Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File:                     CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier:          sDNPMzR/ploW6B+EGC37LxMnOlrVpFjZ9Qf/3tUttzw=
Subject key identifier:   DA:41:53:6E:7D:BF:8C:99:67:23:3D:46:19:80:E0:5A:32:58:36:2D
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       0595
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number:          0546
Signing time:             Thu 26 Mar 2026 03:38:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:38:44 +0000
Manifest next update:     Sat 28 Mar 2026 03:38:44 +0000
Files and hashes:         1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: 5FteVIJCh4IgcRL6UDcx50zVhiHy5iF2C7lEIaP1ne4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Mar 26 03:38:44 2026 GMT
            Not After : Mar 28 03:38:44 2026 GMT
        Subject: CN=69c4aa45-8df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:29:95:11:2e:f0:05:35:49:10:39:40:0a:07:
                    9e:a4:05:b5:da:22:e6:50:40:f4:f5:d1:4c:74:d9:
                    e5:2b:fe:a3:af:35:26:dc:da:7b:b2:87:a0:b3:57:
                    16:ba:ca:a3:3c:42:aa:2e:43:04:fc:b3:75:9a:12:
                    53:c9:4d:2c:63:4d:1f:54:6f:d9:d9:76:8a:8c:8d:
                    12:cb:83:27:29:f9:e2:17:4b:f6:8c:a6:66:6e:d3:
                    d2:32:db:d9:8e:f6:fd:9c:15:4a:b4:27:77:1a:80:
                    a1:29:ac:07:02:2c:e5:68:10:c2:81:ae:35:ac:05:
                    23:ed:61:e9:f0:83:53:92:f4:e7:09:2d:ba:67:ec:
                    24:09:d0:2f:05:9e:c3:d0:16:47:4a:52:dd:18:05:
                    6f:5a:03:53:78:3d:0f:21:f9:b7:a8:f8:84:5e:2e:
                    3e:de:d7:a5:6a:f3:75:82:a9:06:6e:a1:c0:4d:9b:
                    ee:08:d8:5a:37:bc:79:8a:3e:b1:00:92:f5:94:7c:
                    4d:e0:f4:c9:8f:19:23:82:3e:8a:72:ac:94:f9:e1:
                    cc:23:1a:26:9a:2d:3d:28:81:c2:da:27:91:ca:3a:
                    9d:db:20:be:5b:08:18:7d:a6:58:72:50:80:2c:aa:
                    a8:d2:b5:ef:27:bd:70:12:df:74:87:67:31:bf:27:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:53:6E:7D:BF:8C:99:67:23:3D:46:19:80:E0:5A:32:58:36:2D
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:a1:a1:e7:cb:0b:4b:9a:38:e8:49:a9:78:1d:c0:15:3b:
         7e:ad:fa:61:89:93:28:be:53:63:ea:fa:e6:1c:f0:19:7c:73:
         29:91:79:cc:56:aa:24:9a:de:4c:7c:5a:4f:ec:8f:09:b9:8b:
         99:73:85:7b:7b:9f:76:ed:85:c3:45:9e:04:92:e5:8b:f8:5d:
         75:c6:07:21:2f:4f:99:f2:7c:ff:0a:a3:4a:7b:31:19:f8:f2:
         65:41:07:da:e6:2b:26:33:20:5e:42:24:1a:5d:f2:86:31:c4:
         4d:b9:e9:ee:21:69:43:bb:9b:04:62:22:aa:2c:1d:55:af:bd:
         b6:b8:5c:e6:d3:8b:1d:09:e6:70:29:aa:a2:10:c5:93:15:1f:
         79:03:53:98:3f:2f:3a:8d:49:e7:95:42:ee:be:97:0a:11:d4:
         ad:c1:06:88:2b:19:61:75:53:09:c7:89:32:a8:a9:0f:48:d8:
         f6:5c:e4:52:a5:24:a4:25:a2:1d:85:1b:c0:15:e6:90:02:c1:
         22:4b:e9:f4:e7:9d:68:d6:08:d1:e5:a6:12:c9:f2:6c:f4:11:
         1e:ca:32:93:ff:a3:90:98:6a:77:db:05:6e:3d:1c:0d:58:84:
         b7:01:a7:b1:f0:54:e6:cc:91:1e:84:68:91:a7:2f:fd:96:98:
         53:a0:b5:83
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjAzMjYwMzM4NDRaFw0yNjAzMjgwMzM4NDRaMBgxFjAU
BgNVBAMTDTY5YzRhYTQ1LThkZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD+KZURLvAFNUkQOUAKB56kBbXaIuZQQPT10Ux02eUr/qOvNSbc2nuyh6Cz
Vxa6yqM8QqouQwT8s3WaElPJTSxjTR9Ub9nZdoqMjRLLgycp+eIXS/aMpmZu09Iy
29mO9v2cFUq0J3cagKEprAcCLOVoEMKBrjWsBSPtYenwg1OS9OcJLbpn7CQJ0C8F
nsPQFkdKUt0YBW9aA1N4PQ8h+beo+IReLj7e16Vq83WCqQZuocBNm+4I2Fo3vHmK
PrEAkvWUfE3g9MmPGSOCPopyrJT54cwjGiaaLT0ogcLaJ5HKOp3bIL5bCBh9plhy
UIAsqqjSte8nvXAS33SHZzG/J4e1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2kFT
bn2/jJlnIz1GGYDgWjJYNi0wHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0
NjgvQ2ZzeE51elY0OWZQQUxNc0VoOFM2S19RcGdFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHO6Gh58sLS5o46EmpeB3AFTt+rfphiZMo
vlNj6vrmHPAZfHMpkXnMVqokmt5MfFpP7I8JuYuZc4V7e5927YXDRZ4EkuWL+F11
xgchL0+Z8nz/CqNKezEZ+PJlQQfa5ismMyBeQiQaXfKGMcRNuenuIWlDu5sEYiKq
LB1Vr722uFzm04sdCeZwKaqiEMWTFR95A1OYPy86jUnnlULuvpcKEdStwQaIKxlh
dVMJx4kyqKkPSNj2XORSpSSkJaIdhRvAFeaQAsEiS+n0551o1gjR5aYSyfJs9BEe
yjKT/6OQmGp32wVuPRwNWIS3Aaex8FTmzJEehGiRpy/9lphToLWD
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:23 2026 by rpki-client