Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          jOh3427feFtr5DXmHvIYpiV1oiuHoZt6M6NWUMGSlKA=
Subject key identifier:   81:0F:84:1F:FE:AC:8F:40:13:F5:51:02:DB:12:20:65:AE:64:D8:8A
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       070D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          070B
Signing time:             Thu 26 Mar 2026 02:31:44 +0000
Manifest this update:     Thu 26 Mar 2026 02:31:43 +0000
Manifest next update:     Sat 28 Mar 2026 02:31:43 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: CWfoZIP9o16bTz9Murh8qSgZaV/DVmo0cFNEdFUUyuQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Mar 26 02:31:43 2026 GMT
            Not After : Mar 28 02:31:43 2026 GMT
        Subject: CN=69c49a90-84cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:5a:98:83:31:ff:85:ec:0a:d7:b4:7d:38:
                    1f:2b:49:94:f1:57:94:44:6f:79:a2:2d:36:ce:da:
                    12:d7:52:55:10:08:f9:dc:f8:43:5c:4f:66:55:a1:
                    14:ba:f4:c2:b3:39:26:85:29:c4:6c:f8:4d:51:27:
                    d5:7e:ea:3f:b2:3c:68:bd:6c:82:f7:35:b7:c8:7d:
                    3e:3f:87:63:24:f0:ef:b2:6e:3c:8e:de:0b:62:f7:
                    7d:f1:a0:f9:4b:41:d2:ce:fb:a1:61:4b:07:72:a9:
                    7f:97:5c:a0:20:2d:12:8d:b9:96:c7:5f:cd:77:5c:
                    2e:e3:89:7e:e0:52:c9:cf:19:18:e4:c2:71:a0:f8:
                    9e:0a:65:bd:30:64:42:27:d3:e4:98:e2:0a:f3:a1:
                    f9:b5:71:b1:d4:38:f2:72:89:20:35:ee:8b:60:0d:
                    82:0a:71:16:60:a8:50:ea:c1:fd:22:7f:65:e4:c2:
                    96:ac:9e:cb:dc:a3:28:e5:6d:c9:e8:0b:80:0e:d3:
                    e4:83:16:32:b6:2d:6d:b6:42:2c:25:a4:e0:38:5e:
                    20:96:0b:f0:96:7e:68:9b:e2:12:12:47:da:0f:ba:
                    21:19:1b:37:60:11:c8:4f:ff:8f:13:9b:c5:68:7e:
                    95:0d:63:c4:08:70:89:fd:c8:36:95:c4:79:86:53:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0F:84:1F:FE:AC:8F:40:13:F5:51:02:DB:12:20:65:AE:64:D8:8A
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:81:2b:cf:31:81:2e:03:76:8c:41:ff:74:70:2a:9b:97:
         d2:bd:cf:52:4b:bd:2c:e5:6d:94:9c:8e:0a:f9:13:88:38:79:
         10:8a:14:7d:a2:41:b0:77:34:c8:eb:6f:0e:5a:e9:b2:2e:57:
         61:35:4f:68:98:fe:93:48:91:28:d8:62:4c:61:7e:3f:ca:ad:
         63:82:bc:01:15:65:84:3c:3f:ac:98:46:a0:2e:6e:a5:8d:6a:
         4a:ac:57:3f:21:10:31:cd:a7:82:8d:31:d3:78:3d:b8:12:8d:
         c8:b3:1f:a8:63:83:a4:47:7e:9b:79:05:04:fb:5f:64:3c:29:
         66:79:5e:e2:de:ce:5c:e8:d4:21:55:29:ac:18:a8:54:97:a9:
         70:ed:fe:80:23:d2:85:31:fb:1c:70:e6:95:84:45:e0:23:83:
         54:bd:19:30:ca:88:6c:8a:b3:ae:71:4c:43:df:15:16:38:db:
         5a:15:18:f7:0f:07:3c:77:05:bf:46:79:eb:89:97:88:d0:66:
         d1:0b:4a:67:92:cd:41:1d:c9:ad:08:59:19:a6:ce:63:a6:a9:
         ed:4c:02:15:3c:ef:db:c1:04:f8:06:5c:ba:b0:6b:a1:5e:de:
         16:12:17:dd:2f:87:37:98:cd:d4:d0:31:d5:c4:10:9b:fb:bc:
         f6:94:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:51 2026 by rpki-client