Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          v3+9N98Q75Y4/8jKqNnPQRypXsH2FxY/bfECgU5oIg8=
Subject key identifier:   B2:9D:7D:12:11:67:6A:A1:39:C7:62:7D:BC:A1:6C:DE:61:2D:80:A6
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       0527
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          0523
Signing time:             Fri 24 Jul 2026 03:11:49 +0000
Manifest this update:     Fri 24 Jul 2026 03:11:48 +0000
Manifest next update:     Sun 26 Jul 2026 03:11:48 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: qujd76Wsgwn18bftMuxjK3L3ZXHqsEMfB09UnDhbec4=)
                          2: C8482A8890A511F09A249AC2DAE4EC9C.roa (hash: YU+s4UvMmcAg4MELqrvjtd9+g7rExQPJik+26Y7x314=)
                          3: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (hash: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=)
                          4: 407424D090A611F0A752BAC4DAE4EC9C.roa (hash: TH3/4mixLvf8p6rQJ/buDVDbyHxIQcv4IonGYryiTFc=)
                          5: A58DD09690A611F0BAABE5C8DAE4EC9C.roa (hash: WRkcJOJs2/U9E6K9MGQG8K0I2p0FY0LDJQ9GxZH1JLE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: Jul 24 03:11:48 2026 GMT
            Not After : Jul 26 03:11:48 2026 GMT
        Subject: CN=6a62d7f5-48f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:bd:da:5f:78:f9:8a:c2:95:7e:57:68:78:
                    58:45:ef:dd:f4:05:2a:01:08:bd:06:b1:73:c9:c4:
                    df:af:2c:81:2f:71:f6:a2:af:af:2c:4f:7b:27:58:
                    de:48:30:fa:27:ff:89:ea:7b:80:64:c4:1a:3e:15:
                    25:7c:af:24:01:d3:29:d1:16:e1:5c:0b:63:1c:37:
                    b1:2a:21:aa:d9:1f:36:16:23:a8:71:a9:5f:9c:ae:
                    ad:ba:f7:05:86:6d:d2:b6:48:f9:bc:d9:c5:21:6c:
                    0c:c6:b6:cf:8c:0d:1d:7d:ce:cc:2f:87:b8:5d:3e:
                    94:e4:fe:87:03:67:06:a0:56:03:a7:95:6e:ea:48:
                    c3:f1:a1:27:7c:39:cb:10:1e:79:8f:58:bf:c4:e6:
                    71:64:cc:42:ea:74:24:a5:9c:4b:7c:f6:b5:d7:e5:
                    eb:f4:a2:1a:7a:4e:59:3c:b1:9a:2c:21:d7:1d:fd:
                    f6:2a:b4:12:3f:43:3e:9d:91:80:84:91:1d:08:d6:
                    c7:42:82:f2:43:be:44:76:1e:e4:2e:86:eb:00:5d:
                    76:f7:a2:f3:50:04:94:fb:33:7f:89:a4:cb:1e:35:
                    50:8e:98:bd:6a:bb:d4:ab:18:c0:d4:05:7d:9e:e1:
                    6d:10:4e:e1:d9:73:34:95:64:ae:68:b4:ad:22:90:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9D:7D:12:11:67:6A:A1:39:C7:62:7D:BC:A1:6C:DE:61:2D:80:A6
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:40:ba:36:de:3f:8d:67:ce:d7:ee:88:3f:40:b1:01:69:b2:
         52:22:0b:79:35:b8:1b:26:63:49:5c:bf:a5:b6:c4:b1:f3:d9:
         57:80:b4:18:de:68:72:87:f9:bf:f6:45:b7:d3:b6:55:06:e8:
         d4:3f:b2:dc:a6:dd:48:d3:72:fe:1e:df:7e:4a:70:89:e5:9d:
         3e:19:37:3e:97:9e:dd:52:aa:67:40:8a:16:49:e0:13:fa:00:
         66:b6:88:df:d5:67:4a:d9:e1:79:fa:ee:3c:f1:d2:a7:82:59:
         a0:0d:c5:32:17:ad:36:f1:fe:6f:6c:2a:8f:39:6a:73:57:4b:
         a0:a1:9e:0c:03:26:62:dc:5e:2a:21:0f:43:64:ed:6c:33:45:
         df:d6:54:ad:bb:34:dc:fd:a6:3e:bf:fc:38:1d:5c:41:ea:b7:
         24:df:83:7c:20:09:e3:a7:6f:f8:42:c4:45:3d:62:93:69:76:
         41:4b:37:f2:15:84:ce:e4:5f:16:60:8f:41:ab:55:7c:96:32:
         28:08:0d:0a:1f:6f:9c:62:6e:d3:20:64:09:05:42:0d:6a:7f:
         e4:1d:50:0a:ff:04:58:1b:db:ce:db:5a:e4:34:c1:50:d2:77:
         43:40:a7:48:f6:94:fd:e9:82:cc:34:91:ed:2b:9a:10:14:58:
         5b:86:8f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:47 2026 by rpki-client