Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          9fTuGvFuf3W8IpX6NFTvdpO8sRzI1Fp5k0ZSdBDfG/M=
Subject key identifier:   D1:6C:BA:11:62:29:98:EB:82:42:45:67:21:69:B0:5F:BA:60:F6:B5
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       0451
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          0450
Signing time:             Fri 24 Jul 2026 03:37:07 +0000
Manifest this update:     Fri 24 Jul 2026 03:37:07 +0000
Manifest next update:     Sun 26 Jul 2026 03:37:07 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: b3qZFGXZR0d5abDJFGYDOxUT/W2EiVdZ3KEizOA5rtk=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Jul 24 03:37:07 2026 GMT
            Not After : Jul 26 03:37:07 2026 GMT
        Subject: CN=6a62dde3-24eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:e8:69:6b:7d:2c:1c:82:8f:65:0e:40:80:
                    64:25:88:e3:50:ed:82:71:66:5a:b7:2c:08:b7:cc:
                    19:e0:c3:f3:41:b5:2b:b8:e3:f5:a9:05:77:91:12:
                    68:52:e6:30:fc:82:bd:59:e9:7d:f2:8e:dc:50:98:
                    97:3d:5a:27:45:7b:4e:c6:8a:2e:13:44:77:e0:b0:
                    91:c6:be:2a:fe:9d:d3:88:f2:26:29:39:f3:ac:f9:
                    38:dc:04:48:8d:b9:51:b4:82:60:41:cb:6d:cc:8e:
                    f3:c1:0b:c2:13:f2:65:8a:75:87:19:d5:23:4c:76:
                    bc:aa:3c:1d:2b:c8:ad:77:ed:0d:14:e5:67:4a:49:
                    0f:f8:ca:fe:ef:0d:b9:1b:b1:70:ea:0d:2a:70:be:
                    e0:96:9c:7e:b2:5e:c1:e7:7f:38:e6:b4:b6:73:25:
                    3e:2e:e5:db:b3:35:c1:90:ce:74:a0:bb:d4:f0:9d:
                    e0:e9:6c:cf:fe:9f:d3:fd:d1:38:c9:fa:01:22:16:
                    3e:05:7e:bd:da:68:4a:68:85:ab:e2:8e:66:9e:95:
                    82:d0:f9:78:d9:9e:3f:07:ea:64:80:dd:b2:7c:51:
                    f6:43:fb:93:7d:82:34:af:04:0c:2b:51:e4:7f:6d:
                    c2:10:e1:70:f6:51:67:84:f1:38:32:81:5b:74:18:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6C:BA:11:62:29:98:EB:82:42:45:67:21:69:B0:5F:BA:60:F6:B5
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:e4:8e:30:85:a2:90:46:f7:25:c2:f9:36:df:49:83:36:
         b3:6a:c8:6c:57:f4:09:35:31:3f:e5:fc:5e:d3:6e:3f:c5:4a:
         e2:28:a5:4f:19:91:69:f1:2f:ef:69:5e:16:f6:aa:e4:26:c3:
         ac:ca:d1:47:c0:0f:0e:48:9e:cd:1f:61:18:7d:2d:f8:4d:23:
         4e:b0:02:88:78:1d:43:2d:3f:50:12:f8:e3:64:c5:30:3f:30:
         f6:0e:84:4b:00:6d:ec:6e:eb:bd:9f:39:cd:0e:2a:3a:6e:ab:
         5a:4b:ac:46:31:cd:64:c0:d3:e7:d6:9a:cd:72:e5:81:0c:9d:
         b0:ba:43:c0:8e:d8:e5:af:ab:3f:ee:d9:64:ad:f0:fe:29:7e:
         95:7f:0c:75:f7:02:f8:53:bf:5b:99:0a:43:9e:a3:66:44:99:
         99:bb:1a:80:c2:ac:b7:d5:20:85:f7:18:c8:b0:a8:ab:6c:d1:
         76:1f:37:7c:1c:08:cd:9f:dd:4d:46:37:13:7c:f8:75:a6:09:
         ea:a4:ec:bf:cb:6c:5a:e6:94:f1:ae:ba:a4:71:83:a9:f3:e0:
         ef:0b:cc:09:39:5e:6b:07:92:1b:f1:f7:d6:67:ec:e0:89:44:
         f4:ad:3a:7c:17:54:aa:94:a8:f0:3b:1b:40:a0:e0:55:fa:15:
         55:b5:fa:40
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNjA3MjQwMzM3MDdaFw0yNjA3MjYwMzM3MDdaMBgxFjAU
BgNVBAMTDTZhNjJkZGUzLTI0ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0zOhpa30sHIKPZQ5AgGQliONQ7YJxZlq3LAi3zBngw/NBtSu44/WpBXeR
EmhS5jD8gr1Z6X3yjtxQmJc9WidFe07Gii4TRHfgsJHGvir+ndOI8iYpOfOs+Tjc
BEiNuVG0gmBBy23MjvPBC8IT8mWKdYcZ1SNMdryqPB0ryK137Q0U5WdKSQ/4yv7v
DbkbsXDqDSpwvuCWnH6yXsHnfzjmtLZzJT4u5duzNcGQznSgu9TwneDpbM/+n9P9
0TjJ+gEiFj4Ffr3aaEpohavijmaelYLQ+XjZnj8H6mSA3bJ8UfZD+5N9gjSvBAwr
UeR/bcIQ4XD2UWeE8TgygVt0GBgTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU0Wy6
EWIpmOuCQkVnIWmwX7pg9rUwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdceSOMIWikEb3JcL5Nt9JgzazashsV/QJ
NTE/5fxe024/xUriKKVPGZFp8S/vaV4W9qrkJsOsytFHwA8OSJ7NH2EYfS34TSNO
sAKIeB1DLT9QEvjjZMUwPzD2DoRLAG3sbuu9nznNDio6bqtaS6xGMc1kwNPn1prN
cuWBDJ2wukPAjtjlr6s/7tlkrfD+KX6Vfwx19wL4U79bmQpDnqNmRJmZuxqAwqy3
1SCF9xjIsKirbNF2Hzd8HAjNn91NRjcTfPh1pgnqpOy/y2xa5pTxrrqkcYOp8+Dv
C8wJOV5rB5Ib8ffWZ+zgiUT0rTp8F1SqlKjwOxtAoOBV+hVVtfpA
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:44 2026 by rpki-client