Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier:          jE92FVArVWPzL0cuEWP/H5boLX1XOYInxsLO6Lm3V3w=
Subject key identifier:   3B:39:BD:F8:AC:62:83:8D:63:47:D4:BA:84:62:0F:39:50:1D:3F:D1
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer:       /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial:       038C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number:          038B
Signing time:             Wed 25 Mar 2026 04:28:54 +0000
Manifest this update:     Wed 25 Mar 2026 04:28:54 +0000
Manifest next update:     Fri 27 Mar 2026 04:28:54 +0000
Files and hashes:         1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: f8GowiyODVljc2MrPoBjO6jFmU1gPBFaFuSNTvyp1Jw=)
                          2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                          rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 04:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AR, serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
        Validity
            Not Before: Mar 25 04:28:54 2026 GMT
            Not After : Mar 27 04:28:54 2026 GMT
        Subject: CN=69c36486-91d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:17:a9:07:e5:41:90:58:25:1f:3f:dd:98:
                    78:1f:5b:fd:a6:1e:d5:e1:80:03:7e:ee:cf:9c:74:
                    8b:2e:fa:0c:ff:f3:cd:09:55:2d:9c:27:c0:a9:16:
                    ef:17:c8:f0:41:aa:1e:72:d2:0a:2a:43:7e:19:6a:
                    ac:ae:55:9c:97:5b:11:db:20:28:0e:62:e8:56:56:
                    26:42:52:88:6e:fe:13:5d:dc:30:fb:cd:30:f1:96:
                    9b:82:1d:18:d3:ec:ad:ca:1d:c5:9e:d9:44:81:0b:
                    9e:b3:f4:f3:d2:5e:53:ab:d4:e2:b9:c1:c0:b1:f1:
                    d0:d1:de:05:67:00:db:c5:cb:3d:b2:fd:7e:6b:17:
                    bc:34:43:db:07:b4:9c:ed:db:a2:2d:c2:87:ae:01:
                    6c:9f:70:4f:ca:ad:fb:03:e6:e5:4e:6e:6f:96:0b:
                    f9:01:2f:05:70:a7:a0:e3:93:3c:47:2a:9f:f9:e9:
                    50:5f:f7:b8:0f:01:a0:91:6a:b7:bb:3a:15:9e:a1:
                    b7:6a:e5:b1:b5:57:c2:b7:18:8d:6c:a2:aa:5e:f2:
                    8f:b1:a6:44:d8:b2:9f:34:42:e3:84:4e:4e:0f:e7:
                    29:79:05:96:a3:ff:d3:8d:4b:9d:67:6f:3d:4b:ed:
                    f3:17:36:f2:67:5b:48:9a:0b:7b:dd:c0:ec:8c:d4:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:39:BD:F8:AC:62:83:8D:63:47:D4:BA:84:62:0F:39:50:1D:3F:D1
            X509v3 Authority Key Identifier:
                keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:f4:55:d8:9a:95:c0:25:06:06:5e:e4:9c:39:02:32:bd:bd:
         e6:94:1a:0b:93:0d:a0:88:cf:8e:ab:1e:43:93:2a:6c:f5:ae:
         b9:44:61:7f:ce:1e:35:b8:6d:27:f0:42:cf:2d:49:60:cb:5e:
         e8:b3:f1:30:8b:d9:cd:4e:01:b6:78:1c:24:9b:31:72:68:cd:
         53:ce:10:db:70:90:b3:4a:1f:a4:b5:ac:80:bf:58:28:db:e4:
         4f:67:38:4f:4c:a0:b7:1d:7f:8a:13:c6:71:aa:05:23:9b:5f:
         cb:f2:4c:97:4b:0b:9d:b5:6a:82:64:b8:40:b4:02:27:6a:1f:
         d2:d4:6a:f4:91:8a:84:b4:55:40:71:f8:cb:de:28:38:ea:5f:
         da:c3:61:d0:d4:82:59:69:18:c0:61:c2:cf:d7:c4:e2:50:e0:
         21:9b:69:19:0f:bc:f6:af:48:13:7c:b3:9c:2b:8e:84:e3:ac:
         26:1d:58:41:0c:a8:29:e2:fe:61:ee:5c:3c:92:94:7d:3a:ad:
         3b:f9:66:cb:2e:75:f3:2d:85:ac:bd:64:02:ae:2b:51:d2:dc:
         a7:98:14:5e:b3:11:b5:15:cf:81:4b:66:d3:12:e7:89:a7:0f:
         82:d4:af:a8:f7:78:dd:74:ba:3a:ef:65:ca:57:b0:0f:dd:5f:
         7d:50:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:15:47 2026 by rpki-client