Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
File:                     XuBLf4yg0sW2I59B08fM98XuNU0.mft (raw, json)
Hash identifier:          oJ2SfnS4cZ0GGG7gVMDi/lnECKHEHqPgldhkv52/qyc=
Subject key identifier:   63:85:E0:A2:8E:C3:2F:2E:27:C5:BA:2E:A9:5B:0B:8C:A5:BF:ED:02
Authority key identifier: 5E:E0:4B:7F:8C:A0:D2:C5:B6:23:9F:41:D3:C7:CC:F7:C5:EE:35:4D
Certificate issuer:       /CN=F369974AAR/serialNumber=5EE04B7F8CA0D2C5B6239F41D3C7CCF7C5EE354D
Certificate serial:       41
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XuBLf4yg0sW2I59B08fM98XuNU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
Manifest number:          3F
Signing time:             Fri 24 Jul 2026 05:39:31 +0000
Manifest this update:     Fri 24 Jul 2026 05:39:30 +0000
Manifest next update:     Sun 26 Jul 2026 05:39:30 +0000
Files and hashes:         1: XuBLf4yg0sW2I59B08fM98XuNU0.crl (hash: nsh1F9PDmu4m+g2Un0q0KpeIKbnjyaJ1WHwhjPPMgXE=)
                          2: 975437D25B3911F18053D3A9CE1D38B0.roa (hash: hFEADkUreZnc+ySAiY55VjIk9lOVBC1tNBubIFk+Gdo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
                          rsync://rpki.afrinic.net/repository/arin/XuBLf4yg0sW2I59B08fM98XuNU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369974AAR, serialNumber=5EE04B7F8CA0D2C5B6239F41D3C7CCF7C5EE354D
        Validity
            Not Before: Jul 24 05:39:30 2026 GMT
            Not After : Jul 26 05:39:30 2026 GMT
        Subject: CN=6a62fa93-7b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9a:dd:31:8c:82:77:a4:49:82:da:b4:6b:a0:
                    9e:24:53:ee:e8:a1:83:09:16:e3:e4:9f:50:0d:4d:
                    96:9b:e2:e4:3e:a0:b9:bf:40:31:a7:c2:c5:95:e0:
                    fe:b5:d6:4d:a3:de:b3:dd:b7:96:78:d8:ed:ee:91:
                    41:62:48:d1:9d:76:26:17:06:d1:be:08:ca:d3:d2:
                    7f:ed:c0:be:38:3a:59:74:ba:8f:b4:f8:23:54:a5:
                    08:3a:2e:f9:28:f5:1f:e1:b6:fa:8c:1a:dc:a3:33:
                    d2:a9:f1:98:05:e8:06:e6:c4:94:87:33:7a:5b:2f:
                    5c:a7:0f:03:5a:2b:bb:3b:9c:ff:e7:bc:79:e3:c5:
                    61:ee:4e:12:8f:1f:72:05:76:e0:8c:39:47:76:2d:
                    3f:9c:28:87:7f:29:b4:cb:b4:40:97:71:0e:9a:e5:
                    4c:0d:73:38:20:9e:2f:16:67:67:ed:35:6a:81:47:
                    4b:a0:fc:db:4f:f0:47:19:23:35:c9:24:0e:5d:62:
                    83:37:70:86:3a:5b:16:cb:c9:64:67:c8:b9:23:0d:
                    66:f7:ad:44:91:f6:ef:0a:ff:13:ad:95:37:b7:4a:
                    1e:65:0a:13:ba:a2:86:9f:3c:f5:8f:97:c1:5b:4d:
                    6d:ed:30:80:62:fe:1f:ed:d1:ee:57:22:5c:6e:09:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:85:E0:A2:8E:C3:2F:2E:27:C5:BA:2E:A9:5B:0B:8C:A5:BF:ED:02
            X509v3 Authority Key Identifier:
                keyid:5E:E0:4B:7F:8C:A0:D2:C5:B6:23:9F:41:D3:C7:CC:F7:C5:EE:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XuBLf4yg0sW2I59B08fM98XuNU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6d:da:26:dc:51:3d:e8:b6:1a:ef:b0:12:79:64:4f:35:de:
         9c:06:f2:7f:83:67:0d:19:d0:45:de:e2:1a:d6:40:cd:73:8a:
         d1:ad:77:38:12:73:a4:ac:65:d1:a7:db:2f:f6:42:bb:76:49:
         74:a7:6c:a0:19:5b:6c:56:85:08:bc:bd:26:01:28:d1:a1:8e:
         f4:99:5f:e8:6a:b5:a0:a0:fb:11:f1:bc:14:bb:d4:37:f8:80:
         6d:7a:5b:af:1c:af:6c:2b:90:5f:2d:3b:48:ad:e1:1b:8b:16:
         25:9d:da:a1:3e:b7:ed:02:87:8d:65:59:97:6e:6d:93:b6:18:
         51:3d:8c:d1:e6:f3:b1:41:39:e5:0d:5e:4d:67:54:b3:cc:e4:
         b7:aa:ea:9d:de:79:b8:c7:7c:80:f6:82:c2:68:64:34:64:96:
         cb:72:51:d7:f0:c6:9a:b6:49:76:0e:d8:74:52:5d:86:c8:d7:
         1f:60:3d:10:cc:e3:54:6c:36:05:3f:cd:78:95:e0:b4:21:fd:
         17:4b:ec:b9:bb:f2:aa:e2:6b:90:54:c3:53:46:6c:6b:a8:95:
         d4:a5:dd:83:3b:ce:51:5e:03:8f:81:0b:eb:93:05:18:b0:17:
         97:e8:c4:21:42:44:87:e2:38:68:68:b8:74:0f:44:25:6f:8e:
         d1:99:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:33:13 2026 by rpki-client