Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
File:                     ByjJuEVcZZd_owmH3klB3wGMZRw.mft (raw, json)
Hash identifier:          X+2naxeqA+f8LceBd/r5zo4vle9FRs5oC4A95EfFFGs=
Subject key identifier:   F0:AF:3A:5A:04:D2:5A:CE:C1:A7:79:2D:01:41:D4:DE:EE:4F:BD:CC
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Certificate issuer:       /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial:       04A5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
Manifest number:          0490
Signing time:             Wed 25 Mar 2026 03:54:52 +0000
Manifest this update:     Wed 25 Mar 2026 03:54:51 +0000
Manifest next update:     Fri 27 Mar 2026 03:54:51 +0000
Files and hashes:         1: ByjJuEVcZZd_owmH3klB3wGMZRw.crl (hash: IQfhihFIHb4J+N3lPOvaUdFq50ZQBeKRpHTY25l+32E=)
                          2: 7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa (hash: jQGUKe3rg4/PLd3kSJUPsEAaJxqYjO4wUsN/Bu7W0uA=)
                          3: 9884A7A6DC1611F08554FAC6DAE4EC9C.roa (hash: gWmtab9NB6YFJ1wPo16mnZTzUWphKA4gz/9pRUM2s8I=)
                          4: F67B1080078511F1A61271C3DAE4EC9C.roa (hash: DZEJ0kUrfFd+Ajbj7HFMNY2JqNwV+R+8KRQFU30o23s=)
                          5: BC91F744A83F11F090E6C7A5DAE4EC9C.roa (hash: Elm2i50rmkaGMEnrw4x6Jh8AjBNyfQZZJ8St5A5jh94=)
                          6: C8A598A47F3D11F093F96AD7DAE4EC9C.roa (hash: SX7VFRi6fja/lVzFn5u30dJTc0ojT/jkc4MDx+ibGA4=)
                          7: 317186825E5911F0BF0E56D6DAE4EC9C.roa (hash: 6apzxpSV9toddFW0ywLW65SIvt6/6D8w0xhl0KtVvGE=)
                          8: 36EA05F2D59711F0822F868FDAE4EC9C.roa (hash: EojrboZehKIGXK2BaidudpldxYrlMEfVrQIxHcWgYWc=)
                          9: 5A6198AED59411F0985D177EDAE4EC9C.roa (hash: PE7nKz1fS34J7ek36L+PYwmWDnMXZGfg9zXwU8sOHbs=)
                          10: 1FD4E33E881A11F0B7B498A6DAE4EC9C.roa (hash: fsPwiXCwWpyl3VMVIS2dW1m76owZ/IrLRf2lMDpLzbU=)
                          11: 7023BF7ED59811F0AECA0E99DAE4EC9C.roa (hash: 0M4moWZIc1pWgW115yDoCQcKwuM3v5jTr3xkTdFI04c=)
                          12: 2CC09D9AF79B11F0B2CC95F0DAE4EC9C.roa (hash: GqpKo6qbPlIx2jVnFfAJCJZciNlgCHzuokWLGajhcgA=)
                          13: 5C48C5E6D59111F0A35986E9DAE4EC9C.roa (hash: Q9vbh4IVguIiKXFgG//hRIq3VlksMG3g9OlCGUmxIek=)
                          14: 3F8563360B3011F1952D8DD1DAE4EC9C.roa (hash: ywRwAGyvq53R6hNtJgtpMHcYkRZeZDea56O4hCBnArk=)
                          15: 0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa (hash: FbqPhXgVxRFKRyej1hOMFhCZh8mpxY1cmyW2uqTiFs0=)
                          16: 30E1FE12A36511F09C462CBBDAE4EC9C.roa (hash: IGbqX5D5gUHKh2mdGEwDIbF4kqA4Xmhcc0VKgu4AfmU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                          rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
        Validity
            Not Before: Mar 25 03:54:51 2026 GMT
            Not After : Mar 27 03:54:51 2026 GMT
        Subject: CN=69c35c8c-0925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:3a:43:73:09:23:da:0a:25:eb:6a:d0:79:
                    3e:47:ed:f9:03:3d:ec:7d:32:99:f8:1d:d0:47:40:
                    4d:45:73:b7:09:fa:97:58:e8:38:90:78:04:d5:b6:
                    fa:ec:b7:ea:d1:f2:45:f3:d6:ee:54:e5:ce:23:8d:
                    1a:06:60:9d:b5:6b:b4:6e:8c:03:f8:df:f8:f8:0f:
                    4a:33:52:c5:20:c2:de:39:d6:c9:70:6f:33:74:90:
                    39:71:2b:ae:4c:d4:31:b3:79:39:8b:12:f1:35:1f:
                    b2:04:e3:c3:a6:ea:18:a5:3e:44:a7:ff:6d:79:75:
                    63:ee:b1:52:d1:70:e6:94:f6:fd:57:65:95:e0:99:
                    2a:87:28:76:64:e2:f6:de:6a:e1:98:1d:84:ac:19:
                    75:a3:93:6b:ce:f7:e1:2e:fd:cf:97:e4:3f:b5:59:
                    07:03:2d:c5:9f:0c:c0:14:d8:a8:d3:dc:00:af:44:
                    25:30:d2:ae:fb:d6:05:a9:f2:80:74:77:a6:05:83:
                    4c:60:69:17:d0:a8:1e:e1:50:2f:2a:cd:0e:3d:a7:
                    90:eb:1f:91:dc:68:df:64:c6:32:27:b2:eb:29:19:
                    ec:28:ba:fa:e7:1d:bc:5c:13:4d:e3:0c:29:19:d8:
                    18:6a:5d:0f:4d:30:c9:fe:37:8c:12:a9:a8:aa:b3:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AF:3A:5A:04:D2:5A:CE:C1:A7:79:2D:01:41:D4:DE:EE:4F:BD:CC
            X509v3 Authority Key Identifier:
                keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:16:35:37:a9:10:c3:19:59:60:4f:37:30:16:ee:74:d3:89:
         de:66:94:39:55:6a:93:06:0b:d4:33:ca:00:03:37:64:f3:3d:
         e4:8d:a6:d4:5a:ba:63:85:57:f5:70:2c:41:f6:70:6f:d3:fd:
         65:e4:41:46:62:32:52:9a:83:d5:76:55:11:7c:00:3e:e3:cc:
         4f:54:93:45:24:83:98:5c:8b:cf:33:97:ac:11:0d:68:58:fc:
         61:56:64:9d:c1:a8:90:d6:59:fc:df:de:6d:48:8d:cc:a8:8b:
         84:34:d3:25:93:67:98:6e:07:33:30:47:65:44:fa:89:dc:76:
         66:eb:23:b7:e9:0a:41:ba:a0:86:52:21:31:d4:63:ac:88:17:
         a8:cb:1e:da:d3:3b:10:b0:84:6d:a3:ab:cb:ad:41:cf:2e:75:
         26:c8:ba:76:75:77:71:d4:5d:72:76:52:8f:b3:5d:bb:97:1c:
         81:8e:50:41:12:eb:cc:f4:ba:91:61:e4:48:d5:68:df:c5:e5:
         f7:d8:61:68:2b:6b:4d:74:cd:8a:01:cf:0b:c0:cb:6e:58:60:
         96:a2:d4:35:d3:e1:be:4a:b3:23:15:55:8e:8d:0d:7b:f9:90:
         b9:c8:d5:2e:90:0a:3a:bb:23:df:c8:05:46:46:a4:b0:32:1a:
         21:f1:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:48 2026 by rpki-client