Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          Mt966EB2q/hIErqYN8CIwqq76Y2mwDp8DzPxi4Ndi2g=
Subject key identifier:   4B:79:38:EA:2B:B7:54:9B:62:4E:EE:A8:AE:5F:FF:11:7F:8E:8C:8C
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       06A2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          06A1
Signing time:             Wed 25 Mar 2026 02:42:57 +0000
Manifest this update:     Wed 25 Mar 2026 02:42:56 +0000
Manifest next update:     Fri 27 Mar 2026 02:42:56 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: eZIYGjmU9rMng9kd2MSVWqamM8rmFDxyLMsoQR+Zzd8=)
                          2: C93FE84E002211F184675EEADAE4EC9C.roa (hash: TnE7/LRtwIE2mvtxTz48ANwLuGsO5DbiYWo+sAJoECs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Mar 25 02:42:56 2026 GMT
            Not After : Mar 27 02:42:56 2026 GMT
        Subject: CN=69c34bb1-4de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:1a:83:e8:d9:a3:0a:29:51:d7:f3:62:3f:
                    d1:53:3c:fe:5f:f2:19:fc:c3:e0:51:b0:1a:3c:41:
                    34:63:08:6f:4d:12:4b:7a:70:00:58:99:ba:26:8a:
                    cd:5d:54:7a:09:90:87:05:b9:43:b0:9e:4e:41:b4:
                    e6:ad:f2:3d:70:f3:14:33:86:f8:bf:0f:f7:b4:b4:
                    2d:12:bb:b4:bb:3f:8b:0c:6e:dc:05:f1:fa:09:70:
                    37:ac:5f:5b:86:db:4c:18:4d:3c:8f:04:94:eb:3d:
                    84:c6:1c:86:f8:05:1b:ee:da:38:5c:26:cc:30:a1:
                    e4:e2:ff:f0:b8:35:90:53:75:22:30:1b:88:a6:aa:
                    09:23:24:f7:e9:7f:38:89:58:5a:00:ab:5e:4b:ee:
                    75:9e:4d:91:37:a6:95:30:48:25:e6:96:8b:c3:cc:
                    6f:bd:88:ca:b8:a6:0b:63:d8:17:6d:4a:07:e1:20:
                    85:7b:93:9e:43:02:4a:f7:dd:d8:6a:54:ad:7e:99:
                    fe:53:85:04:b8:d2:46:97:f7:93:13:4d:47:b1:2d:
                    0d:b9:0e:95:81:a0:7e:1b:00:2d:92:08:48:24:eb:
                    f8:37:c4:b8:60:ab:e1:39:60:7c:94:cb:42:f2:45:
                    81:51:86:5a:39:8a:c9:55:37:d6:80:ca:6c:8f:88:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:38:EA:2B:B7:54:9B:62:4E:EE:A8:AE:5F:FF:11:7F:8E:8C:8C
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:76:14:75:b1:19:4c:c9:53:e8:14:d0:86:21:68:25:b8:
         d7:80:ab:64:49:7b:81:90:bc:99:4a:b3:12:9f:69:cb:cd:bb:
         11:75:56:ae:67:00:5c:d1:62:9e:86:89:f1:70:6c:1b:57:b8:
         8c:01:72:37:99:6b:9a:4d:06:6e:9a:9c:3a:74:83:c5:8f:86:
         8d:59:db:2b:3b:e5:b8:09:65:63:ed:cb:49:1f:26:5e:e2:90:
         7d:df:7b:15:88:24:02:bf:c9:07:a6:43:89:b4:4a:73:a8:02:
         b7:ef:2a:84:1e:48:2c:1b:27:99:90:22:07:4a:1c:2d:5b:aa:
         3c:cf:28:64:17:3e:12:d3:ae:f0:c9:6e:3b:2c:e4:88:4e:e1:
         e4:91:33:5d:d0:4b:c8:93:43:25:d0:96:b7:9c:e5:51:01:73:
         24:a2:30:8c:4e:99:f2:99:78:0c:e9:fb:27:9e:2d:21:b0:ab:
         46:fa:ad:ae:8c:b5:23:8c:a2:d3:c0:b3:04:e8:cd:6a:08:37:
         a9:a4:b8:76:7e:96:33:d5:4f:c3:67:34:0e:4a:50:74:9e:7c:
         53:01:9a:ed:25:75:f7:fd:20:c1:2a:f4:2e:11:4e:6a:4d:5b:
         69:65:bf:ab:9b:96:40:18:dc:aa:3c:79:37:2b:fe:95:3a:35:
         16:57:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:03:11 2026 by rpki-client