Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
File:                     h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft (raw, json)
Hash identifier:          02vn0Tob0cedyvukyW3xRIxdcD86FAUc3VydNmceOjY=
Subject key identifier:   96:D6:70:AC:48:B7:6A:51:53:15:D9:36:A8:05:7D:DE:E2:1E:0A:D1
Authority key identifier: 87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
Certificate issuer:       /CN=F3658AF9AR/serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
Certificate serial:       E5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
Manifest number:          E5
Signing time:             Thu 26 Mar 2026 06:07:25 +0000
Manifest this update:     Thu 26 Mar 2026 06:07:24 +0000
Manifest next update:     Sat 28 Mar 2026 06:07:24 +0000
Files and hashes:         1: h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl (hash: xSTNs2choMeRLm14M9F+EjSE0z3GaVETSbc8VyoIHdw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                          rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AR, serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
        Validity
            Not Before: Mar 26 06:07:24 2026 GMT
            Not After : Mar 28 06:07:24 2026 GMT
        Subject: CN=69c4cd1d-6dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:52:80:38:62:5a:62:ac:aa:d7:e6:9c:24:
                    ff:e3:3f:1d:be:cf:9b:f7:70:51:fe:a2:f0:e1:da:
                    49:61:98:2b:43:dc:46:19:f4:7a:01:9d:51:4a:e0:
                    52:c5:72:c5:e1:06:66:d7:bd:08:d8:c7:2b:9b:2e:
                    67:d0:be:1c:f6:73:c6:fb:b5:77:27:5e:83:34:9c:
                    40:36:2f:8f:49:7d:f7:0c:2e:9a:08:4a:8c:bd:22:
                    ba:7c:dc:eb:78:c1:3e:67:48:95:05:be:28:d6:33:
                    d9:d7:3c:0e:cc:e4:c8:11:55:15:e6:7e:05:72:2f:
                    05:76:15:6b:40:96:57:a2:87:c5:cf:6d:d2:f3:f8:
                    48:74:39:eb:fd:9d:65:5b:ae:ab:7d:ad:f5:cd:7c:
                    0f:62:98:91:5a:7e:f1:98:34:7e:43:21:28:c5:ab:
                    9a:83:0a:66:e4:87:55:d1:9e:25:c7:50:d8:f8:1e:
                    f2:10:6f:b3:bc:ea:c3:00:5b:d8:70:c2:60:ee:f5:
                    12:2d:53:49:f9:a5:89:14:ab:60:c3:91:83:97:f9:
                    73:58:22:df:08:a3:be:c6:2b:fa:85:e3:9f:d3:a5:
                    35:1d:73:32:86:20:68:13:73:80:92:05:b1:87:1c:
                    f1:c1:60:71:59:c7:a7:12:07:eb:22:ea:10:6c:6b:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D6:70:AC:48:B7:6A:51:53:15:D9:36:A8:05:7D:DE:E2:1E:0A:D1
            X509v3 Authority Key Identifier:
                keyid:87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:be:5a:62:82:d7:f4:1e:0d:02:86:9f:1c:ab:7f:6e:d5:20:
         39:a8:19:a4:e8:41:af:98:eb:a1:a0:ba:7c:00:da:45:c1:62:
         97:d0:3b:de:c5:bd:ac:89:bc:92:63:c1:7d:49:38:be:02:8f:
         4f:13:12:17:49:d6:f5:ee:1e:a0:31:b9:a7:5d:cd:5c:35:e3:
         c2:dc:c4:58:14:0e:20:7c:4d:93:c8:7e:63:d8:1a:f9:2f:0a:
         77:18:e7:ae:f2:e3:10:92:9c:26:3a:d5:16:63:d9:7d:ac:5b:
         8c:bd:aa:7b:0d:0f:76:b9:27:4f:a9:2e:e6:82:d5:90:b4:97:
         8d:ff:5a:14:b5:c2:28:4a:98:6c:7c:f8:79:80:a1:70:e4:e3:
         63:bf:f0:18:7a:b1:df:8c:9e:ef:6f:38:03:74:25:81:71:46:
         dd:49:ca:58:ef:7a:85:fb:44:5f:54:2c:10:30:0c:05:cc:41:
         97:08:bf:cb:3a:25:0c:c8:9a:7c:ac:cb:78:d5:ee:a3:af:7f:
         10:fc:0a:4a:49:00:8f:71:0d:d7:64:d4:b1:c9:44:80:b8:75:
         90:7c:8d:bb:94:72:91:17:51:2c:1c:9b:8f:3a:d9:92:2d:ba:
         6e:e8:6d:5f:01:3c:d3:02:af:fa:f0:6a:ac:cd:da:ba:63:49:
         de:ed:35:3f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NThBRjlBUjExMC8GA1UEBRMoODdDRjk5QTc1MDQxRDhBQTIwQTU5QTE4NDUwNUM3
ODAzMEU4RDg0RTAeFw0yNjAzMjYwNjA3MjRaFw0yNjAzMjgwNjA3MjRaMBgxFjAU
BgNVBAMTDTY5YzRjZDFkLTZkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClnVKAOGJaYqyq1+acJP/jPx2+z5v3cFH+ovDh2klhmCtD3EYZ9HoBnVFK
4FLFcsXhBmbXvQjYxyubLmfQvhz2c8b7tXcnXoM0nEA2L49JffcMLpoISoy9Irp8
3Ot4wT5nSJUFvijWM9nXPA7M5MgRVRXmfgVyLwV2FWtAlleih8XPbdLz+Eh0Oev9
nWVbrqt9rfXNfA9imJFafvGYNH5DISjFq5qDCmbkh1XRniXHUNj4HvIQb7O86sMA
W9hwwmDu9RItU0n5pYkUq2DDkYOX+XNYIt8Io77GK/qF45/TpTUdczKGIGgTc4CS
BbGHHPHBYHFZx6cSB+si6hBsa3y9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUltZw
rEi3alFTFdk2qAV93uIeCtEwHwYDVR0jBBgwFoAUh8+Zp1BB2KogpZoYRQXHgDDo
2E4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4QUY5LzcwOEZCNTBFNzgzNjExRjBBQTg1RENFM0RBRTRFQzlDL2g4LVpw
MUJCMktvZ3Bab1lSUVhIZ0REbzJFNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2g4LVpwMUJCMktvZ3Bab1lSUVhIZ0REbzJFNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NThBRjkvNzA4RkI1MEU3ODM2MTFGMEFBODVEQ0UzREFFNEVD
OUMvaDgtWnAxQkIyS29ncFpvWVJRWEhnRERvMkU0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBivlpigtf0Hg0Chp8cq39u1SA5qBmk6EGv
mOuhoLp8ANpFwWKX0Dvexb2sibySY8F9STi+Ao9PExIXSdb17h6gMbmnXc1cNePC
3MRYFA4gfE2TyH5j2Br5Lwp3GOeu8uMQkpwmOtUWY9l9rFuMvap7DQ92uSdPqS7m
gtWQtJeN/1oUtcIoSphsfPh5gKFw5ONjv/AYerHfjJ7vbzgDdCWBcUbdScpY73qF
+0RfVCwQMAwFzEGXCL/LOiUMyJp8rMt41e6jr38Q/ApKSQCPcQ3XZNSxyUSAuHWQ
fI27lHKRF1EsHJuPOtmSLbpu6G1fATzTAq/68Gqszdq6Y0ne7TU/
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:15 2026 by rpki-client