Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          28sVk/l8HVfEOLOI3YQxE593B+GURkX4KzFeewbWEks=
Subject key identifier:   9F:87:AB:AD:94:A8:33:6D:A3:6C:86:7B:70:CF:F1:98:B0:10:61:25
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       4C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          48
Signing time:             Wed 25 Mar 2026 06:30:07 +0000
Manifest this update:     Wed 25 Mar 2026 06:30:06 +0000
Manifest next update:     Fri 27 Mar 2026 06:30:06 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: n+yESRLCzb+8AKmFwOmhELWW4gztyU74IhvkhF35/cc=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 06:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Mar 25 06:30:06 2026 GMT
            Not After : Mar 27 06:30:06 2026 GMT
        Subject: CN=69c380ef-d46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:2a:ed:b9:cb:6d:13:0a:b5:8e:0b:d1:34:
                    5e:0d:40:dd:8f:b7:e8:5e:24:ae:c9:36:4a:ed:4f:
                    8a:75:05:09:3e:5c:a2:d1:42:3d:a5:89:4f:0c:d0:
                    7b:dc:33:33:38:a0:49:b3:2e:6b:cf:22:1b:8a:06:
                    03:85:ff:08:54:16:05:ce:a5:7c:56:88:92:80:6f:
                    e7:4e:b1:39:ba:77:9d:63:3e:2b:d4:97:b8:77:6b:
                    eb:03:90:da:f9:ae:bb:6d:ef:ab:03:15:1e:76:55:
                    27:df:7d:2a:cd:e9:30:b0:63:2e:22:c9:39:69:a6:
                    eb:dc:d4:24:8e:c4:90:20:e9:05:ea:9d:1b:7b:16:
                    af:e0:35:2e:01:40:69:67:51:e2:fa:37:09:d0:71:
                    27:bc:77:d5:60:8b:40:ba:a1:99:97:c1:0e:b1:81:
                    62:28:34:75:62:f7:79:f1:86:b5:47:29:b2:0d:51:
                    c8:7f:22:77:ac:74:f1:03:be:3b:2d:ea:22:e1:10:
                    48:ec:1c:f2:98:8f:4a:4b:ce:6e:0e:f2:32:e9:52:
                    30:78:cb:e9:b6:7b:81:3d:6d:4e:85:75:93:12:7c:
                    69:e8:cd:3f:11:92:7a:85:f0:6a:b3:40:d2:95:3f:
                    17:75:7e:c4:47:35:88:b1:f7:c9:be:c5:ee:b1:2f:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:87:AB:AD:94:A8:33:6D:A3:6C:86:7B:70:CF:F1:98:B0:10:61:25
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:79:e5:24:95:57:7f:da:92:be:26:50:da:a5:e7:68:62:
         83:1d:5b:07:9b:15:8f:56:2e:33:30:a1:72:61:eb:2c:b3:73:
         15:bc:d8:84:90:e6:55:7d:94:da:1e:2d:ec:ae:94:54:2b:b9:
         9b:1b:5d:49:10:82:30:e5:51:ed:aa:1a:7d:70:5a:7e:37:4b:
         d7:55:56:e3:23:91:70:5c:a8:6b:06:ed:68:ec:ec:de:b0:32:
         60:30:94:ad:9f:5d:1e:98:e3:95:3a:fd:fe:48:c1:a8:fc:20:
         77:13:93:65:e1:a8:c1:b0:e6:73:13:f9:4e:c2:76:a7:15:40:
         41:79:b6:af:fe:a4:a4:d7:52:c7:f5:01:12:08:51:82:9c:75:
         d1:28:84:6f:d5:71:c1:1d:7c:47:40:df:a5:e2:a4:3c:4c:9f:
         1c:f1:a3:41:a7:c1:7f:ce:d7:a7:8c:6e:9b:fc:d4:32:9b:d6:
         41:dc:3c:c8:a4:79:6e:48:b5:8b:a9:c5:66:aa:14:d8:52:11:
         74:2e:31:be:3d:5e:6d:1d:be:c2:9f:8a:16:d7:ba:18:a1:6c:
         71:69:71:b5:34:42:a9:fb:9f:e4:76:78:a3:cf:e2:18:1a:3f:
         69:6b:a6:e7:ce:71:57:f6:8e:f2:e8:cc:23:e9:3c:3a:57:07:
         a7:04:58:b0
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBTDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MjIxMEFSMTEwLwYDVQQFEyg3MUJGQzAwRDUyMUU2MEM5MEEwMDI2ODgzNDY4QzlD
MUI1MzgwMTgxMB4XDTI2MDMyNTA2MzAwNloXDTI2MDMyNzA2MzAwNlowGDEWMBQG
A1UEAxMNNjljMzgwZWYtZDQ2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANXjKu25y20TCrWOC9E0Xg1A3Y+36F4krsk2Su1PinUFCT5cotFCPaWJTwzQ
e9wzMzigSbMua88iG4oGA4X/CFQWBc6lfFaIkoBv506xObp3nWM+K9SXuHdr6wOQ
2vmuu23vqwMVHnZVJ999Ks3pMLBjLiLJOWmm69zUJI7EkCDpBeqdG3sWr+A1LgFA
aWdR4vo3CdBxJ7x31WCLQLqhmZfBDrGBYig0dWL3efGGtUcpsg1RyH8id6x08QO+
Oy3qIuEQSOwc8piPSkvObg7yMulSMHjL6bZ7gT1tToV1kxJ8aejNPxGSeoXwarNA
0pU/F3V+xEc1iLH3yb7F7rEvA98CAwEAAaOCArUwggKxMB0GA1UdDgQWBBSfh6ut
lKgzbaNshntwz/GYsBBhJTAfBgNVHSMEGDAWgBRxv8ANUh5gyQoAJog0aMnBtTgB
gTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTIyMTAvRUNERjNGMDhGNTNCMTFGMDgxRjUwMURCREFFNEVDOUMvY2JfQURW
SWVZTWtLQUNhSU5Hakp3YlU0QVlFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
Y2JfQURWSWVZTWtLQUNhSU5Hakp3YlU0QVlFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY1MjIxMC9FQ0RGM0YwOEY1M0IxMUYwODFGNTAxREJEQUU0RUM5
Qy9jYl9BRFZJZVlNa0tBQ2FJTkdqSndiVTRBWUUubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKi/eeUklVd/2pK+JlDapedoYoMdWwebFY9W
LjMwoXJh6yyzcxW82ISQ5lV9lNoeLeyulFQruZsbXUkQgjDlUe2qGn1wWn43S9dV
VuMjkXBcqGsG7Wjs7N6wMmAwlK2fXR6Y45U6/f5Iwaj8IHcTk2XhqMGw5nMT+U7C
dqcVQEF5tq/+pKTXUsf1ARIIUYKcddEohG/VccEdfEdA36XipDxMnxzxo0GnwX/O
16eMbpv81DKb1kHcPMikeW5ItYupxWaqFNhSEXQuMb49Xm0dvsKfihbXuhihbHFp
cbU0Qqn7n+R2eKPP4hgaP2lrpufOcVf2jvLozCPpPDpXB6cEWLA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:51 2026 by rpki-client