Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          WAPIlFguFV2/+bdxZJ6V9RNQznls321AawBBoP5fW2E=
Subject key identifier:   01:60:6E:EC:20:8A:27:42:34:E3:FE:30:5F:B0:BD:52:B8:B0:A1:E5
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0E44
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0E40
Signing time:             Wed 13 May 2026 01:02:39 +0000
Manifest this update:     Wed 13 May 2026 01:02:39 +0000
Manifest next update:     Fri 15 May 2026 01:02:39 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: DMQmGBsWlv8J/v73ijaZN7ydn2KfL3LVDCn6QoW97Io=)
                          2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
                          3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3652 (0xe44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: May 13 01:02:39 2026 GMT
            Not After : May 15 01:02:39 2026 GMT
        Subject: CN=6a03cdaf-17ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:53:8d:dc:4d:cc:bc:ad:3f:c4:96:c2:56:
                    87:1d:da:3e:ac:d2:cd:fb:92:45:65:66:11:ad:bf:
                    eb:9c:02:0c:85:5f:03:7d:0f:c0:c2:49:72:00:b1:
                    de:b5:8b:5e:02:f7:21:0c:87:73:ea:e1:64:90:4e:
                    c8:d2:db:13:eb:24:3a:fd:1f:d2:df:e7:44:cf:54:
                    e6:5a:bc:db:8b:d3:ee:1f:1e:32:b2:4c:9b:ff:9f:
                    66:9b:ab:ad:39:6b:46:d7:e9:ea:2b:57:63:bf:ae:
                    79:25:0b:25:6e:2d:45:ae:d5:18:0c:f0:5f:0e:86:
                    d2:6e:1a:c7:bf:64:e5:bc:e4:91:35:47:d0:49:c9:
                    52:c6:ed:6b:62:fb:bf:f8:57:a9:9e:4f:7d:2d:d5:
                    05:e1:e7:b3:4d:5f:82:0e:e1:f2:df:d0:7b:9e:5d:
                    d1:b3:07:3c:51:7b:86:9c:9a:6c:b8:2f:ca:2b:47:
                    99:b3:24:76:1e:29:a2:4d:6a:81:4c:77:59:d9:22:
                    74:12:52:1c:ba:c3:ee:a2:8a:83:ad:5f:2e:92:03:
                    b2:ed:f4:02:2c:9e:0e:4e:b6:d7:ab:0a:f7:66:1b:
                    30:7e:5a:61:76:05:74:f6:9f:eb:08:1b:3d:b9:ab:
                    22:2a:2b:64:9a:cb:86:75:ec:b2:02:bd:31:59:16:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:60:6E:EC:20:8A:27:42:34:E3:FE:30:5F:B0:BD:52:B8:B0:A1:E5
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2c:66:9b:60:ed:d1:04:70:0a:be:77:0b:a3:cf:4e:eb:aa:
         33:7d:b1:7d:96:78:06:a9:e9:a5:a6:57:c0:d6:34:d8:d6:86:
         40:da:df:56:d3:26:91:f9:97:17:7c:92:71:4f:4a:ce:55:10:
         a3:90:69:37:24:14:6f:bd:0c:7e:3f:e2:ef:3d:5e:e7:ba:aa:
         69:b5:f9:a0:f8:9a:6b:40:f2:a8:a7:a6:78:0f:55:e4:5a:31:
         ac:fa:f9:1d:73:d8:d2:65:9e:39:52:b5:09:8f:33:df:a1:aa:
         ed:49:d9:89:4a:b8:0f:ec:06:2c:3c:08:a1:af:c6:84:ea:ae:
         d3:64:5b:6b:d7:ca:d4:c7:60:80:fa:5a:a8:e1:55:f9:df:32:
         1f:32:36:98:cf:ca:73:7f:1a:a0:fd:cd:90:20:90:d1:4b:cf:
         db:26:81:dd:1c:f4:a0:98:8a:6d:ea:78:59:7e:80:46:8a:ee:
         85:ec:ea:85:e1:08:65:2d:23:3a:cd:21:42:10:c2:0f:aa:49:
         23:1e:d1:8c:32:4b:30:e7:aa:02:6b:69:eb:6b:cf:73:29:4f:
         8f:52:de:9e:a0:fe:00:f8:c1:3e:ed:01:e6:18:50:07:2f:dd:
         f0:ec:5c:81:8c:be:d6:2d:b4:4a:f2:db:32:96:e1:37:ae:b2:
         cd:7d:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:04:47 2026 by rpki-client