Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          5p9Cp+cJz/gbZrhC2joTZSnZx0gShs8NScCFLfaZcYs=
Subject key identifier:   0E:2E:1B:E7:66:6C:86:DD:B4:CE:7A:B0:F9:00:A2:F8:1A:15:62:71
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       0339
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          0338
Signing time:             Fri 24 Jul 2026 04:11:25 +0000
Manifest this update:     Fri 24 Jul 2026 04:11:24 +0000
Manifest next update:     Sun 26 Jul 2026 04:11:24 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: moy310i4+cxdin2FsXgZSN34hUeRO/sh5dvxc/IheS8=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: Jul 24 04:11:24 2026 GMT
            Not After : Jul 26 04:11:24 2026 GMT
        Subject: CN=6a62e5ec-8620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:7d:0b:48:21:35:1c:ab:f0:ec:16:da:89:
                    d9:53:de:0a:40:f4:b4:01:ff:19:49:e0:a6:47:ef:
                    a8:4b:f1:72:d1:df:07:99:c4:dc:3e:d1:42:0b:61:
                    28:05:aa:10:07:68:8b:12:ad:9a:a0:16:48:0c:fd:
                    42:eb:77:c4:cb:9f:80:3e:92:8a:72:df:30:ec:26:
                    75:fe:20:df:c7:ba:90:64:93:65:93:67:be:15:05:
                    c0:21:6d:0d:51:05:32:69:ee:d5:3d:5a:61:28:09:
                    34:84:e2:95:4d:c5:02:9e:d5:08:e9:1a:3d:77:1d:
                    05:86:2f:59:a6:31:e5:b9:7a:7f:d5:4a:1e:99:59:
                    d2:01:30:50:2f:8b:b3:d2:08:a0:e9:b1:1c:7a:b5:
                    ab:9b:f7:2d:9b:c3:25:fc:2d:0c:7b:8e:4e:68:7f:
                    f2:8a:7b:ae:19:8f:2b:c3:83:ce:9c:94:b9:f6:a7:
                    18:67:df:15:36:bb:8a:11:41:a0:57:0d:73:50:8d:
                    eb:2d:06:55:2e:6f:73:05:56:86:44:a4:5a:22:ff:
                    26:ae:62:8a:62:47:37:2f:52:3d:20:cb:aa:0f:dc:
                    2a:81:97:25:b8:e4:ab:3a:2b:f9:52:3b:89:b4:49:
                    7a:d6:ff:03:e2:6c:82:4b:f2:f2:39:6e:d1:87:47:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2E:1B:E7:66:6C:86:DD:B4:CE:7A:B0:F9:00:A2:F8:1A:15:62:71
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:24:37:a2:ab:a3:e9:e0:db:4e:b9:e7:e9:8e:ac:58:bd:69:
         af:08:4b:94:53:fe:bf:93:96:38:c0:32:de:3e:4a:06:1e:e5:
         8b:4b:ef:2e:b3:78:93:7b:23:cd:34:86:f9:4d:3a:1c:92:1d:
         38:1a:93:48:15:13:6c:e4:6f:d4:80:a8:3b:3c:0c:c4:19:ac:
         be:fb:c8:a3:b7:7e:16:1d:42:79:c7:62:7f:69:95:bd:fd:23:
         7b:e9:d7:65:5a:51:23:85:66:55:75:9a:5d:88:4b:89:77:6a:
         87:54:97:ac:35:01:2e:6a:ae:10:a4:6e:d6:04:84:c0:93:e7:
         12:26:85:60:85:52:76:a4:c5:98:c0:76:80:84:87:fe:38:30:
         46:4c:95:20:24:ff:a0:36:61:62:ea:02:d9:96:d9:06:13:f0:
         c3:2a:03:d0:39:d1:d3:1e:ec:5f:64:6e:6a:ef:21:8d:1f:ae:
         9c:92:7d:5b:e3:ac:9b:79:d6:a7:ad:4f:c3:de:39:22:f5:91:
         49:54:de:e7:b1:19:06:58:d9:fc:7b:e3:8c:4d:be:88:49:83:
         81:ae:48:68:56:80:b8:d7:0b:52:ab:72:79:72:a3:4a:4d:dd:
         81:dc:69:e9:b5:5b:84:5d:f8:62:9a:07:df:53:55:63:d3:f4:
         9c:68:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:38 2026 by rpki-client