Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          0UpNQU3CbrxkO8lXDks6dMqgxjAedgSsGqhbch2MC2o=
Subject key identifier:   BD:97:68:E4:95:BB:65:CB:24:5C:D1:47:3B:5F:67:A6:D1:70:F8:1F
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       0655
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          0650
Signing time:             Wed 13 May 2026 02:35:01 +0000
Manifest this update:     Wed 13 May 2026 02:35:00 +0000
Manifest next update:     Fri 15 May 2026 02:35:00 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: z4GrVpifzz5P+PN5pDqeiH46ev20PnINHczasodoz9Q=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: May 13 02:35:00 2026 GMT
            Not After : May 15 02:35:00 2026 GMT
        Subject: CN=6a03e355-1725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ed:ee:e7:21:57:3a:0c:d6:c6:cf:42:64:97:
                    05:f4:41:12:80:c7:c1:c4:d2:67:4a:c4:fb:6d:d4:
                    79:ce:1e:16:ce:be:b0:80:3b:de:2f:2d:0a:10:d6:
                    9f:5f:5a:f6:27:aa:5d:7a:10:ef:84:43:a6:41:e9:
                    fe:92:d0:fa:c8:7d:64:2f:c9:01:88:25:1a:3c:df:
                    f9:fa:f7:80:ac:10:b9:de:1f:27:23:d6:9a:33:72:
                    b3:04:b5:90:bd:f2:a1:a3:39:d6:3c:e6:a1:1d:fb:
                    02:95:fa:20:de:d1:48:df:2e:7c:e9:8f:b5:32:2b:
                    e4:a1:6a:1c:ac:2e:28:09:48:63:3d:a4:59:41:b9:
                    93:cd:42:8b:65:33:5b:79:00:95:49:6e:d8:d5:e8:
                    b7:09:20:25:fd:cf:c0:38:f1:e2:5c:94:f0:02:8c:
                    ba:3f:c7:78:dd:b6:39:ed:3b:08:3e:7c:b6:23:6c:
                    2a:fd:f3:ce:dc:e3:6a:11:91:6c:f8:bf:d5:b8:b1:
                    e6:4d:59:5e:e2:f7:22:12:19:2c:30:bf:39:99:2a:
                    cf:10:de:89:ba:86:67:03:ca:b0:7e:1f:a9:42:ca:
                    e3:ea:5c:3a:3a:6f:00:bd:9a:dc:38:45:29:e6:fd:
                    7c:b3:55:36:5e:8f:76:be:e4:b6:96:72:33:51:08:
                    19:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:97:68:E4:95:BB:65:CB:24:5C:D1:47:3B:5F:67:A6:D1:70:F8:1F
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:80:26:20:6f:b0:f7:50:55:2c:ef:a3:3c:42:4f:ea:04:96:
         fb:dc:a1:48:5f:4c:1e:bc:ba:24:d1:f0:32:56:17:ab:88:63:
         7f:29:41:2f:24:71:fa:a7:f3:18:6f:40:68:95:21:0e:43:f8:
         64:d3:ff:c1:e3:62:54:d9:28:b7:ef:4b:db:72:2e:10:f1:40:
         69:bf:41:72:35:6b:cf:27:87:54:19:75:ac:12:7d:98:e2:8b:
         60:95:a2:98:0c:af:01:8e:b4:e2:1e:53:84:d9:70:81:ed:fa:
         01:28:0b:45:5e:3d:15:26:69:d8:8d:46:1e:73:82:db:a4:db:
         a7:4e:9e:60:8a:56:99:df:ae:6f:eb:92:6c:45:b4:34:a3:1c:
         86:7a:7a:c5:7d:bd:89:41:e6:82:98:d2:46:99:9c:31:42:2d:
         71:1d:5e:42:d8:ac:e3:f4:ac:fd:2c:b4:86:4d:99:33:59:11:
         bd:53:d4:39:15:b3:25:08:c3:d6:7f:8a:00:ee:ab:3b:73:ac:
         92:2c:08:1d:1c:b5:59:1d:c8:15:de:fd:08:5f:e9:76:1a:74:
         73:e6:82:9d:8d:22:c7:3b:78:c5:46:fb:2c:dd:2e:3e:c7:7f:
         fe:63:8d:7e:90:87:7d:f1:02:be:94:c6:94:02:68:ab:16:24:
         26:65:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:27:45 2026 by rpki-client