Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
File:                     epndbb4tFgeKUOWEHlqOilkM3Us.mft (raw, json)
Hash identifier:          p/yHgt6VZZbZ9Lo3qXi9y/cEsrOQn85/JdwQWMfMjCo=
Subject key identifier:   35:3E:A8:AB:ED:4A:08:5A:12:DF:05:14:8C:13:51:06:7F:51:FC:42
Authority key identifier: 7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
Certificate issuer:       /CN=F365052EAR/serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
Certificate serial:       025C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
Manifest number:          025B
Signing time:             Thu 26 Mar 2026 05:17:09 +0000
Manifest this update:     Thu 26 Mar 2026 05:17:08 +0000
Manifest next update:     Sat 28 Mar 2026 05:17:08 +0000
Files and hashes:         1: epndbb4tFgeKUOWEHlqOilkM3Us.crl (hash: VOxmzG9kOkB/J62hXUXSHRW8Ak23/RyFWHVXTGKRW4U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                          rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365052EAR, serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
        Validity
            Not Before: Mar 26 05:17:08 2026 GMT
            Not After : Mar 28 05:17:08 2026 GMT
        Subject: CN=69c4c155-aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d2:be:bb:d9:62:62:5f:23:4f:48:99:e0:a0:
                    61:a3:db:8e:a7:38:81:3a:0f:33:f1:be:e2:41:10:
                    1f:51:20:29:b3:60:a3:bd:9a:83:71:aa:ad:92:0a:
                    89:a4:16:df:4e:b8:ea:2f:6f:51:ad:9f:a7:2d:71:
                    c2:b9:18:5a:88:49:7a:9d:3c:0f:eb:ae:54:9d:72:
                    91:e5:4e:44:c5:f3:f8:23:80:1d:a6:bf:c2:e3:9f:
                    03:4d:4a:93:ac:a1:63:59:ec:ee:35:d0:dd:7d:bf:
                    4f:2e:05:0d:ba:fa:60:c3:60:99:52:a5:e2:12:5c:
                    74:c8:c9:08:62:f4:15:14:f2:9f:26:c4:0d:e2:2a:
                    7e:c7:cf:a5:b2:69:96:a2:4f:66:dc:9c:91:e9:c5:
                    e6:ee:f6:47:d3:85:02:6e:8d:31:43:79:8d:84:60:
                    07:0f:c0:dd:60:50:e3:95:af:b2:3d:31:67:a3:f9:
                    87:0f:18:62:4f:e6:c8:90:70:bb:b7:ed:6d:3d:eb:
                    6c:25:26:0e:2b:88:f8:f9:ab:76:74:c7:23:c6:a4:
                    44:77:6a:da:fa:d8:9b:0f:57:66:20:1a:6d:60:b8:
                    02:e5:ba:70:bc:e5:6a:34:90:4e:de:b0:7f:3c:e9:
                    a0:e7:92:3d:f3:23:97:be:de:26:fe:65:da:0a:9c:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3E:A8:AB:ED:4A:08:5A:12:DF:05:14:8C:13:51:06:7F:51:FC:42
            X509v3 Authority Key Identifier:
                keyid:7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:de:74:10:78:07:5b:a5:3e:9b:d0:33:14:0d:87:c1:9e:6d:
         ec:8a:58:b0:7f:38:14:9e:8c:97:f8:07:64:17:ba:07:54:f9:
         48:fd:3d:74:fe:f0:08:6b:af:6f:49:5a:b7:07:7b:8b:bb:59:
         4b:c3:6e:eb:ad:62:f5:7a:8e:39:d0:86:5b:41:12:e5:14:55:
         9a:91:fe:6c:b4:44:73:8a:3c:1e:eb:0e:74:a1:51:4a:d3:7b:
         43:88:2d:40:f6:be:72:25:14:30:25:c3:0c:60:2c:f1:b9:b1:
         32:5b:fc:0f:08:ab:1c:7e:6e:ac:05:f7:be:cb:70:df:b5:2f:
         82:d8:23:e4:8f:bc:04:d4:60:89:a9:32:00:67:2f:92:6c:a5:
         49:1b:c3:ab:a9:c8:7e:36:4b:3b:81:86:e8:aa:c7:d4:28:30:
         22:f9:9f:c0:52:3d:09:9d:48:be:16:56:45:6a:b9:fe:e9:6c:
         f6:06:3c:f3:6e:12:9f:ec:8e:ae:73:59:ec:7d:47:52:70:05:
         66:bd:68:5f:34:2d:2f:10:fb:f4:19:9e:94:fa:f6:d2:4f:de:
         1c:b3:2c:8c:15:bd:cd:8c:d6:8b:73:59:70:7f:73:fe:b4:17:
         e3:1d:3d:c3:ed:19:b2:4a:00:26:91:a1:cf:38:46:25:6a:3d:
         ed:b8:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:43 2026 by rpki-client