Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
File:                     gl2wNPq0N6iajdJEBqtygseLYro.mft (raw, json)
Hash identifier:          KfqnL8FIQ8SBfqvNkZj+ZoT5cNlXILCNIRWC4Kq95is=
Subject key identifier:   B3:59:F1:04:02:2E:4B:FC:A0:38:77:82:D9:C9:52:36:1B:7E:29:3E
Authority key identifier: 82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA
Certificate issuer:       /CN=F368F4A1AR/serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
Certificate serial:       028F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
Manifest number:          0287
Signing time:             Thu 26 Mar 2026 05:08:56 +0000
Manifest this update:     Thu 26 Mar 2026 05:08:55 +0000
Manifest next update:     Sat 28 Mar 2026 05:08:55 +0000
Files and hashes:         1: gl2wNPq0N6iajdJEBqtygseLYro.crl (hash: 9/iC3tnlp/7sNP9DSG2aMQKLZMWsC1e1kfJKwYEnLDc=)
                          2: A11224BE49CA11EF9C401F91762E951A.roa (hash: KDj2Lzc4dz6ze7gmYdXtI25bUBjs8RYx75qbzXwadro=)
                          3: FFBD17A449C911EF9BD0848C762E951A.roa (hash: 1q6DfjzPCakdGBa3y25kmYy0lgCV4qqQEYn4uXM0n0g=)
                          4: EC0AAE60435711EFB8E0D6BA762E951A.roa (hash: CywE6U5JIpUptFBIfv36q/lnpSHgsnnC42/YpAaW+DI=)
                          5: B6688076435611EFAB2BE6B1762E951A.roa (hash: 9tse/mxNJXfyu1H3gIXX1krLQVJ31qcACHPTQWNjpxU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                          rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AR, serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
        Validity
            Not Before: Mar 26 05:08:55 2026 GMT
            Not After : Mar 28 05:08:55 2026 GMT
        Subject: CN=69c4bf68-f2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:3c:30:6c:43:60:45:16:0b:fd:c1:f7:45:
                    42:f1:15:12:0e:ab:f8:2a:df:34:93:81:33:a9:dd:
                    54:bb:76:14:8f:0c:25:cd:83:93:fa:0f:37:61:ff:
                    aa:1e:4e:ce:ad:9f:81:8d:db:2a:31:d7:f7:39:0b:
                    7a:7c:65:93:a1:94:9d:a6:c4:1e:ba:29:eb:30:bb:
                    fb:b3:f3:fe:5d:b9:10:cc:40:83:f8:0e:d4:ec:81:
                    ca:c7:4f:bd:84:4c:56:89:66:f9:02:73:9d:e3:fb:
                    de:32:8b:c1:60:5d:d2:65:24:4d:56:59:02:6d:a5:
                    a6:f6:a2:69:a6:9c:6f:eb:f7:b1:46:63:ed:71:0a:
                    3c:35:ee:f0:a5:a2:b2:35:cb:54:dc:fe:e1:8b:a9:
                    65:bb:e0:19:c2:00:30:14:e0:ff:20:e1:a4:7f:4d:
                    72:18:f3:f6:75:6f:ec:08:00:36:74:01:c7:6d:78:
                    6d:21:0a:c1:5d:23:ec:cd:d4:0f:b4:ef:95:cd:ca:
                    8e:e0:d2:37:11:cb:54:5a:ef:6a:c9:a2:f4:82:4b:
                    1d:ac:5f:b5:d8:f5:ff:fa:c3:17:28:94:f2:68:21:
                    1c:32:79:4d:3b:a8:05:6e:fe:e3:19:5a:e3:ba:9c:
