Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File:                     KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier:          PLA2kKPcrrvchBHtGQFK588111Mvn1BVO9hYPLzAtvg=
Subject key identifier:   4F:22:A4:2A:74:26:11:CE:4A:CA:88:AD:88:CB:63:C0:4C:1B:A7:A6
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer:       /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial:       04BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number:          04B9
Signing time:             Wed 25 Mar 2026 03:40:44 +0000
Manifest this update:     Wed 25 Mar 2026 03:40:43 +0000
Manifest next update:     Fri 27 Mar 2026 03:40:43 +0000
Files and hashes:         1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: BOPaxDmMRSCMOPVWb+XyXZgGKeSXvKcyQtY38NcYCTs=)
                          2: DB993B728F4F11ED982ED088F1222468.roa (hash: zmof4qkrG67Fqj/AA24Lhy1I6eBvEWQSDaesv5Uqj2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                          rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 03:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
        Validity
            Not Before: Mar 25 03:40:43 2026 GMT
            Not After : Mar 27 03:40:43 2026 GMT
        Subject: CN=69c3593c-900f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:84:cb:24:6d:81:43:f6:4f:0d:90:97:4a:
                    3e:3c:f0:20:bd:76:c4:36:e1:ac:30:cb:23:c4:3d:
                    54:c8:5b:b8:fd:b7:5f:0a:37:b4:39:d1:c4:78:3e:
                    cd:b4:76:a4:15:42:7c:51:9f:28:c5:17:9d:5d:95:
                    1b:71:4c:31:bf:ee:e4:3f:9d:bc:5b:13:fb:bd:74:
                    d1:8b:3d:ec:0b:35:a7:60:6b:d8:4e:73:6b:cc:a2:
                    57:48:0b:ca:e6:c0:49:5a:c6:e1:d7:31:a5:78:a4:
                    4a:f6:74:0f:1b:7a:ff:4f:98:00:ab:c2:b5:44:c0:
                    ac:8b:24:dd:4e:55:83:c2:e5:5e:0f:20:fa:bf:e1:
                    d9:99:1b:91:b2:c0:d2:b4:7a:65:4f:8b:96:16:77:
                    7e:ff:68:fe:6a:5d:c1:4a:ba:41:ba:1e:97:57:f5:
                    c0:a8:09:f2:50:99:53:4c:e9:85:6a:b4:db:07:a6:
                    72:de:82:23:dd:c1:64:64:18:88:08:1e:d4:52:72:
                    95:8f:61:bc:a4:3b:52:06:2f:fb:aa:2f:af:b5:df:
                    ab:2f:0e:f3:39:46:e3:92:07:7e:ce:78:41:ef:5c:
                    d8:e3:26:1c:1e:71:70:ae:0f:14:f5:24:95:7f:51:
                    a0:ac:46:fe:d2:52:4b:1d:0c:ef:b0:ad:92:fe:10:
                    2b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:22:A4:2A:74:26:11:CE:4A:CA:88:AD:88:CB:63:C0:4C:1B:A7:A6
            X509v3 Authority Key Identifier:
                keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:22:5c:ee:87:63:eb:fe:1f:8c:68:e3:26:54:49:b7:05:
         4b:47:3b:04:fe:34:8c:64:83:fe:da:c1:ec:36:7b:c6:f8:6b:
         a3:5d:2b:dc:0d:12:95:23:53:00:c5:12:99:c1:40:18:e8:83:
         18:fa:1a:33:a9:41:98:c5:3b:fa:6e:f8:7c:3f:c2:28:00:07:
         68:d4:08:e3:60:93:3f:29:17:e4:d3:92:fc:6b:c9:ff:99:37:
         27:a1:c8:77:8f:ae:24:f7:b1:94:93:0e:71:eb:43:be:30:e9:
         d8:ec:1e:5c:6c:e8:f9:f5:18:3f:aa:41:4c:6b:55:ce:87:2b:
         75:2d:0c:fa:9f:84:c5:bf:3a:c5:62:69:ed:f1:0b:97:60:e2:
         9d:e3:db:e3:0c:d8:ee:ba:e6:85:38:6b:b9:a1:e4:b3:90:2e:
         fc:c5:1a:67:3d:1f:62:70:ee:2c:a6:0f:d9:82:16:e8:16:28:
         1d:6f:5e:c9:36:e5:1b:24:45:5a:1c:95:f4:73:b9:61:d5:07:
         46:d0:77:3e:4e:50:b2:af:e6:f2:e7:49:80:e0:ca:f3:16:83:
         d4:ac:85:18:1f:9b:de:ad:55:3c:5d:c4:85:2e:20:e6:de:3d:
         a5:5e:05:f6:41:21:1d:cf:e6:84:a1:ab:c9:fb:e6:7a:78:6f:
         2c:e5:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:15:48 2026 by rpki-client