Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          IVxzzwBjEpV8d8DdWOdqDfwFoA+33bSnG4oMoqg4+lc=
Subject key identifier:   E4:87:DD:F3:65:E0:54:A3:8A:7B:91:9C:1E:BC:02:BE:3A:98:3F:68
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       05D8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          05D6
Signing time:             Thu 23 Jul 2026 02:53:20 +0000
Manifest this update:     Thu 23 Jul 2026 02:53:19 +0000
Manifest next update:     Sat 25 Jul 2026 02:53:19 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: BEkBcgNGaLe3Ohku1QKGSo7N6rX8eaQpU+x6w84k+qw=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 02:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Jul 23 02:53:19 2026 GMT
            Not After : Jul 25 02:53:19 2026 GMT
        Subject: CN=6a618220-4a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:5a:8e:fe:b9:62:e6:50:7a:98:b0:e2:12:
                    96:6b:fb:ff:8c:c8:05:cf:6c:a5:c9:02:4e:d9:a1:
                    3c:c5:cf:53:2c:ca:7f:93:40:ad:e1:2e:de:ee:2c:
                    62:ee:17:d8:32:75:f8:1b:5f:7f:ca:9f:8c:73:32:
                    92:6d:29:c7:95:d4:d9:f2:b7:de:d7:18:f5:36:cc:
                    c1:37:54:9b:a4:ee:d5:6e:da:06:dd:ec:f1:68:c6:
                    98:b8:cd:45:35:2d:ad:b9:ee:ad:ea:9d:24:5d:8f:
                    a4:06:f5:fe:ab:c1:7c:ec:e4:d3:c9:57:48:ca:b2:
                    89:4f:4f:06:03:27:d9:96:ae:e0:5a:f1:ef:96:90:
                    d5:32:fb:6e:58:1d:9c:4d:af:18:2d:c0:23:a4:82:
                    dd:d9:01:bf:06:cb:f0:93:de:29:b6:95:a6:1a:c4:
                    b5:2b:6c:e0:12:09:a0:1a:fd:4e:08:4c:f4:0c:10:
                    6d:7a:48:ab:86:fd:72:d6:ee:9c:3c:48:4b:7b:6f:
                    9f:d2:ce:87:b6:2d:c9:db:88:66:11:e3:6f:fd:9c:
                    c0:92:15:f4:0e:47:b6:d0:90:fc:55:5d:e6:f8:f8:
                    fa:c5:37:25:6c:2c:d4:a1:ce:91:ff:5d:3e:8b:69:
                    74:6b:04:c2:32:b8:58:0e:8b:7f:e5:9e:be:9e:4c:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:87:DD:F3:65:E0:54:A3:8A:7B:91:9C:1E:BC:02:BE:3A:98:3F:68
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:c2:9d:b9:b2:5b:42:50:ce:75:5a:3c:34:93:cc:6a:4f:
         00:03:7b:00:08:97:08:82:31:ed:fb:49:07:47:81:46:9d:a9:
         e0:84:2d:6f:91:e9:47:70:bc:bb:ec:7c:78:d7:99:26:4e:7b:
         ac:11:98:a0:a8:81:1f:21:9e:84:a6:c9:d0:89:22:d6:0e:27:
         45:34:33:21:21:b1:3d:6d:7a:31:65:94:27:71:fc:95:ee:5b:
         0c:82:08:d3:ab:3f:36:8f:c1:8d:c0:bd:ac:90:8c:ed:53:a3:
         f7:88:10:16:2b:3d:fe:8d:52:9a:1d:b3:e3:6c:07:59:06:d1:
         bf:0b:3c:5c:4c:c7:11:ac:4b:5c:b6:05:0a:6e:52:b4:25:50:
         fb:06:be:75:33:5c:44:eb:f5:16:2c:79:e5:f3:6d:17:41:0f:
         71:07:ab:b0:c1:f1:a5:76:5f:10:e2:d3:15:6d:fc:21:4b:24:
         39:f3:fc:2e:4d:b5:3c:ea:d5:1a:8c:03:5d:30:1d:7f:a0:a3:
         da:40:27:cc:f6:f4:79:8c:9b:44:d9:ae:e5:63:4b:73:81:cd:
         ea:5f:8c:62:94:8d:02:eb:28:d1:92:fe:59:85:21:c3:a7:21:
         7f:e0:6a:09:6e:07:b1:da:c5:fe:0e:91:c3:6d:6c:17:dd:0b:
         b7:c8:18:4a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzFEQkRBUjExMC8GA1UEBRMoQzgzREM2OENFMkJFNDMyNTNBQUE1NTFBQUUyMkY5
NUExRjFEQUQyQjAeFw0yNjA3MjMwMjUzMTlaFw0yNjA3MjUwMjUzMTlaMBgxFjAU
BgNVBAMTDTZhNjE4MjIwLTRhMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8MFqO/rli5lB6mLDiEpZr+/+MyAXPbKXJAk7ZoTzFz1Msyn+TQK3hLt7u
LGLuF9gydfgbX3/Kn4xzMpJtKceV1Nnyt97XGPU2zME3VJuk7tVu2gbd7PFoxpi4
zUU1La257q3qnSRdj6QG9f6rwXzs5NPJV0jKsolPTwYDJ9mWruBa8e+WkNUy+25Y
HZxNrxgtwCOkgt3ZAb8Gy/CT3im2laYaxLUrbOASCaAa/U4ITPQMEG16SKuG/XLW
7pw8SEt7b5/Szoe2LcnbiGYR42/9nMCSFfQOR7bQkPxVXeb4+PrFNyVsLNShzpH/
XT6LaXRrBMIyuFgOi3/lnr6eTHm9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU5Ifd
82XgVKOKe5GcHrwCvjqYP2gwHwYDVR0jBBgwFoAUyD3GjOK+QyU6qlUariL5Wh8d
rSswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcxREJELzNFRTEwMkRFMTI0NDExRUQ5RjYyNjhCNEYxMjIyNDY4L3lEM0dq
T0stUXlVNnFsVWFyaUw1V2g4ZHJTcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3lEM0dqT0stUXlVNnFsVWFyaUw1V2g4ZHJTcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzFEQkQvM0VFMTAyREUxMjQ0MTFFRDlGNjI2OEI0RjEyMjI0
NjgveUQzR2pPSy1ReVU2cWxVYXJpTDVXaDhkclNzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYbMKdubJbQlDOdVo8NJPMak8AA3sACJcI
gjHt+0kHR4FGnanghC1vkelHcLy77Hx415kmTnusEZigqIEfIZ6EpsnQiSLWDidF
NDMhIbE9bXoxZZQncfyV7lsMggjTqz82j8GNwL2skIztU6P3iBAWKz3+jVKaHbPj
bAdZBtG/CzxcTMcRrEtctgUKblK0JVD7Br51M1xE6/UWLHnl820XQQ9xB6uwwfGl
dl8Q4tMVbfwhSyQ58/wuTbU86tUajANdMB1/oKPaQCfM9vR5jJtE2a7lY0tzgc3q
X4xilI0C6yjRkv5ZhSHDpyF/4GoJbgex2sX+DpHDbWwX3Qu3yBhK
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:24 2026 by rpki-client