Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          GEh7V2A72SU4A6E5AQXR5m4iIn12WvxjNPr216LWL3c=
Subject key identifier:   47:29:E8:83:51:1F:64:35:37:31:2C:4A:59:F9:52:61:F3:F7:79:6B
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       04DF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          04DB
Signing time:             Wed 13 May 2026 03:11:39 +0000
Manifest this update:     Wed 13 May 2026 03:11:38 +0000
Manifest next update:     Fri 15 May 2026 03:11:38 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: NCslPNDcDPYCZZd6VomoivxhUssQMYq5FiKytF12Myk=)
                          2: C8482A8890A511F09A249AC2DAE4EC9C.roa (hash: YU+s4UvMmcAg4MELqrvjtd9+g7rExQPJik+26Y7x314=)
                          3: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (hash: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=)
                          4: 407424D090A611F0A752BAC4DAE4EC9C.roa (hash: TH3/4mixLvf8p6rQJ/buDVDbyHxIQcv4IonGYryiTFc=)
                          5: A58DD09690A611F0BAABE5C8DAE4EC9C.roa (hash: WRkcJOJs2/U9E6K9MGQG8K0I2p0FY0LDJQ9GxZH1JLE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: May 13 03:11:38 2026 GMT
            Not After : May 15 03:11:38 2026 GMT
        Subject: CN=6a03ebeb-ce6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:54:3d:ef:80:11:76:d5:52:0f:0a:1f:92:
                    6a:19:2c:43:92:77:94:bb:f1:e0:5e:b2:99:83:26:
                    e7:fc:5e:d2:ca:e9:a3:fa:71:8e:cb:9b:e8:11:8c:
                    d4:12:1c:66:fc:ea:90:7d:fb:04:c6:3c:76:5c:c8:
                    a7:ac:48:7f:87:b6:68:e1:de:b2:b4:a0:2f:87:e5:
                    0d:78:61:c7:46:60:95:75:8b:fa:d5:f1:41:c6:22:
                    95:f7:21:2e:98:70:74:09:2c:7e:73:7b:c0:30:f3:
                    f9:0d:3e:0e:7a:e4:3a:49:ed:cf:19:0e:ca:7d:e3:
                    b1:02:79:da:10:ab:24:d4:ca:ac:be:f2:3d:a5:96:
                    1e:c4:af:46:89:1c:8d:48:24:83:57:40:cf:78:d2:
                    b2:a8:de:af:f1:81:04:34:b1:4c:79:48:c0:12:5f:
                    2a:34:5e:f0:54:66:41:5c:87:2f:05:6e:dc:b6:14:
                    38:26:db:1a:c2:ba:ad:70:0d:f7:62:03:28:67:53:
                    9a:e1:b0:86:e2:b4:52:38:a4:05:aa:26:d4:a4:b0:
                    8a:f3:0c:cf:1e:65:ad:df:8f:d8:ea:ac:fe:f8:e3:
                    ea:47:5e:a7:3b:bc:0e:51:fc:81:2e:49:5f:44:29:
                    9f:0a:1b:75:e9:0e:4a:65:92:b0:6b:8d:67:8c:e6:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:E8:83:51:1F:64:35:37:31:2C:4A:59:F9:52:61:F3:F7:79:6B
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:d6:59:35:ae:76:4a:48:fc:1c:0c:f8:09:08:16:93:29:
         9c:cb:2e:c9:51:c8:1d:53:5a:d0:d5:c3:29:15:a5:fa:a4:fe:
         c9:f7:e9:5d:84:55:0f:08:cd:4a:8a:8a:bb:3c:c7:ae:1c:b8:
         ca:87:9e:94:58:91:a2:7d:d1:06:a1:32:99:50:08:72:9b:7b:
         b0:ce:14:bf:c2:34:d3:6a:0a:5e:69:0e:0b:56:72:c8:40:c5:
         18:25:2b:f3:e2:96:9f:58:49:81:ba:86:ad:b0:bf:68:24:62:
         fb:76:2f:62:99:2d:39:96:05:3a:56:c7:ba:4f:d6:27:ee:36:
         e7:7f:73:45:16:da:69:9b:b6:4f:bc:5e:cb:35:57:0d:ae:dc:
         36:37:71:9a:c9:ce:76:e8:73:3c:da:77:f3:6b:02:28:31:f2:
         b7:3c:00:40:4e:1e:f9:ed:c0:c6:c0:eb:44:13:fe:e8:71:d1:
         c2:8c:d8:b0:a2:c7:2b:3c:68:39:81:96:a7:2b:55:31:09:3e:
         1b:15:85:9a:d0:89:bc:c2:a6:72:a7:d6:dd:49:8a:d3:a9:a3:
         7e:e4:02:f3:82:1e:bb:03:9d:a2:54:ba:e9:62:11:c9:60:36:
         31:4c:36:1c:fc:d6:5f:da:d1:80:e4:b8:c7:94:8b:c2:d7:3f:
         d1:60:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:23 2026 by rpki-client