Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File:                     rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier:          NGdG2SUSu4u8kLOGXYiMaMbcWBZq2J6X+4tFl0vuKEk=
Subject key identifier:   95:CE:A6:D6:1D:0C:E0:0E:C4:A4:9C:0B:AD:65:26:3B:D1:90:13:F6
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer:       /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial:       75
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number:          73
Signing time:             Thu 26 Mar 2026 06:24:01 +0000
Manifest this update:     Thu 26 Mar 2026 06:24:00 +0000
Manifest next update:     Sat 28 Mar 2026 06:24:00 +0000
Files and hashes:         1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: bCgdjny4sWWcUeBOr8q6/aERiQAzyrwKIG1GCmPWzOU=)
                          2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
                          3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                          rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
        Validity
            Not Before: Mar 26 06:24:00 2026 GMT
            Not After : Mar 28 06:24:00 2026 GMT
        Subject: CN=69c4d101-826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:2a:4c:9b:7c:c8:5b:d4:3b:50:c7:b8:db:
                    f7:42:ad:9b:b6:90:7f:cb:bd:56:00:5b:3a:ec:07:
                    8d:2f:29:db:c9:86:e1:32:fd:58:e0:0d:02:bf:e4:
                    cb:ce:f3:c9:a1:69:ac:6d:19:7c:7d:78:67:a3:bd:
                    d9:87:4e:7b:5c:1c:d6:1f:eb:66:36:0b:02:79:6c:
                    a5:76:1f:ce:c2:cf:6f:88:bb:44:a1:5a:f4:ab:0c:
                    71:5e:f8:bb:ae:e9:73:8a:02:eb:16:e6:05:b0:1e:
                    fd:9d:57:34:81:c6:68:f7:af:f6:f0:5c:47:79:8b:
                    2b:c7:f5:94:6c:23:12:65:af:38:79:c6:c6:ad:94:
                    26:9b:d8:6d:de:d4:e4:fe:a6:a5:73:ab:45:a1:de:
                    c9:10:b2:36:17:ab:05:18:b6:f7:93:06:90:86:14:
                    66:17:dc:f4:fa:a5:19:a5:5c:a2:8d:24:2d:d6:07:
                    8d:01:ef:13:50:dc:52:aa:01:8b:3a:39:a8:a1:94:
                    a1:c5:39:92:e9:2b:de:51:54:eb:3f:ea:4f:6d:cb:
                    e8:b4:3d:0b:91:76:b7:15:ec:22:b3:8b:18:02:80:
                    64:c3:e9:bb:64:ed:4a:44:fe:8c:f8:62:a6:99:53:
                    7c:5e:36:e4:cd:4b:6a:c9:2d:a8:22:6a:87:82:d5:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:A6:D6:1D:0C:E0:0E:C4:A4:9C:0B:AD:65:26:3B:D1:90:13:F6
            X509v3 Authority Key Identifier:
                keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:51:dc:5c:82:e2:ed:68:59:39:26:2b:30:7c:d6:2d:96:
         92:03:2b:be:2d:76:83:39:b9:82:eb:cf:01:7b:21:ea:6a:29:
         2c:5c:75:b5:0d:d2:43:0c:db:ff:e5:39:26:bb:17:90:17:68:
         4f:12:3c:5a:77:08:6d:b6:45:7f:77:04:10:31:8e:ef:49:c9:
         25:57:c9:cf:d2:d6:e1:cd:47:0f:4c:33:64:44:f3:2d:d9:12:
         88:a2:15:81:e1:ca:b5:cc:81:1c:8e:39:41:37:08:16:0f:44:
         5d:76:41:82:36:62:c6:90:eb:39:cb:28:f9:6f:94:8b:3e:18:
         c6:0b:e9:d5:b4:46:ff:a3:0b:75:15:f3:fb:41:f6:92:d0:13:
         92:f9:2b:75:d8:1a:0f:af:b8:68:22:8a:c3:8e:02:10:b6:eb:
         8a:32:91:14:c3:a6:dd:7f:a7:86:5c:47:98:40:d9:0f:57:e4:
         09:31:dc:56:43:5f:e3:f5:b4:32:9f:45:d0:b5:82:18:45:5c:
         08:ad:96:6d:ea:1b:59:42:7f:27:4e:ef:b9:ca:1f:49:f5:d8:
         7c:d8:42:c3:6b:a7:59:6f:8d:22:e3:19:28:be:fe:55:59:37:
         27:a4:5a:af:48:3b:85:67:63:7e:a9:97:f4:f2:90:aa:59:7a:
         87:7c:4d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:17 2026 by rpki-client