Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
File:                     Td968BKKMqOhd1sfz6DvOMh_03w.mft (raw, json)
Hash identifier:          HVcFQ+7kjARNiNIN1t4PZKp/cZW7RvRm5YadA2/1a7U=
Subject key identifier:   FB:65:AD:77:DD:7F:B6:E3:17:1E:01:D8:9B:E4:EE:DF:EC:3D:B7:49
Authority key identifier: 4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C
Certificate issuer:       /CN=F367C1FCAR/serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
Certificate serial:       0875
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
Manifest number:          0870
Signing time:             Thu 26 Mar 2026 02:05:21 +0000
Manifest this update:     Thu 26 Mar 2026 02:05:20 +0000
Manifest next update:     Sat 28 Mar 2026 02:05:20 +0000
Files and hashes:         1: Td968BKKMqOhd1sfz6DvOMh_03w.crl (hash: iwxAKD4OlkQmpHboGf8tMV/scB3vz2K59WOZEoVjE0E=)
                          2: E364072A015811EF9D73985D017001B1.roa (hash: mrOGweCwxtK60LtiqTq1XQPp9m+p+JqVU6IY5+6yR+M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
                          rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C1FCAR, serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
        Validity
            Not Before: Mar 26 02:05:20 2026 GMT
            Not After : Mar 28 02:05:20 2026 GMT
        Subject: CN=69c49461-ee78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:a8:77:51:d9:b4:ed:ca:7f:41:6d:a6:b6:
                    3f:54:fa:70:99:b8:22:b3:32:fc:a6:6c:4a:cb:e0:
                    6f:f4:5c:4b:b9:2c:88:32:c7:f9:85:52:27:07:dc:
                    78:e3:57:70:33:26:c1:3d:b9:0e:a4:4e:af:66:ae:
                    94:31:f1:ea:57:86:c0:7a:0f:72:4e:33:e9:46:c2:
                    77:fe:e1:a6:1b:1f:eb:26:4c:c9:c5:ec:a1:2a:cf:
                    38:14:10:8d:15:cb:f8:44:11:3a:18:8c:fe:c2:69:
                    b8:80:66:ef:9d:66:20:34:f2:98:52:16:e4:33:14:
                    6c:b5:48:7b:22:5d:93:ee:32:76:cc:06:e0:4c:4b:
                    9d:c9:22:0f:12:8f:0d:e5:e2:3b:ea:00:8b:9f:8b:
                    15:0f:f7:4f:34:5b:ff:d6:e3:50:5e:71:85:2c:ce:
                    4c:0e:ee:5c:6f:f8:d5:a2:aa:36:3e:8c:36:7a:aa:
                    25:08:66:99:c5:30:94:15:6d:8e:2c:df:9e:b9:67:
                    41:0e:ee:a4:a3:e6:6b:5b:97:13:f3:78:44:e5:b2:
                    a2:83:fc:ec:0a:3f:2c:a2:7a:bd:53:21:9e:95:1b:
                    1e:1e:ef:a7:87:e0:70:cc:a1:82:ba:2d:80:88:77:
                    b1:6b:7e:06:fa:66:9c:d7:57:67:e8:b3:ca:b0:9c:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:65:AD:77:DD:7F:B6:E3:17:1E:01:D8:9B:E4:EE:DF:EC:3D:B7:49
            X509v3 Authority Key Identifier:
                keyid:4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:94:de:7c:a6:3e:43:72:bb:50:1e:dc:b6:4b:0d:e2:9a:
         0b:ae:13:fe:2e:cd:50:fe:2c:98:3b:7a:01:da:54:d1:8c:46:
         06:87:a7:a6:a7:89:a8:8a:81:f6:d3:37:26:30:93:87:57:6b:
         f0:6d:10:44:dc:46:85:00:9b:96:2d:9a:21:7d:09:4e:fe:93:
         80:36:27:de:86:1a:d1:44:de:56:c2:43:30:3e:ae:16:51:4e:
         ca:07:5d:9f:a5:82:eb:c0:5a:c1:2e:33:4c:fa:61:6f:4f:52:
         63:34:04:46:b7:2a:6d:89:e9:7e:15:13:a5:a9:86:96:69:6b:
         b0:36:7b:40:e3:8f:cb:e8:d5:ba:cf:7a:6a:c1:0a:36:f4:fc:
         ad:3e:6e:24:c1:cf:ba:0b:af:f2:33:80:93:cd:d0:87:21:07:
         e2:84:98:f1:6f:de:77:3a:b2:10:d1:d0:70:70:3d:3b:2d:1f:
         62:bb:83:b7:c3:61:fa:ed:8d:1a:b4:d3:1b:60:98:70:6c:0b:
         a4:22:62:28:a9:6c:e7:0b:d5:8c:4a:45:01:2e:dc:09:a4:57:
         24:15:a2:0f:d6:e9:d5:6f:a5:09:dd:3f:63:1e:ea:ca:f9:7b:
         de:86:36:e9:fe:38:fa:dd:f3:aa:97:57:5d:c6:bf:5e:76:4c:
         7b:f9:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:44 2026 by rpki-client