Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
File:                     mANBymMoP9xkLng8RVg-pGRCMxs.mft (raw, json)
Hash identifier:          Ddd+bKPS74vL/qKHF0K78D05UHaqmkZxSXDFxjIvr2o=
Subject key identifier:   B5:5C:E4:92:78:2C:31:6E:82:B8:FA:D2:6F:3C:53:86:CC:32:C4:A8
Authority key identifier: 98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B
Certificate issuer:       /CN=F36852F0AR/serialNumber=980341CA63283FDC642E783C45583EA46442331B
Certificate serial:       010D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
Manifest number:          010B
Signing time:             Tue 12 May 2026 05:06:57 +0000
Manifest this update:     Tue 12 May 2026 05:06:56 +0000
Manifest next update:     Thu 14 May 2026 05:06:56 +0000
Files and hashes:         1: mANBymMoP9xkLng8RVg-pGRCMxs.crl (hash: 6SVcu9gshYlxnwVt+wxwspuT+1CYxATWJt0hdQbFpiM=)
                          2: 6D2177B4832511F0892AAFC7DAE4EC9C.roa (hash: aHAZN2QhTCRQrqiHV0Jl7+gEXu4WrL625sFACBWD1qA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                          rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36852F0AR, serialNumber=980341CA63283FDC642E783C45583EA46442331B
        Validity
            Not Before: May 12 05:06:56 2026 GMT
            Not After : May 14 05:06:56 2026 GMT
        Subject: CN=6a02b571-6a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:cc:42:4c:46:a7:ea:ad:b1:f2:61:3a:51:
                    e3:94:ee:cf:8d:cd:87:80:ff:cb:3b:7e:bb:40:2d:
                    e2:9b:da:08:7d:f3:38:29:73:0c:b0:4b:ba:dd:ba:
                    9e:90:3b:42:f5:63:43:c2:d8:cc:83:25:5e:b2:f5:
                    2f:d0:a5:c6:39:2f:55:19:33:53:83:5b:a5:23:26:
                    cf:89:0c:e8:38:ad:a2:36:3f:a9:fc:9b:37:58:7f:
                    b1:1d:af:cd:15:51:b6:39:c5:b4:f3:fa:06:53:22:
                    40:83:c5:80:39:35:0b:ae:45:b5:84:b9:93:5f:ea:
                    fe:ee:c2:d5:88:95:72:f8:a9:7d:6d:df:c7:31:1f:
                    91:3d:e2:69:70:29:83:af:bd:7f:dd:66:26:99:0d:
                    46:ee:13:98:39:2b:7b:82:67:0d:32:da:36:6f:a1:
                    77:79:e7:a7:42:e1:c1:b3:f4:58:b6:48:e4:a5:32:
                    24:16:1a:56:57:f7:b2:8b:cd:e4:23:38:f8:13:b8:
                    56:af:e6:0b:4c:ce:d0:18:f2:84:e9:d5:a1:d1:5f:
                    fa:27:4d:16:5f:36:7c:ab:0a:b4:97:49:11:14:d3:
                    9f:79:fa:04:de:41:28:83:6d:fb:3c:57:4a:c2:03:
                    8c:2f:31:1a:c9:62:f4:7c:e3:86:f2:4c:f4:c6:b6:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5C:E4:92:78:2C:31:6E:82:B8:FA:D2:6F:3C:53:86:CC:32:C4:A8
            X509v3 Authority Key Identifier:
                keyid:98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:af:2d:e6:45:ee:96:6b:34:a0:d1:1f:87:b9:35:23:e2:
         b3:ab:fa:ca:a6:a3:45:63:01:de:ff:e2:41:c4:76:e6:9c:1c:
         41:63:aa:e5:95:83:1b:28:16:31:eb:b4:39:34:f3:91:9d:52:
         37:0a:9b:da:63:5b:2d:b5:24:98:8a:cc:f8:2d:30:4d:39:4c:
         85:89:5c:95:32:cd:a2:ec:03:28:12:3c:58:6c:dc:25:91:a3:
         e9:0e:cf:74:d7:40:ee:8f:0b:55:ff:43:cf:a1:3b:2d:79:6c:
         fd:15:79:a2:2a:e6:55:03:29:d0:c6:64:6d:97:c7:21:3d:ea:
         6b:ad:74:c9:b4:cf:59:d7:47:c6:79:76:43:c5:8f:a6:03:48:
         bb:89:08:5c:fe:ec:de:b8:5c:1d:e4:3d:f6:62:fb:6c:1b:b2:
         27:40:bd:1d:16:e6:ab:f8:f8:36:f2:46:14:85:17:35:a8:35:
         bc:40:91:38:46:9b:82:fb:71:c0:a5:46:58:12:b4:23:4a:4a:
         ef:32:46:ba:5b:d0:d6:35:1a:55:6b:cd:ad:29:dd:51:a7:d8:
         31:08:f1:b5:40:65:70:b3:55:45:ed:24:72:ee:de:79:de:d0:
         34:cf:38:8b:ab:b0:d1:e5:aa:99:e5:75:6e:85:0e:64:d7:89:
         76:83:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:18 2026 by rpki-client