                    db:83:02:8c:05:d2:9f:1b:f1:92:17:b2:32:07:67:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:59:F1:04:02:2E:4B:FC:A0:38:77:82:D9:C9:52:36:1B:7E:29:3E
            X509v3 Authority Key Identifier:
                keyid:82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f8:9b:b0:a2:64:3f:c9:e5:c3:60:31:a5:a3:1b:91:db:d1:
         fe:a3:6d:e7:cf:dd:7c:de:e2:d4:ef:25:12:f7:f7:ae:42:e7:
         d9:68:ae:ac:84:69:36:2f:f4:e5:56:ba:ec:14:07:96:f8:4e:
         45:b8:20:f4:5e:39:54:6e:bf:6c:eb:72:e8:85:bb:02:b3:4d:
         72:d5:db:a4:76:d3:d4:88:09:98:b5:64:02:91:06:43:82:6b:
         ce:2d:6c:7c:b8:1b:06:ad:78:38:8d:db:ce:45:21:d4:02:4b:
         bb:34:a9:36:f7:df:f8:8a:8b:a4:74:0a:76:2c:92:4d:5d:fe:
         ec:01:ed:3c:7b:92:38:13:8a:dd:42:5c:16:4a:9d:e4:bd:c0:
         b4:60:3c:fe:0b:78:db:0c:3a:24:bb:2e:f3:bf:80:09:36:41:
         f6:f6:12:34:d8:55:37:db:d2:f2:76:0a:d2:ed:bd:93:dd:3f:
         41:72:c3:3d:24:4a:67:aa:82:f3:b7:2d:72:2e:5e:68:09:55:
         f1:c8:2d:e9:79:ee:7c:46:42:e2:cf:5d:24:d2:98:5e:01:9b:
         f8:de:0f:6f:3c:0e:5d:1a:07:fe:96:40:ff:08:24:4f:a4:69:
         b7:6c:86:9f:75:00:5f:95:67:2d:1a:51:39:c3:9a:a8:60:5e:
         16:a1:26:53
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEY0QTFBUjExMC8GA1UEBRMoODI1REIwMzRGQUI0MzdBODlBOEREMjQ0MDZBQjcy
ODJDNzhCNjJCQTAeFw0yNjAzMjYwNTA4NTVaFw0yNjAzMjgwNTA4NTVaMBgxFjAU
BgNVBAMTDTY5YzRiZjY4LWYyZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+ijwwbENgRRYL/cH3RULxFRIOq/gq3zSTgTOp3VS7dhSPDCXNg5P6Dzdh
/6oeTs6tn4GN2yox1/c5C3p8ZZOhlJ2mxB66Keswu/uz8/5duRDMQIP4DtTsgcrH
T72ETFaJZvkCc53j+94yi8FgXdJlJE1WWQJtpab2ommmnG/r97FGY+1xCjw17vCl
orI1y1Tc/uGLqWW74BnCADAU4P8g4aR/TXIY8/Z1b+wIADZ0AcdteG0hCsFdI+zN
1A+075XNyo7g0jcRy1Ra72rJovSCSx2sX7XY9f/6wxcolPJoIRwyeU07qAVu/uMZ
WuO6nNuDAowF0p8b8ZIXsjIHZ3xHAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUs1nx
BAIuS/ygOHeC2clSNht+KT4wHwYDVR0jBBgwFoAUgl2wNPq0N6iajdJEBqtygseL
YrowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGNEExL0E2MUYzQkI4M0Y1QzExRUY5RDRDQzc3RTc2MkU5NTFBL2dsMndO
UHEwTjZpYWpkSkVCcXR5Z3NlTFlyby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2dsMndOUHEwTjZpYWpkSkVCcXR5Z3NlTFlyby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OEY0QTEvQTYxRjNCQjgzRjVDMTFFRjlENENDNzdFNzYyRTk1
MUEvZ2wyd05QcTBONmlhamRKRUJxdHlnc2VMWXJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz+JuwomQ/yeXDYDGloxuR29H+o23nz918
3uLU7yUS9/euQufZaK6shGk2L/TlVrrsFAeW+E5FuCD0XjlUbr9s63LohbsCs01y
1dukdtPUiAmYtWQCkQZDgmvOLWx8uBsGrXg4jdvORSHUAku7NKk299/4ioukdAp2
LJJNXf7sAe08e5I4E4rdQlwWSp3kvcC0YDz+C3jbDDokuy7zv4AJNkH29hI02FU3
29LydgrS7b2T3T9BcsM9JEpnqoLzty1yLl5oCVXxyC3pee58RkLiz10k0pheAZv4
3g9vPA5dGgf+lkD/CCRPpGm3bIafdQBflWctGlE5w5qoYF4WoSZT
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:53 2026 by rpki-client