Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          CWZOOjeXBT3r9ixGciHfR1L6me+dsgrpUytYROaxn84=
Subject key identifier:   03:A5:E1:EF:AE:82:57:6C:DA:C6:1A:4D:64:0F:74:F1:F1:51:0F:BE
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       02D3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          02D1
Signing time:             Wed 25 Mar 2026 04:56:22 +0000
Manifest this update:     Wed 25 Mar 2026 04:56:21 +0000
Manifest next update:     Fri 27 Mar 2026 04:56:21 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: UjFcYBLHGrTC+HghxjYCCqvFlATPAmcKdhsopqgX+9A=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 04:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Mar 25 04:56:21 2026 GMT
            Not After : Mar 27 04:56:21 2026 GMT
        Subject: CN=69c36af6-c910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:a6:ba:d0:89:b2:cb:9d:b3:e8:fa:ce:31:
                    0d:54:09:ce:f3:76:19:19:c9:31:97:3c:ad:5b:9b:
                    1c:0f:d9:83:c1:f1:9b:24:10:8a:53:f2:74:7e:4b:
                    b2:77:df:69:a6:08:67:b4:cd:56:e8:14:94:e8:73:
                    3b:fa:22:09:0f:23:fa:7b:ee:08:4a:17:a6:ef:a2:
                    56:e0:2e:e2:74:c7:35:7d:ed:e8:0f:80:bd:6d:01:
                    3e:ec:bc:4a:1f:e1:2f:12:a5:80:94:12:a0:31:a2:
                    2b:91:73:c4:cd:4a:b8:6e:cc:8e:bd:8d:6f:2e:75:
                    9e:64:7c:71:60:df:9d:21:27:a6:9d:ee:aa:18:9d:
                    d3:17:1e:7c:74:55:b2:83:cd:cd:c1:e4:c2:1b:f3:
                    04:51:f7:20:d5:b8:44:1a:45:7c:7e:a7:bf:7f:df:
                    57:a4:ac:ed:e5:ed:5f:1a:6c:c5:4d:af:9a:ec:cb:
                    46:9b:e6:20:38:54:38:ce:b1:d8:75:95:46:12:d4:
                    be:46:44:71:cf:0b:8d:14:79:47:9a:14:55:5c:97:
                    b7:79:3e:f2:77:ee:ff:04:59:c6:e0:2a:63:40:ad:
                    ef:05:80:52:f7:74:5e:8e:f2:0e:1a:5a:55:bd:f7:
                    e8:18:dc:23:0b:31:f5:f0:b0:4f:0c:aa:89:72:86:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:E1:EF:AE:82:57:6C:DA:C6:1A:4D:64:0F:74:F1:F1:51:0F:BE
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:53:83:23:dd:1f:be:ec:a1:4a:b8:af:b1:b1:45:f1:4f:4d:
         f5:06:ff:81:bf:00:26:b9:70:e1:d5:c4:73:8b:9b:61:a8:ac:
         e5:74:51:d2:d2:89:16:38:a2:1c:6e:01:8c:60:16:83:6a:e5:
         f0:70:81:2f:f7:20:07:cd:61:94:ee:b5:e8:cf:08:c0:50:96:
         5c:51:a4:0e:46:f3:82:f7:1c:3f:74:c7:f1:4f:76:11:c1:a8:
         f6:ab:40:68:df:05:11:dd:09:7e:b6:77:85:c2:8b:bb:a0:7d:
         95:fb:d8:ed:48:fe:72:e5:37:ec:1b:bd:7b:0a:6c:da:3b:23:
         43:9d:13:42:93:58:4b:cc:f9:cc:11:ed:aa:5e:88:62:23:8f:
         30:6f:23:ad:c8:c8:9b:18:28:61:5e:5e:2e:bc:b0:24:99:5c:
         bd:d7:cc:90:35:12:d2:56:03:68:18:bc:07:6c:12:af:9e:38:
         72:90:19:27:2f:6b:04:f4:16:da:8c:44:b9:2c:3f:b6:93:9c:
         db:dd:b8:ce:c5:35:e0:df:7a:6d:ad:0b:7e:58:4b:bf:45:1b:
         16:fe:29:7d:2b:9b:e5:b3:1b:fb:69:49:ff:24:b1:b7:8b:24:
         53:cb:6c:e9:8b:b0:11:72:ac:33:0e:09:78:70:0c:02:27:ca:
         50:ab:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:15:46 2026 by rpki-client