Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          10OL3qKOy7HedssT+y/CbFQrG9AFLolRMKbVjMlItIQ=
Subject key identifier:   37:05:60:D8:FA:F7:E4:CE:93:C7:CE:F3:BE:1D:7E:6A:CC:8D:61:8E
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0652
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          0651
Signing time:             Fri 24 Jul 2026 02:39:02 +0000
Manifest this update:     Fri 24 Jul 2026 02:39:01 +0000
Manifest next update:     Sun 26 Jul 2026 02:39:01 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: wFD1noLv2skWW0EmJDmgFUPHJGEETqjWKTTvc6w8+GQ=)
                          2: 5C5FD3B8B1B811ECBE7762D35A40D577.roa (hash: vGmD4pROB8VFUopnGf6To3GzFkP29HGjp5Gl6MpnPn0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Jul 24 02:39:01 2026 GMT
            Not After : Jul 26 02:39:01 2026 GMT
        Subject: CN=6a62d046-eb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:17:4c:af:8e:72:13:b0:69:31:8f:3e:f1:
                    f1:7d:03:d3:5b:d8:b0:72:3c:fe:df:5a:4c:1d:6a:
                    6e:a8:97:ea:01:1d:4e:4c:03:c1:a1:ee:30:86:3c:
                    f1:cb:b2:83:31:e7:92:78:02:40:1c:88:62:8b:75:
                    57:1f:6a:fe:ee:13:8d:ce:dd:32:86:19:fe:17:8c:
                    a8:fa:75:ba:a8:c9:1c:b5:d8:a3:32:2d:2f:41:0f:
                    11:f1:4f:7f:2e:75:73:91:a9:1d:04:76:79:04:76:
                    6a:b0:19:f1:1d:8b:72:f9:69:8e:46:51:3a:15:5d:
                    b2:15:5f:e9:b0:ff:bb:bb:67:50:22:7f:ab:a2:3e:
                    03:96:d3:d4:60:0b:f6:a7:d6:c2:25:a3:8a:55:c7:
                    05:3f:2d:ee:31:f6:99:e9:b9:bf:d8:85:ca:7b:43:
                    1f:37:c2:b0:17:fa:41:c2:9b:b8:de:eb:22:58:d3:
                    8c:96:32:5c:ed:72:c1:cb:9c:fa:a8:72:89:35:76:
                    f4:19:7a:67:28:90:74:93:ab:e3:8e:28:a9:d9:09:
                    1b:d9:91:6e:a9:26:90:c6:f7:3f:99:12:f6:de:c5:
                    06:08:1e:23:15:ff:e5:7f:5e:25:dd:54:ca:9a:fe:
                    25:75:d2:25:29:fb:f5:e8:44:53:75:d1:91:02:13:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:60:D8:FA:F7:E4:CE:93:C7:CE:F3:BE:1D:7E:6A:CC:8D:61:8E
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:97:c0:b0:86:86:01:bd:d4:5a:c2:27:8c:50:7e:94:a7:7d:
         13:dc:8e:f5:2f:9b:c6:d7:d5:3d:f5:90:2f:36:7b:55:b1:2c:
         e7:ca:44:57:11:eb:97:bb:1a:19:72:79:93:4f:a5:98:e0:7e:
         ac:3d:d1:20:e1:fe:bb:3d:8b:95:a6:e1:e9:95:98:43:c0:7c:
         b6:89:6d:42:bd:f1:9e:07:cc:f5:02:ef:ff:3b:6c:34:d9:e8:
         9d:99:4e:90:31:b1:1b:d8:3c:02:ca:1a:f6:65:2a:2d:70:bc:
         53:7e:0e:94:24:c7:14:3c:04:62:48:07:17:e8:03:79:20:8d:
         aa:33:f5:49:73:11:be:43:3e:2e:56:e3:a6:e4:96:d6:2a:62:
         eb:b1:de:ef:f9:dc:f6:93:05:f4:2b:1d:44:cd:ad:ba:67:97:
         9d:73:6a:c0:93:fa:77:5b:3e:4c:52:6b:c2:26:d0:2b:9b:db:
         81:9b:44:28:0b:d4:1b:5d:82:a9:db:fd:b8:5d:8d:1d:dd:a7:
         11:27:cc:22:ce:a5:3a:14:32:7b:dc:90:b4:32:15:1a:4f:fa:
         cb:f8:ea:86:13:8d:a7:77:4c:c3:d7:52:66:b9:d9:6f:5b:30:
         2e:36:fa:bf:c3:58:4f:1f:34:19:d9:68:87:5b:44:9c:15:21:
         40:02:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:48 2026 by rpki-client