Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
File:                     0sTzVYe07S0EZPKfkswmt10TiZE.mft (raw, json)
Hash identifier:          R1kzC2mLsdQhTeaqKKRG/7ePAg2qSkhTyjedNpgAoz4=
Subject key identifier:   33:3D:54:B0:19:6E:46:9C:34:B7:92:5F:79:A1:46:AE:39:6A:7C:74
Authority key identifier: D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91
Certificate issuer:       /CN=F369859BAR/serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
Certificate serial:       02D0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
Manifest number:          02D0
Signing time:             Wed 13 May 2026 04:14:09 +0000
Manifest this update:     Wed 13 May 2026 04:14:08 +0000
Manifest next update:     Fri 15 May 2026 04:14:08 +0000
Files and hashes:         1: 0sTzVYe07S0EZPKfkswmt10TiZE.crl (hash: ehj2AKuAgEPSnMz3GF0ofbR9kubAijPG+QP0AAxcUZo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                          rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAR, serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
        Validity
            Not Before: May 13 04:14:08 2026 GMT
            Not After : May 15 04:14:08 2026 GMT
        Subject: CN=6a03fa91-29c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:1b:08:3f:f3:92:0b:17:82:ca:a4:66:75:
                    09:4c:04:ce:4e:82:83:e6:b1:25:da:d7:c6:b5:04:
                    c3:6a:2b:c1:1c:7a:6e:d4:99:b0:ea:e4:44:75:d1:
                    2b:88:b1:50:07:93:7b:a0:f0:55:96:08:b4:46:5c:
                    83:0c:98:aa:bd:a4:ed:92:c0:12:c4:65:e4:18:b7:
                    87:0a:32:96:ac:03:21:2a:8c:d6:31:57:f1:dc:fd:
                    b1:7d:df:07:39:41:a9:50:67:42:97:87:dd:91:3f:
                    c5:f8:cf:88:18:b8:8c:10:b3:2f:ed:8f:ba:8d:cb:
                    4a:51:8b:86:27:2e:b0:19:3c:9e:c6:b5:9c:45:25:
                    e2:d7:be:be:34:c0:42:69:46:00:9a:14:b9:93:20:
                    26:27:a0:77:bf:43:22:d8:97:b7:d8:e4:90:c0:f3:
                    ee:88:74:7e:d6:59:c4:c0:cd:39:6d:fb:d0:11:ce:
                    c7:7d:ff:68:14:00:ae:08:22:9f:a5:4a:6e:68:12:
                    12:da:92:06:5b:1d:27:40:0c:19:c0:65:85:a1:3a:
                    9c:75:65:24:e5:95:f9:a5:7d:ad:4e:65:3d:5d:cf:
                    7a:e5:f5:a8:06:5c:5c:90:e3:79:5c:8b:46:48:99:
                    d6:d7:75:18:21:67:ac:2e:33:2a:53:45:57:83:7c:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3D:54:B0:19:6E:46:9C:34:B7:92:5F:79:A1:46:AE:39:6A:7C:74
            X509v3 Authority Key Identifier:
                keyid:D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:fa:59:f1:f3:cd:76:ae:46:bd:b5:e7:98:65:72:e5:22:
         cf:f0:14:49:eb:6d:43:bb:9f:40:ba:10:8d:97:64:62:c9:14:
         32:32:b1:29:fb:14:d9:c5:ea:7d:c3:98:47:70:fc:45:10:cd:
         99:f5:19:f6:df:81:ab:f2:ca:ff:6b:d2:c4:6e:f8:de:91:78:
         02:da:fe:70:92:ae:4b:34:17:07:0e:50:6a:0d:83:0a:06:8a:
         26:f5:76:db:e0:fa:86:58:ec:43:5a:59:88:78:c4:7e:3b:7e:
         63:63:f5:f9:51:2c:a1:3e:bc:8b:bd:d8:48:e0:0c:71:9b:a4:
         f8:02:80:c5:4b:c8:21:2d:bc:8f:02:38:cc:94:e0:fa:7b:26:
         90:59:9a:15:5b:41:bd:9e:9c:a6:31:d1:d0:f1:a7:c9:f2:d1:
         02:0f:a9:61:98:e8:b9:a7:7e:05:6c:19:f1:75:a4:45:c9:39:
         77:27:79:3f:5e:78:a8:45:51:01:90:79:e7:b4:63:8c:20:92:
         ad:0b:57:f9:80:44:5a:54:5d:49:67:0b:e8:0b:5b:3e:1c:f2:
         ef:6c:b8:4d:c2:7c:1d:96:ce:07:a6:29:ed:6f:f2:a4:19:ec:
         3c:d1:00:bb:b1:28:c9:d3:fb:ad:d8:db:72:70:74:be:d6:e5:
         3b:4b:4f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:24:47 2026 by rpki-client