Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          2k2F1U1w8aAdV6hAwIN7iPt+vhpTkEAQuct9KZ2eryY=
Subject key identifier:   78:04:68:EB:CB:C9:B8:5E:2A:3D:23:C5:E4:0A:D4:9D:5D:F3:BA:99
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       02DF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          02DE
Signing time:             Thu 26 Mar 2026 04:53:31 +0000
Manifest this update:     Thu 26 Mar 2026 04:53:30 +0000
Manifest next update:     Sat 28 Mar 2026 04:53:30 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: P+fWZXOV4uDubhwHd8OFxwliAcfFZ/wwPp2Hxx5N/1k=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Mar 26 04:53:30 2026 GMT
            Not After : Mar 28 04:53:30 2026 GMT
        Subject: CN=69c4bbcb-f9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:e7:52:c8:d7:d5:ff:dd:1f:94:4b:5c:41:
                    e0:c3:07:97:67:8e:49:59:0b:67:1a:ce:18:8e:99:
                    15:b7:16:e0:d2:18:f5:f1:06:fa:53:d5:e0:da:21:
                    fd:92:b4:5b:9e:2c:cd:7e:8c:a4:6c:0e:6f:a9:0f:
                    1e:17:90:3d:3d:a2:a2:47:2f:04:c1:9f:0e:8d:07:
                    93:30:f4:12:88:52:78:c4:95:c7:9e:b0:78:09:b8:
                    5b:4e:c3:73:8a:e8:40:f3:f0:5c:ef:30:34:f5:22:
                    26:ab:f7:89:ba:09:a1:ed:29:9e:f8:45:92:1c:7d:
                    c0:43:66:4e:3c:1f:af:2e:9a:cd:a2:40:91:93:59:
                    38:88:f9:43:de:74:bc:41:16:13:67:80:25:eb:72:
                    b1:8e:25:6d:ac:aa:79:95:df:95:2d:8f:f3:9e:37:
                    be:f7:5e:f9:48:3d:85:16:c6:5d:2b:91:73:6c:d2:
                    ae:4b:cb:4b:9a:32:e3:f4:28:cf:60:26:9b:d5:b9:
                    ed:0b:26:6f:c6:6b:bf:9a:47:0b:12:27:4b:cc:92:
                    15:e2:0c:86:9a:04:da:a8:ed:f3:92:f5:a3:fb:8d:
                    31:9c:dc:99:07:aa:96:6f:7d:95:d0:6e:bf:a9:d1:
                    c2:a0:06:cd:1b:8c:c4:2d:09:e7:f6:7a:b7:75:d8:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:04:68:EB:CB:C9:B8:5E:2A:3D:23:C5:E4:0A:D4:9D:5D:F3:BA:99
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:ef:f7:dc:e6:1f:88:b0:04:33:f7:25:3c:1c:a4:8b:c6:
         e5:11:e4:eb:fe:5b:5d:51:65:c5:2a:c8:97:4d:16:c1:d4:73:
         04:4a:87:61:61:cd:71:61:b7:49:df:3a:9e:69:a6:48:41:a1:
         4a:c9:cd:b0:3c:f0:9c:e2:3f:bf:80:80:7e:10:af:6b:b7:43:
         ea:bd:ce:6a:c0:c5:e6:b2:9d:59:d7:f9:56:39:12:40:6a:e7:
         79:d0:29:68:39:cf:c8:45:18:50:67:4e:23:33:b2:54:10:ad:
         73:8b:31:3b:45:b7:d9:e4:53:53:66:bc:4e:04:df:60:69:b0:
         b8:9b:8d:9d:e6:46:db:b3:25:7e:fa:bf:b0:34:ad:9a:2a:9b:
         a6:7b:1b:f1:d8:01:f0:01:d2:94:b8:c0:e4:dc:a9:f1:0c:10:
         2a:7f:1c:2f:67:6f:10:2f:a9:83:b4:5a:22:48:f3:99:67:6c:
         c7:81:ba:c4:9e:2d:7f:72:77:83:42:23:cf:3e:9c:b9:4c:46:
         4a:25:5a:86:ab:f5:bc:cf:4b:83:38:2e:57:c3:aa:37:e8:ce:
         c6:aa:3e:02:f5:d5:0d:15:72:95:b8:c1:d0:3b:f5:38:78:2f:
         dc:e7:b4:5d:d7:86:39:bb:b8:59:eb:57:74:a8:5c:f5:91:e6:
         75:73:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:31 2026 by rpki-client