Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          cUGDzaZHv7BoKiiSDUkACyqBsZwjQBc924aB3ElzSpY=
Subject key identifier:   48:E5:AD:91:5E:D3:D1:B8:24:FC:70:38:D8:2E:5B:27:D9:6E:C3:06
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0E08
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0E01
Signing time:             Thu 26 Mar 2026 01:08:31 +0000
Manifest this update:     Thu 26 Mar 2026 01:08:30 +0000
Manifest next update:     Sat 28 Mar 2026 01:08:30 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: p8UXiCqf+zmueAZ/2QiKv8GR8aPAmHlAswbku++BUKk=)
                          2: B740FF2CC48911F0A0A930F6DAE4EC9C.roa (hash: hoHpRJdMZhTG8lW2y+zp3mOTqMaTdX9ouOjQLsrYm70=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                          rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3592 (0xe08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR, serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: Mar 26 01:08:30 2026 GMT
            Not After : Mar 28 01:08:30 2026 GMT
        Subject: CN=69c4870f-2abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:49:b8:8f:74:da:ff:f8:3d:b0:b8:4c:1d:
                    82:64:6e:bc:25:45:23:fe:a4:4f:a6:6c:1c:6e:c8:
                    93:dd:8f:81:04:8e:c5:92:3a:5f:b7:c5:3b:7e:2d:
                    58:de:7e:da:28:a3:56:0c:cd:07:4d:e1:b3:5d:6e:
                    7b:8d:5c:06:87:2c:7a:c3:fc:4a:67:67:5c:77:87:
                    e4:15:46:b4:76:41:6b:94:9a:da:30:cc:1c:b7:72:
                    47:9e:62:3b:5c:30:e1:35:d3:21:26:f6:15:c0:38:
                    af:35:7d:7f:b7:25:b6:a4:aa:b6:09:cf:e5:a8:29:
                    25:ec:e1:13:43:ed:d8:9d:25:75:c4:f2:63:ce:17:
                    5e:be:fe:3a:52:61:de:50:b5:b0:ec:c3:b1:45:b4:
                    01:cc:c9:19:87:31:6e:cf:3e:18:aa:6c:f3:db:a2:
                    96:f1:8c:5f:92:96:85:03:49:22:78:a9:4a:27:16:
                    fa:13:28:22:eb:67:85:14:66:ec:8b:08:49:fe:a2:
                    fb:aa:27:cd:ee:36:0a:c5:ce:c2:4a:f0:a4:dd:37:
                    ad:ce:cb:3f:59:d9:6e:64:76:01:0f:f0:9c:8f:7c:
                    6b:f7:bf:67:c0:ed:7b:ec:e5:cd:16:49:1c:69:2c:
                    85:ee:b9:3a:b7:ee:44:4e:8c:f2:e8:b7:ba:55:83:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E5:AD:91:5E:D3:D1:B8:24:FC:70:38:D8:2E:5B:27:D9:6E:C3:06
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:44:1c:bb:cc:d6:e1:04:51:9b:4d:5b:a4:a5:cb:6d:1d:89:
         7e:4c:5d:06:2b:5b:3c:84:48:79:8d:fc:45:cb:60:3b:60:0e:
         67:42:6a:8e:d5:f2:32:e3:05:e8:53:9e:5d:4c:8d:00:a9:4f:
         ac:8b:a6:f7:11:fe:c3:cc:20:0b:6d:11:91:df:0b:d9:91:c0:
         20:64:53:92:07:c7:7a:25:bb:8d:a6:7c:22:d8:3a:54:02:25:
         80:32:10:d2:9d:05:3d:b1:38:2e:b6:14:c2:41:d1:d0:7d:be:
         c7:39:c7:e7:38:55:51:f4:24:93:23:46:b8:97:10:aa:1e:bc:
         13:af:70:3d:4c:c0:92:9f:a8:99:c9:3b:78:ae:3a:47:90:f1:
         eb:34:64:e6:fb:18:91:12:a0:8e:21:8e:a2:17:62:4c:83:d1:
         fc:f8:b1:dc:c3:3f:58:96:75:8c:d1:38:5c:96:fb:2e:4e:4d:
         dc:2c:12:0d:a8:87:ca:92:7f:0c:23:3b:70:1b:9d:b6:8c:f6:
         ea:f2:72:2a:41:a7:bf:6c:75:d5:11:ed:bb:96:d9:51:55:8b:
         ce:ed:64:91:0f:18:e7:01:c8:98:42:f5:6c:ab:43:a0:89:92:
         d5:cd:4f:30:c7:ef:11:55:07:3d:66:91:aa:25:37:e7:58:6f:
         5e:01:6b:8b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDggwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTFFNzNBUjExMC8GA1UEBRMoOUNCQTE0MjBENzIxQ0MwMzAyM0M1MDA2RDIyNTFD
MjBCQUY0Qzg4MjAeFw0yNjAzMjYwMTA4MzBaFw0yNjAzMjgwMTA4MzBaMBgxFjAU
BgNVBAMTDTY5YzQ4NzBmLTJhYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyi0m4j3Ta//g9sLhMHYJkbrwlRSP+pE+mbBxuyJPdj4EEjsWSOl+3xTt+
LVjeftooo1YMzQdN4bNdbnuNXAaHLHrD/EpnZ1x3h+QVRrR2QWuUmtowzBy3ckee
YjtcMOE10yEm9hXAOK81fX+3JbakqrYJz+WoKSXs4RND7didJXXE8mPOF16+/jpS
Yd5QtbDsw7FFtAHMyRmHMW7PPhiqbPPbopbxjF+SloUDSSJ4qUonFvoTKCLrZ4UU
ZuyLCEn+ovuqJ83uNgrFzsJK8KTdN63Oyz9Z2W5kdgEP8JyPfGv3v2fA7Xvs5c0W
SRxpLIXuuTq37kROjPLot7pVg4X5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUSOWt
kV7T0bgk/HA42C5bJ9luwwYwHwYDVR0jBBgwFoAUnLoUINchzAMCPFAG0iUcILr0
yIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxRTczLzREM0NGQTFBNzhDNDExRTZCQjlENDgzMUY4QUVBMjI4L25Mb1VJ
TmNoekFNQ1BGQUcwaVVjSUxyMHlJSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L25Mb1VJTmNoekFNQ1BGQUcwaVVjSUxyMHlJSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTFFNzMvNEQzQ0ZBMUE3OEM0MTFFNkJCOUQ0ODMxRjhBRUEy
MjgvbkxvVUlOY2h6QU1DUEZBRzBpVWNJTHIweUlJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDERBy7zNbhBFGbTVukpcttHYl+TF0GK1s8
hEh5jfxFy2A7YA5nQmqO1fIy4wXoU55dTI0AqU+si6b3Ef7DzCALbRGR3wvZkcAg
ZFOSB8d6JbuNpnwi2DpUAiWAMhDSnQU9sTguthTCQdHQfb7HOcfnOFVR9CSTI0a4
lxCqHrwTr3A9TMCSn6iZyTt4rjpHkPHrNGTm+xiREqCOIY6iF2JMg9H8+LHcwz9Y
lnWM0ThclvsuTk3cLBINqIfKkn8MIztwG522jPbq8nIqQae/bHXVEe27ltlRVYvO
7WSRDxjnAciYQvVsq0OgiZLVzU8wx+8RVQc9ZpGqJTfnWG9eAWuL
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:22 2026 by rpki-client