Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          6qppEQcr0zllmSeg5XmyW3kqeA8Y3HjdkV9hkOqcPIE=
Subject key identifier:   40:E4:6E:2B:28:E0:2B:92:0A:57:98:B4:5A:A2:7C:FE:9C:D3:6C:F6
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       0A18
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          0A17
Signing time:             Wed 13 May 2026 01:29:22 +0000
Manifest this update:     Wed 13 May 2026 01:29:21 +0000
Manifest next update:     Fri 15 May 2026 01:29:21 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: qEUH6HTFLlbf+p5mOzY2oV+QLNacSNPT67Q798jtVTk=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: May 13 01:29:21 2026 GMT
            Not After : May 15 01:29:21 2026 GMT
        Subject: CN=6a03d3f2-66a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:5c:4c:8b:13:1f:59:db:48:99:2d:e1:7a:
                    78:b8:1c:1f:3d:ed:00:c4:09:21:4e:0e:63:09:03:
                    1d:eb:ce:f3:bc:3b:76:59:bd:8c:83:c1:fe:3c:23:
                    77:ff:bb:01:84:21:72:72:c3:c4:11:b2:fc:60:4f:
                    9d:48:cd:f9:6c:da:0e:57:69:a8:74:f5:9a:8a:19:
                    1f:c1:a5:0e:a6:b3:64:e0:4c:c6:12:f0:13:8b:64:
                    f3:7e:75:9f:48:4d:9f:c2:06:c9:4d:2f:19:1b:c0:
                    ec:3e:28:d8:f6:ef:80:6e:2d:e9:60:d1:4c:1c:d7:
                    dc:da:f8:31:b8:92:c4:df:01:f6:98:1a:22:bc:21:
                    35:d8:b2:35:77:57:c0:03:e3:ec:f1:f7:5b:54:c4:
                    56:29:e5:29:9b:dd:9f:b7:cc:c5:a7:30:29:e4:83:
                    61:b0:af:81:3a:e4:7a:26:00:7b:45:74:1b:7e:0a:
                    7e:29:96:35:04:20:48:08:1d:96:69:1c:8b:00:c0:
                    0a:68:f7:a4:92:b3:3a:77:a1:ea:af:6a:6b:1c:77:
                    9c:a4:40:37:03:b5:c0:d7:a1:d9:be:0d:7e:a3:27:
                    7a:d4:e4:bb:6b:14:32:c2:03:07:09:3e:40:2f:b5:
                    ea:56:16:35:22:d6:86:12:4f:b9:1d:8d:b2:1e:98:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E4:6E:2B:28:E0:2B:92:0A:57:98:B4:5A:A2:7C:FE:9C:D3:6C:F6
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:a6:d2:90:5e:ec:dd:f2:1b:a2:b6:e3:96:6b:bd:bb:31:
         6a:12:2e:65:49:21:f8:56:db:d8:d5:bc:80:1a:98:c2:ba:8e:
         d1:d4:d5:12:b0:fa:cf:69:6e:c3:62:32:ed:6c:df:1a:4e:7e:
         f8:5b:78:e6:d2:25:ca:b3:67:1f:91:8c:34:a5:c0:bf:60:bb:
         0b:b0:59:08:0d:89:17:6b:6e:df:a4:ba:0e:91:44:a3:19:cf:
         92:bc:a2:72:b2:2c:f3:f2:04:18:8c:f4:9e:2c:c3:19:aa:cb:
         95:28:c9:64:d4:8e:a5:63:77:25:41:0c:73:b3:38:c1:ec:55:
         c5:2e:7e:43:96:6d:dc:a3:57:64:6d:d2:69:8e:92:c3:95:df:
         4e:d7:ac:9e:3d:8d:10:ea:30:ac:3c:f9:ac:85:20:ec:77:e9:
         2f:26:5f:47:c0:6d:09:bf:38:7f:80:a8:2e:1c:4c:de:c3:96:
         98:99:4d:1d:af:b2:af:e4:c7:05:46:ef:a3:68:a6:93:cc:90:
         e2:4c:15:c0:6d:f3:c2:f4:d6:94:60:12:db:b9:97:6b:45:fb:
         ca:0c:5a:af:7e:51:fc:e5:e6:35:33:e1:01:26:2d:67:9d:d6:
         7b:c6:3e:bf:36:6f:43:88:5e:7a:90:4f:4e:0d:a6:dd:fd:8c:
         3e:f3:fa:fd
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICChgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBUjExMC8GA1UEBRMoNUREMTlDNjdGMTNFNjNEN0FEQTFBRUFDOEI3N0FD
QzA2M0U5RTUxNDAeFw0yNjA1MTMwMTI5MjFaFw0yNjA1MTUwMTI5MjFaMBgxFjAU
BgNVBAMTDTZhMDNkM2YyLTY2YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRmFxMixMfWdtImS3heni4HB897QDECSFODmMJAx3rzvO8O3ZZvYyDwf48
I3f/uwGEIXJyw8QRsvxgT51Izfls2g5Xaah09ZqKGR/BpQ6ms2TgTMYS8BOLZPN+
dZ9ITZ/CBslNLxkbwOw+KNj274BuLelg0Uwc19za+DG4ksTfAfaYGiK8ITXYsjV3
V8AD4+zx91tUxFYp5Smb3Z+3zMWnMCnkg2Gwr4E65HomAHtFdBt+Cn4pljUEIEgI
HZZpHIsAwApo96SSszp3oeqvamscd5ykQDcDtcDXodm+DX6jJ3rU5LtrFDLCAwcJ
PkAvtepWFjUi1oYST7kdjbIemM3JAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUQORu
KyjgK5IKV5i0WqJ8/pzTbPYwHwYDVR0jBBgwFoAUXdGcZ/E+Y9etoa6si3eswGPp
5RQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0U4NDcwM0JDOTFFRDExRTlCMDlFNzQ3REY4QUVBMjI4L1hkR2Na
X0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hkR2NaX0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzk1QzQvRTg0NzAzQkM5MUVEMTFFOUIwOUU3NDdERjhBRUEy
MjgvWGRHY1pfRS1ZOWV0b2E2c2kzZXN3R1BwNVJRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7pqbSkF7s3fIborbjlmu9uzFqEi5lSSH4
VtvY1byAGpjCuo7R1NUSsPrPaW7DYjLtbN8aTn74W3jm0iXKs2cfkYw0pcC/YLsL
sFkIDYkXa27fpLoOkUSjGc+SvKJysizz8gQYjPSeLMMZqsuVKMlk1I6lY3clQQxz
szjB7FXFLn5Dlm3co1dkbdJpjpLDld9O16yePY0Q6jCsPPmshSDsd+kvJl9HwG0J
vzh/gKguHEzew5aYmU0dr7Kv5McFRu+jaKaTzJDiTBXAbfPC9NaUYBLbuZdrRfvK
DFqvflH85eY1M+EBJi1nndZ7xj6/Nm9DiF56kE9ODabd/Yw+8/r9
-----END CERTIFICATE-----
Generated at Wed May 13 09:06:52 2026 by rpki-client