Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          BnLzGwSOp6ZZzeVafSzp3k637wQp1MxptqqZuuJ3TdU=
Subject key identifier:   04:3B:19:8C:48:0C:0C:25:D2:69:03:0F:64:DC:C3:42:AD:D4:7E:12
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       08C8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          08C4
Signing time:             Tue 12 May 2026 01:47:41 +0000
Manifest this update:     Tue 12 May 2026 01:47:40 +0000
Manifest next update:     Thu 14 May 2026 01:47:40 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: L7PFpY5icy3M7Wu8oidQ4TKEpn259a7ibxmeW0bbo5w=)
                          2: AC4E8162494411EC8CA9436BD8A014CE.roa (hash: b3n4slgOS/MlasvqZ+C1CqSsBm6+jMSAotZwP76nH4w=)
                          3: 73CF35D0B0D611ECA0847BBD5A40D577.roa (hash: 5YOdoaN/nTrUVBHfwF7bO4BngZbRv1YMgLNCZWSSDi0=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: May 12 01:47:40 2026 GMT
            Not After : May 14 01:47:40 2026 GMT
        Subject: CN=6a0286bd-1f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:18:b6:4b:b6:e5:8d:22:71:f5:01:0c:19:
                    6b:47:b6:db:b4:00:3a:ad:a7:a5:5a:d3:aa:a7:2b:
                    14:2d:ec:9f:0f:b1:2f:af:8a:b1:be:1a:2e:b0:f9:
                    fa:14:eb:53:8d:ec:a9:b0:71:d0:10:8b:e7:2c:87:
                    6b:e9:2e:03:b0:b7:42:bf:67:59:72:e0:6f:e4:ed:
                    6b:30:8f:91:04:d4:83:bd:c3:db:8c:24:04:cf:f3:
                    8e:38:1a:e1:63:8a:cc:b9:9d:f8:8a:b8:4f:8d:ea:
                    a7:c8:be:a0:cd:a0:da:f8:45:a4:eb:d3:96:75:6e:
                    a6:d3:17:c9:38:11:f9:36:ef:06:38:6b:1a:41:bb:
                    76:81:09:c9:08:87:a2:24:61:f4:af:6c:0f:9d:7e:
                    60:f2:8a:63:e9:ba:e3:9b:c2:73:ad:fa:21:9a:70:
                    ef:3f:9e:08:c0:f2:65:6d:21:de:99:60:7e:ef:eb:
                    c4:fd:4a:7f:6a:ec:c4:e4:fd:19:96:91:12:15:b1:
                    db:69:ab:7e:79:3b:1f:2d:12:90:0c:9c:30:66:13:
                    79:9c:80:23:1d:c5:8f:ca:a0:98:0c:a1:90:f8:ff:
                    9a:da:51:c3:36:86:e6:d2:7f:83:f3:d9:c0:5e:92:
                    ef:da:4b:46:a0:2a:8c:4a:dd:b3:e1:db:1a:ca:7e:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:19:8C:48:0C:0C:25:D2:69:03:0F:64:DC:C3:42:AD:D4:7E:12
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c5:b8:3f:51:2b:6d:1a:e3:62:21:5d:2c:ff:91:a9:52:27:
         dd:34:ff:03:7e:7f:61:3b:89:fb:4e:18:4f:a3:4a:6f:a8:33:
         bb:12:9f:f3:61:5d:17:13:da:d9:e5:1d:ed:ac:25:39:cd:93:
         8e:16:12:ae:7e:f9:25:44:fb:82:47:c4:66:83:b5:34:25:e4:
         06:d8:2c:0b:ba:d5:3d:c1:2b:b2:66:ca:bc:08:44:dc:93:3d:
         3a:62:4e:32:dc:03:5f:d7:c7:76:57:5c:a9:47:01:9c:07:29:
         ef:bf:67:9d:da:d4:7d:57:f6:5a:59:7c:37:66:c1:a5:04:95:
         00:49:b6:b3:92:86:44:69:cb:7f:2f:99:e2:e1:86:71:54:82:
         6e:d2:25:6d:a8:5c:4d:9f:7a:55:5e:24:b4:9c:2c:21:54:ea:
         8c:7d:ba:98:ac:20:29:11:c9:a9:3a:fa:57:36:d9:c0:0d:93:
         29:46:88:63:8d:da:e7:48:65:96:35:24:d6:6d:a2:d2:3d:b2:
         87:31:96:e2:0f:7a:ed:bb:38:ec:2f:26:9a:71:b3:0a:fd:38:
         f2:00:1a:c3:23:4a:0f:a4:e8:7a:51:db:7c:2c:5d:8c:74:20:
         21:b7:5a:b8:6f:47:89:ef:10:f0:a4:a6:8c:d2:74:ce:3c:6e:
         30:7c:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:51 2026 by rpki-client