Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          blFGCBW7AkDYlUaK7G0tS75m1S1mGIv21Jo8qW4cG98=
Subject key identifier:   36:6D:2C:BD:00:96:06:B8:88:23:66:53:07:1A:0D:CD:A4:98:38:19
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       04AE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          04AA
Signing time:             Thu 26 Mar 2026 03:46:30 +0000
Manifest this update:     Thu 26 Mar 2026 03:46:29 +0000
Manifest next update:     Sat 28 Mar 2026 03:46:29 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: 1Na1bJeFZLA8Kho/06OeJy7mbu1SG3uzfHnkFPUWTkk=)
                          2: C8482A8890A511F09A249AC2DAE4EC9C.roa (hash: YU+s4UvMmcAg4MELqrvjtd9+g7rExQPJik+26Y7x314=)
                          3: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (hash: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=)
                          4: 407424D090A611F0A752BAC4DAE4EC9C.roa (hash: TH3/4mixLvf8p6rQJ/buDVDbyHxIQcv4IonGYryiTFc=)
                          5: A58DD09690A611F0BAABE5C8DAE4EC9C.roa (hash: WRkcJOJs2/U9E6K9MGQG8K0I2p0FY0LDJQ9GxZH1JLE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198 (0x4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: Mar 26 03:46:29 2026 GMT
            Not After : Mar 28 03:46:29 2026 GMT
        Subject: CN=69c4ac16-dd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:87:5f:70:c6:13:ed:12:ec:8b:c3:0c:06:
                    81:62:62:6e:47:9a:9b:39:a1:fa:43:e9:be:9e:ff:
                    89:68:ad:20:36:5b:9a:5f:46:eb:c3:7e:b1:20:10:
                    71:01:32:39:52:d7:92:c1:33:2a:04:84:fb:36:fc:
                    84:24:c3:5b:2e:b0:67:9c:ae:35:81:da:3f:d5:12:
                    f7:86:d2:07:e3:9e:c5:ba:61:3f:c9:b5:0f:0c:f1:
                    2e:c5:a5:50:a1:09:57:3f:81:5e:cc:32:ff:0b:cc:
                    c9:06:b1:cd:c7:e2:10:38:61:25:5d:55:ba:e8:d2:
                    2b:0b:bf:49:97:b7:9c:5d:26:13:f5:e4:13:b3:d3:
                    77:70:73:e3:f2:65:2a:cb:ce:56:68:3b:8a:57:fd:
                    73:9d:3f:42:02:d8:bd:57:b4:f0:64:b1:36:5f:75:
                    3d:27:48:1a:9e:13:e9:b3:8d:3e:b6:11:5b:01:e5:
                    5b:8e:6f:a2:55:03:3e:79:e9:34:fb:0d:60:78:36:
                    27:17:f2:b6:da:0a:da:07:21:09:fd:57:ff:02:73:
                    26:35:eb:b0:84:ea:e8:7d:f1:21:25:07:66:0c:c9:
                    9f:7f:79:83:42:c8:6c:b8:36:8d:f8:f2:74:04:c8:
                    87:7b:6e:dc:8b:70:28:17:e2:53:9e:70:16:f6:c2:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:2C:BD:00:96:06:B8:88:23:66:53:07:1A:0D:CD:A4:98:38:19
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:01:19:b2:21:c9:eb:1d:5c:65:88:88:e9:6a:68:56:cc:e2:
         18:67:cf:66:2c:b4:3a:2e:79:cb:02:e7:af:fd:6d:d1:d2:17:
         84:c6:ed:d2:e2:5b:c8:7c:c5:17:c8:d1:52:7f:77:97:ba:60:
         84:b7:3a:db:ad:89:de:d3:4c:3a:b2:36:07:69:79:dd:c5:5c:
         77:51:21:a4:a4:0b:15:f6:b1:f2:88:ef:73:6d:65:c0:de:4b:
         f8:b3:94:d6:1d:e1:5e:38:f4:37:1c:ce:01:f6:fe:7d:c7:e2:
         bb:96:f0:4d:37:65:c7:7b:85:e8:7b:97:a0:27:4d:a5:6a:52:
         f3:87:f6:1f:43:d3:38:d6:0b:d1:82:41:0e:35:7c:93:fd:e8:
         d4:1c:ab:7e:5e:30:8b:23:7b:90:52:1e:e4:68:fa:42:75:10:
         e9:8b:9f:09:cb:ba:0e:da:fd:6e:33:b1:09:6b:af:d5:0e:54:
         b4:2f:b1:ee:2d:86:f4:9e:3a:7f:f5:f5:20:d7:35:e4:d1:de:
         c3:33:15:00:53:df:4b:08:a9:db:75:ec:89:83:b9:02:4a:4e:
         06:22:11:25:e2:c1:0f:43:1e:75:dc:2a:b8:12:4b:63:91:57:
         ae:a9:19:48:e8:27:4c:4e:6e:a1:2c:4d:9b:07:14:05:78:a9:
         3e:b6:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:22 2026 by rpki-client