Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          ZFdPm9/QvDTh4ZKYuLBaJCZrz+GelzoRKu9LeAIpgzE=
Subject key identifier:   B6:7F:3B:E1:DD:A6:7C:C0:61:05:F9:48:36:8C:94:E3:2D:A3:FA:67
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       0A6D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          0A6C
Signing time:             Thu 26 Mar 2026 01:23:12 +0000
Manifest this update:     Thu 26 Mar 2026 01:23:11 +0000
Manifest next update:     Sat 28 Mar 2026 01:23:11 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: icV5/vmcyuhZ7cyI8FtUfgvWmMxLs6z0Jwdk+KlBw2E=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Mar 26 01:23:11 2026 GMT
            Not After : Mar 28 01:23:11 2026 GMT
        Subject: CN=69c48a7f-a00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:46:d8:b0:cc:cb:d0:fe:36:fa:e2:a4:17:
                    fd:27:a7:47:48:92:f6:60:ab:06:1a:12:fd:22:71:
                    04:ec:c6:90:64:b9:de:c2:46:72:54:59:f7:61:13:
                    ca:35:70:78:97:70:67:68:70:b4:11:27:59:28:fa:
                    48:ec:04:e9:69:40:fb:f4:84:a2:16:a2:c3:fb:21:
                    be:5a:92:0d:e5:02:c6:5c:bb:d2:63:f8:e8:84:91:
                    aa:4f:76:62:e1:2a:62:eb:f3:03:ea:b1:a7:89:e6:
                    e3:fb:85:2f:a2:79:5a:d6:91:e8:a1:e4:b5:8a:7a:
                    88:49:98:9c:f1:8f:59:8b:b8:41:cf:1c:59:0d:74:
                    e7:51:8e:98:49:9b:36:18:c5:8b:83:6d:ff:af:23:
                    9b:7c:8a:ff:98:5e:6a:58:15:63:27:66:de:f2:90:
                    56:24:a3:7a:00:1f:bc:ce:76:73:ff:5f:4b:8f:6d:
                    61:b0:33:ac:79:b9:c1:dd:b4:9d:76:09:e7:0f:e4:
                    25:9e:d0:f5:b3:f2:7b:99:dd:b4:0a:77:06:69:f6:
                    9a:77:23:9e:f0:37:60:31:ac:f2:ee:90:7b:47:6a:
                    11:3f:b6:3a:6f:b0:1c:3d:2b:f7:6a:0f:3e:0c:5e:
                    a9:a9:f8:7a:04:89:7c:02:c0:7c:a5:05:b7:bf:42:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7F:3B:E1:DD:A6:7C:C0:61:05:F9:48:36:8C:94:E3:2D:A3:FA:67
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:a5:d3:ba:c4:14:b4:81:23:49:53:c7:fb:44:87:96:f7:
         78:63:58:6b:be:99:4f:9e:ab:a8:98:8d:e5:72:48:b3:f1:6e:
         f9:22:bd:67:a8:51:41:8b:ea:c7:3f:4b:f2:b7:5e:12:4e:ef:
         f0:38:7d:3c:3e:7c:25:a2:a1:4e:b8:78:87:ae:a2:3e:0e:9d:
         a4:b7:22:3f:3a:a8:6d:64:6d:ed:c0:44:d9:2c:5c:77:fa:47:
         c7:95:5b:ba:b1:4e:19:a2:9e:26:8b:59:cd:5b:c8:9a:1f:7c:
         0c:22:f6:32:10:64:8b:6a:12:07:a3:fd:7e:a1:e5:fa:a4:94:
         76:f9:c0:a8:8e:0c:b1:de:6e:1d:8b:83:2d:81:6c:fd:07:c7:
         ff:ff:60:d3:2b:f4:51:d8:1b:67:60:19:09:20:4f:c6:bd:7e:
         4a:09:3f:7d:dc:4f:72:6f:e0:7f:5b:74:93:7b:44:df:21:b6:
         7d:c2:14:ef:61:f8:26:62:14:b3:00:aa:a7:2d:4c:33:7c:b1:
         6c:d0:f0:c6:d1:16:25:b5:c9:68:53:e7:19:c3:48:ec:b8:a3:
         ce:ed:8e:af:11:4e:95:6c:6f:22:71:ad:7d:d2:f4:38:81:17:
         87:92:3b:af:8f:51:9d:f0:e9:f9:e7:0a:de:f0:bd:89:8b:c9:
         b2:a3:94:a4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEU2N0NBUjExMC8GA1UEBRMoNzEyRUU0NkNDRjEzMjgwODdGMkUzRjI4NjU3NjEx
OEMxMDY5Qjk3RDAeFw0yNjAzMjYwMTIzMTFaFw0yNjAzMjgwMTIzMTFaMBgxFjAU
BgNVBAMTDTY5YzQ4YTdmLWEwMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvp0bYsMzL0P42+uKkF/0np0dIkvZgqwYaEv0icQTsxpBkud7CRnJUWfdh
E8o1cHiXcGdocLQRJ1ko+kjsBOlpQPv0hKIWosP7Ib5akg3lAsZcu9Jj+OiEkapP
dmLhKmLr8wPqsaeJ5uP7hS+ieVrWkeih5LWKeohJmJzxj1mLuEHPHFkNdOdRjphJ
mzYYxYuDbf+vI5t8iv+YXmpYFWMnZt7ykFYko3oAH7zOdnP/X0uPbWGwM6x5ucHd
tJ12CecP5CWe0PWz8nuZ3bQKdwZp9pp3I57wN2AxrPLukHtHahE/tjpvsBw9K/dq
Dz4MXqmp+HoEiXwCwHylBbe/QkCDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUtn87
4d2mfMBhBflINoyU4y2j+mcwHwYDVR0jBBgwFoAUcS7kbM8TKAh/Lj8oZXYRjBBp
uX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRFNjdDLzgyMjBCRTZBMjkxNjExRTk5NEExRTM2NUY4QUVBMjI4L2NTN2ti
TThUS0FoX0xqOG9aWFlSakJCcHVYMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2NTN2tiTThUS0FoX0xqOG9aWFlSakJCcHVYMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NEU2N0MvODIyMEJFNkEyOTE2MTFFOTk0QTFFMzY1RjhBRUEy
MjgvY1M3a2JNOFRLQWhfTGo4b1pYWVJqQkJwdVgwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKd6XTusQUtIEjSVPH+0SHlvd4Y1hrvplP
nquomI3lckiz8W75Ir1nqFFBi+rHP0vyt14STu/wOH08PnwloqFOuHiHrqI+Dp2k
tyI/OqhtZG3twETZLFx3+kfHlVu6sU4Zop4mi1nNW8iaH3wMIvYyEGSLahIHo/1+
oeX6pJR2+cCojgyx3m4di4MtgWz9B8f//2DTK/RR2BtnYBkJIE/GvX5KCT993E9y
b+B/W3STe0TfIbZ9whTvYfgmYhSzAKqnLUwzfLFs0PDG0RYltcloU+cZw0jsuKPO
7Y6vEU6VbG8ica190vQ4gReHkjuvj1Gd8On55wre8L2Ji8myo5Sk
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:12:10 2026 by rpki-client