Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
File:                     Go8PdPo6YC9H_Ow2uLP3niHzABg.mft (raw, json)
Hash identifier:          zvvZdPa10i0oUUwHV7Mci2Piq0DoBp/VbLmk9hNIiM0=
Subject key identifier:   43:74:46:A6:09:77:8C:F4:A9:93:CE:CB:40:A8:7D:2D:77:F6:AB:B8
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Certificate issuer:       /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial:       0D92
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
Manifest number:          2353
Signing time:             Thu 26 Mar 2026 01:10:16 +0000
Manifest this update:     Thu 26 Mar 2026 01:10:15 +0000
Manifest next update:     Sat 28 Mar 2026 01:10:15 +0000
Files and hashes:         1: Go8PdPo6YC9H_Ow2uLP3niHzABg.crl (hash: f+hksT9hMzvHjrXif+4/u61V1Wy+kKxcrP6pl66d/a0=)
                          2: B0CB3182C8C611E9B220F755F8AEA228.roa (hash: gqrU/z6iXLRtLiCnHFZa0s+2uBK1Ct+5G7ihg1BeuL0=)
                          3: 0E3B72CCC8C811E98D790458F8AEA228.roa (hash: itr9OUnzmKbdqppKMzcknLB4lBw9Ah9MK/Fp31d00b0=)
                          4: B6DAAC5EC8C811E9B566A258F8AEA228.roa (hash: Y4yGjlwVyROuEGeowY33dWqLnQRQW/byvC0cJpLJ8EA=)
                          5: 361323CCC8C711E9B652C156F8AEA228.roa (hash: ZDrsLI1RWkFdQohl1nTyw5JGa4/mTeCrLl2gQVNYxnU=)
                          6: 146302C4C8C711E984B79356F8AEA228.roa (hash: DdSuiwT/ngk7JQ1+7xZSJqCpSkRWy7BhZniM1rPy9e8=)
                          7: E73F0D38C8C611E98A095B56F8AEA228.roa (hash: B5Em/KidBogdtiGbZ1QNgeUY8m5bNBKn2AeQxhe44fA=)
                          8: 66123256C8C811E99A726E58F8AEA228.roa (hash: u5cowoJMX4Hxd12oQmnhhFSMAoh12QYhoXjiZuk5pKI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
                          rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3474 (0xd92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AR, serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
        Validity
            Not Before: Mar 26 01:10:15 2026 GMT
            Not After : Mar 28 01:10:15 2026 GMT
        Subject: CN=69c48778-5995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:a9:b4:d5:6f:b9:99:dc:5b:fe:14:16:9c:
                    b2:8d:ff:cd:9b:e5:ed:43:38:d4:d3:73:59:73:90:
                    25:cb:5e:49:bc:05:a3:58:71:ab:c4:cf:e7:1d:40:
                    04:a5:4f:32:62:5d:4b:98:0c:eb:90:b0:19:0b:1e:
                    55:a8:00:21:c1:82:52:03:48:1d:87:14:23:86:7b:
                    0a:86:c7:d1:9e:ec:db:01:91:b7:62:dd:db:73:15:
                    6b:cd:29:7c:e0:05:de:a5:63:c0:8d:08:13:51:cc:
                    66:d0:1f:78:59:c1:2a:fe:98:b5:16:b7:59:e0:de:
                    d6:6f:aa:96:68:c5:49:41:09:0c:7f:3d:3b:d8:98:
                    57:d1:d1:cb:ec:9f:13:e8:14:0c:34:dc:66:d9:12:
                    0c:db:9f:d6:20:86:98:e5:f1:4e:0a:e9:37:1d:aa:
                    f4:92:11:2c:89:49:fc:14:a2:83:41:8f:81:14:72:
                    98:e0:eb:c8:03:6a:42:37:66:22:a4:07:5c:fa:58:
                    34:1f:ee:45:1d:29:00:4d:67:de:71:7b:a9:d5:84:
                    4b:71:e4:8a:6e:30:78:56:0a:97:fd:12:d7:47:78:
                    76:8d:9f:5c:0e:0f:ca:e4:54:e6:a5:44:1c:d6:60:
                    9e:99:8f:62:9d:e3:b2:7d:05:49:5d:eb:ae:47:d8:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:74:46:A6:09:77:8C:F4:A9:93:CE:CB:40:A8:7D:2D:77:F6:AB:B8
            X509v3 Authority Key Identifier:
                keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:62:24:cc:dc:82:a8:e4:1c:0f:8a:62:e5:10:a0:6d:6f:
         7f:fc:1e:df:96:3f:9f:c4:db:38:86:5b:ab:22:be:aa:28:18:
         85:44:69:0a:86:6f:e6:7d:52:a2:14:35:ec:3c:e7:4e:c6:16:
         6a:da:6c:aa:87:12:ad:39:ca:f7:1d:e9:91:88:3e:a4:b8:c0:
         1f:96:a3:f0:79:38:5a:cc:7c:28:dd:20:3e:82:09:02:ae:fa:
         e4:f6:3a:02:6a:52:d4:fe:0c:fb:f7:b8:54:8f:94:85:84:dd:
         b8:d7:25:34:f6:f7:a2:87:54:a0:12:d8:bc:ab:15:1f:6c:59:
         17:b8:07:75:a2:96:41:9f:26:0e:59:54:e5:4c:b6:c0:72:8f:
         7e:aa:ae:55:6c:3a:c0:23:50:a3:d6:1e:55:4a:9b:13:c2:19:
         dd:18:e9:80:bc:7b:7a:54:97:d5:60:2f:35:b6:d4:df:28:c6:
         05:2a:b9:b2:bd:98:3d:ea:54:aa:98:97:03:13:a8:f6:88:e1:
         52:02:b7:14:ab:1b:11:d9:aa:0d:41:f5:2a:ce:fb:15:6e:d8:
         44:ab:61:c4:ce:36:50:08:04:e7:26:eb:0e:4d:04:f1:03:6c:
         18:ad:ae:62:d0:06:76:4d:8c:f8:c1:30:91:d8:ed:da:60:44:
         a7:7f:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:17 2026 by rpki-client