b:
                    6f:36:6e:23:23:2f:d3:5b:bf:67:d0:e9:44:33:3e:
                    75:76:07:8a:72:6f:50:8c:c4:6e:fd:99:94:89:06:
                    35:be:a4:cd:b5:2b:ce:f7:66:3e:f0:24:53:b2:c7:
                    23:e5:27:1f:ee:96:a8:7b:a9:62:44:a8:60:97:50:
                    bf:78:a3:66:0b:5f:7e:e4:5c:55:bb:6f:64:bd:bf:
                    2b:91:e4:5c:d3:e7:b9:17:fb:76:7e:48:1c:91:bf:
                    07:bf:eb:89:c7:71:d2:8e:b9:04:c6:64:65:08:70:
                    de:4f:0a:8a:1f:5a:db:58:1c:6f:fd:4f:43:0f:2c:
                    aa:f3:ff:00:6e:34:fc:9f:fe:3c:8e:6e:42:81:09:
                    05:0f:4a:3a:16:ad:03:de:ee:bb:d9:7d:cf:cd:e5:
                    ad:d5:d6:e4:67:76:91:7a:71:8b:a5:97:a7:bb:d6:
                    6c:92:7b:28:2c:d1:1f:f7:c1:b3:aa:78:a0:32:cb:
                    8e:8e:0b:17:50:8e:34:f0:20:72:b0:e4:31:d5:32:
                    a0:50:49:19:c8:a4:4c:39:69:9c:f2:fd:2c:95:eb:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BB:CF:E6:B8:39:BE:E1:51:B9:31:42:F5:CD:EC:C6:7C:85:42:46
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:07:4c:5d:66:01:fa:64:b0:f7:01:89:66:0c:e4:7b:2c:f8:
         8d:e4:05:d6:9d:73:4d:b0:02:5c:de:7d:75:00:57:54:d6:22:
         92:09:43:51:ea:29:c0:ee:4b:ea:b1:1d:30:8e:c7:29:9e:a7:
         da:cc:78:de:98:1e:9f:c0:f2:2b:f5:ca:72:84:96:08:b2:04:
         f7:b7:0e:7d:a8:8e:82:70:f9:de:4c:a8:6f:da:2d:40:cb:ac:
         f5:06:07:f7:2c:d9:7d:3a:2b:43:af:8e:2c:f8:1d:9f:92:a7:
         33:e8:90:3a:0b:6b:22:17:c1:b3:35:89:02:4e:6c:dd:e0:c7:
         2e:1d:da:9e:b0:e9:d3:39:e3:2a:dd:c9:23:94:ca:02:13:ab:
         f8:1a:c9:ea:c8:ed:34:80:7d:c2:dc:84:6e:6f:dc:60:d3:fd:
         93:35:fb:4f:3a:53:4d:84:96:51:2c:63:a1:4b:f4:f7:35:db:
         23:a0:ae:ff:4e:c4:40:c9:1c:b3:2f:20:a7:87:ce:2f:4c:5b:
         42:d5:80:12:f8:a1:88:8b:f5:5b:87:52:e9:fc:55:c2:e3:54:
         86:f7:17:fa:5d:b4:a5:fe:d5:72:fa:b2:32:0d:93:b9:fd:d9:
         da:c9:c7:7c:76:cd:e4:6c:78:b8:46:1e:db:85:bd:75:5c:a8:
         63:32:08:6f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDJDQjFBUjExMC8GA1UEBRMoQTZBMzQzQjI3RjlGNzYyQUU0MUNGN0M1QkM2QjUx
MTRDMjg4NUE3NzAeFw0yNjA1MTMwNDE2MzRaFw0yNjA1MTUwNDE2MzRaMBgxFjAU
BgNVBAMTDTZhMDNmYjIyLWQxZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQQhMVpEXSvajXHSWEiR2JI2efJquPehDzQFxiOiFwwZAhPZF/WfZ6qhwr
a282biMjL9Nbv2fQ6UQzPnV2B4pyb1CMxG79mZSJBjW+pM21K873Zj7wJFOyxyPl
Jx/ulqh7qWJEqGCXUL94o2YLX37kXFW7b2S9vyuR5FzT57kX+3Z+SByRvwe/64nH
cdKOuQTGZGUIcN5PCoofWttYHG/9T0MPLKrz/wBuNPyf/jyObkKBCQUPSjoWrQPe
7rvZfc/N5a3V1uRndpF6cYull6e71mySeygs0R/3wbOqeKAyy46OCxdQjjTwIHKw
5DHVMqBQSRnIpEw5aZzy/SyV64hbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUi7vP
5rg5vuFRuTFC9c3sxnyFQkYwHwYDVR0jBBgwFoAUpqNDsn+fdirkHPfFvGtRFMKI
WncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyQ0IxLzQyODBDRTYwMzQ4OTExRUZBQTE4NjZBMjc2MkU5NTFBL3BxTkRz
bi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3BxTkRzbi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDJDQjEvNDI4MENFNjAzNDg5MTFFRkFBMTg2NkEyNzYyRTk1
MUEvcHFORHNuLWZkaXJrSFBmRnZHdFJGTUtJV25jLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjB0xdZgH6ZLD3AYlmDOR7LPiN5AXWnXNN
sAJc3n11AFdU1iKSCUNR6inA7kvqsR0wjscpnqfazHjemB6fwPIr9cpyhJYIsgT3
tw59qI6CcPneTKhv2i1Ay6z1Bgf3LNl9OitDr44s+B2fkqcz6JA6C2siF8GzNYkC
Tmzd4McuHdqesOnTOeMq3ckjlMoCE6v4GsnqyO00gH3C3IRub9xg0/2TNftPOlNN
hJZRLGOhS/T3NdsjoK7/TsRAyRyzLyCnh84vTFtC1YAS+KGIi/Vbh1Lp/FXC41SG
9xf6XbSl/tVy+rIyDZO5/dnaycd8ds3kbHi4Rh7bhb11XKhjMghv
-----END CERTIFICATE-----
Generated at Wed May 13 12:44:44 2026 by rpki-client