Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
File:                     9ghiikaC9VOASvOrLlihnDCordI.mft (raw, json)
Hash identifier:          C9i7vDEc8wVuJztFqjX6Uro/cQiGkh2rCwUJ0h4XZxs=
Subject key identifier:   A7:08:4D:04:19:EB:8B:93:08:45:1D:59:68:66:7B:A7:97:67:7D:AF
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       025C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
Manifest number:          024F
Signing time:             Thu 26 Mar 2026 05:26:20 +0000
Manifest this update:     Thu 26 Mar 2026 05:26:19 +0000
Manifest next update:     Sat 28 Mar 2026 05:26:19 +0000
Files and hashes:         1: 9ghiikaC9VOASvOrLlihnDCordI.crl (hash: xNHFVlqT82FeEDhrEgP90fqA5gXhS+64POHxXwDfr/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR, serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Mar 26 05:26:19 2026 GMT
            Not After : Mar 28 05:26:19 2026 GMT
        Subject: CN=69c4c37c-fe46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:05:49:01:33:ea:f0:f3:e6:d4:bb:c2:ac:
                    48:34:dd:8b:87:4d:dc:39:2e:7c:1b:d4:29:31:f9:
                    60:db:59:46:d8:09:b5:fd:a3:68:0c:1f:c8:fb:b5:
                    a1:23:45:c5:b8:45:f4:80:ec:8e:84:9d:a8:92:6d:
                    90:51:0b:a1:44:44:f4:6a:a7:aa:a7:69:35:d0:89:
                    7c:b7:d5:76:51:cd:a1:7f:04:c7:56:24:fb:38:75:
                    49:b5:60:bb:4c:5a:75:ce:f6:9f:94:fd:1b:cd:c3:
                    39:84:eb:38:31:d7:81:4e:e5:e5:72:5e:3e:9e:76:
                    b9:87:18:52:b7:8e:45:19:d0:04:1f:04:0d:6b:bb:
                    1c:aa:d2:f4:8f:13:a9:bc:0e:93:1f:84:da:65:cd:
                    db:54:13:49:b9:1e:82:53:22:11:d7:b2:e1:d4:3f:
                    e5:35:d5:37:e0:2d:c5:5a:7d:4e:8e:6a:f5:ac:6c:
                    7b:ba:08:98:d4:b7:34:9d:f4:17:95:88:33:ac:d4:
                    17:3e:6d:fd:83:48:1c:cb:58:c9:04:f8:c6:05:96:
                    02:41:ba:2b:37:8a:89:38:1d:c6:96:90:12:f2:38:
                    5d:94:6d:75:80:02:76:fb:7a:dd:7f:bd:f9:43:df:
                    92:e9:71:b9:34:17:08:b3:95:de:08:41:31:19:91:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:08:4D:04:19:EB:8B:93:08:45:1D:59:68:66:7B:A7:97:67:7D:AF
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4f:71:91:f5:7f:be:86:3e:81:bb:a4:78:5b:d5:c8:45:07:
         0d:f3:f8:d7:cd:f5:3a:e5:42:d1:99:c4:ae:57:80:f1:4b:3d:
         cd:a3:80:af:ce:de:f5:60:24:5c:3e:5a:db:cf:8d:d5:f5:66:
         23:0a:26:e7:6c:06:f5:68:2b:26:aa:ad:de:07:69:ed:1d:83:
         8b:22:ca:37:51:da:c0:76:72:d1:d0:fc:c3:a4:90:26:f4:9f:
         c4:82:59:64:4a:e7:47:c6:4e:97:86:82:18:03:83:4f:fb:28:
         3e:9b:75:79:11:5e:43:4b:a2:bd:42:b4:ff:ce:a2:8d:9d:05:
         b4:d6:9a:23:91:10:7d:bd:2f:3d:6e:2f:68:b1:ed:3a:7d:45:
         a9:d2:10:77:32:00:5d:4e:4a:f6:40:54:14:18:ac:e3:3e:aa:
         1b:b2:ae:01:62:97:41:06:ee:7a:e3:9a:92:f3:6e:e8:04:5a:
         5e:d0:53:f5:93:d8:46:20:ad:ff:1a:9e:a7:e5:cf:d0:09:6b:
         6f:06:cc:f4:3e:3d:51:e7:04:26:9b:fb:8a:ed:cb:38:13:48:
         ec:b0:dd:84:cc:f8:37:be:d8:b5:08:54:d3:44:c0:52:09:b5:
         2e:d6:d8:22:ac:ad:fa:75:95:9d:42:06:24:47:55:88:0c:c5:
         25:4f:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:50 2026 by rpki-client