Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          QN2bdlP+aVtAPCIR+gBnuB5zSY6yx5N+QoOynwDEvAU=
Subject key identifier:   0C:D1:C7:52:5C:8C:DB:B6:D5:58:5D:09:4A:40:44:BE:FE:F3:AC:B9
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       0A17
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          0A0C
Signing time:             Thu 26 Mar 2026 01:30:22 +0000
Manifest this update:     Thu 26 Mar 2026 01:30:21 +0000
Manifest next update:     Sat 28 Mar 2026 01:30:21 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: Lrhdk17hLWXi9UXmfGWulvUFWcnaOZos6jgebImZu2U=)
                          2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583 (0xa17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: Mar 26 01:30:21 2026 GMT
            Not After : Mar 28 01:30:21 2026 GMT
        Subject: CN=69c48c2e-b1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:d5:9f:ac:a5:71:23:a7:e4:ff:39:f5:78:
                    32:1f:11:c5:b9:55:ac:77:87:bb:07:8d:8f:27:01:
                    f7:50:2a:89:c8:79:7c:3b:62:cb:de:f3:17:4f:36:
                    17:7c:40:6f:45:1f:a0:85:49:b1:58:45:d0:8f:2f:
                    22:2e:33:f1:b3:39:ce:dd:9d:9a:da:e5:ba:fd:29:
                    db:3e:6e:a5:6c:15:0f:fb:95:c2:48:6c:5a:98:c7:
                    ee:1c:5a:09:86:b3:f9:3f:cb:5e:d3:82:b4:07:0d:
                    34:6e:e7:7d:b8:95:98:9c:f1:67:e6:2b:58:52:10:
                    6a:63:22:18:55:63:e7:2f:53:f1:58:6d:81:33:99:
                    4c:85:16:0f:20:d5:af:e1:77:07:25:f8:2a:58:0e:
                    39:1f:4a:df:12:ba:cd:c0:27:3d:15:9c:c9:94:0a:
                    97:21:98:e8:9d:fa:6d:f5:12:13:c8:02:e6:cc:09:
                    9a:cf:aa:78:a7:65:0f:da:a4:5b:ff:35:d6:15:41:
                    04:52:5d:74:3a:a7:4c:46:bf:e8:64:8a:4b:e2:0d:
                    ad:82:0d:2d:46:06:94:d8:0c:5c:f4:9b:af:ed:b5:
                    06:25:f8:0d:d0:ba:0e:54:78:0c:d3:76:19:7a:43:
                    2c:73:2c:32:94:ee:4c:02:53:3f:d2:2d:6d:1c:b2:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:C7:52:5C:8C:DB:B6:D5:58:5D:09:4A:40:44:BE:FE:F3:AC:B9
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:c2:59:90:6a:81:48:9a:2d:9b:2e:3e:ac:da:49:cd:84:
         a2:e9:f0:e9:65:9a:2a:1d:eb:6e:dd:8e:90:77:b1:05:80:32:
         f6:77:f2:79:06:08:42:54:a2:6e:41:13:6b:42:0d:e6:a4:f0:
         d7:c6:0a:63:48:cd:cd:75:bb:75:1a:40:7b:0a:78:71:61:37:
         68:ad:0b:3d:92:59:d2:98:f9:58:4d:01:d7:46:33:de:79:05:
         99:b0:3b:42:c9:fe:61:09:4b:fc:2c:59:ec:c7:5a:e1:c8:16:
         e0:91:41:12:78:97:45:57:99:e4:30:1f:5c:c0:30:ca:92:18:
         82:3d:42:bd:1a:7d:2d:4e:c6:cf:e8:49:96:63:4a:35:35:2d:
         d4:c5:ec:5b:42:c4:57:27:a8:0e:25:7a:30:92:d7:ea:67:cb:
         f5:ba:26:26:f5:ca:70:bc:27:97:02:79:7b:ff:f1:37:1a:99:
         b0:50:81:e7:d7:eb:e8:ff:15:9e:f0:9f:b4:27:07:ec:d8:67:
         cb:78:08:5b:22:4a:5f:da:fd:49:53:a0:78:9a:7a:2d:c3:9c:
         0f:a1:88:a8:08:69:46:71:32:af:dd:b4:9a:4f:17:f2:66:ed:
         78:b2:95:07:0d:f0:fc:6c:70:2b:ac:8b:1d:16:1c:6a:e7:a2:
         e3:e3:1a:ba
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICChcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUZBMzZBUjExMC8GA1UEBRMoQzVGODYxNDhBNDQxMTZBNjI5MkMwMDhBMDlCNEU3
NUI4QkQ5REExRDAeFw0yNjAzMjYwMTMwMjFaFw0yNjAzMjgwMTMwMjFaMBgxFjAU
BgNVBAMTDTY5YzQ4YzJlLWIxYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrotWfrKVxI6fk/zn1eDIfEcW5Vax3h7sHjY8nAfdQKonIeXw7Ysve8xdP
Nhd8QG9FH6CFSbFYRdCPLyIuM/GzOc7dnZra5br9Kds+bqVsFQ/7lcJIbFqYx+4c
WgmGs/k/y17TgrQHDTRu5324lZic8WfmK1hSEGpjIhhVY+cvU/FYbYEzmUyFFg8g
1a/hdwcl+CpYDjkfSt8Sus3AJz0VnMmUCpchmOid+m31EhPIAubMCZrPqninZQ/a
pFv/NdYVQQRSXXQ6p0xGv+hkikviDa2CDS1GBpTYDFz0m6/ttQYl+A3Qug5UeAzT
dhl6QyxzLDKU7kwCUz/SLW0csv3XAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUDNHH
UlyM27bVWF0JSkBEvv7zrLkwHwYDVR0jBBgwFoAUxfhhSKRBFqYpLACKCbTnW4vZ
2h0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGQTM2L0FENDNGOTA2ODEzOTExRTk5MjhCMzgxQUY4QUVBMjI4L3hmaGhT
S1JCRnFZcExBQ0tDYlRuVzR2WjJoMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hmaGhTS1JCRnFZcExBQ0tDYlRuVzR2WjJoMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUZBMzYvQUQ0M0Y5MDY4MTM5MTFFOTkyOEIzODFBRjhBRUEy
MjgveGZoaFNLUkJGcVlwTEFDS0NiVG5XNHZaMmgwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl1sJZkGqBSJotmy4+rNpJzYSi6fDpZZoq
Hetu3Y6Qd7EFgDL2d/J5BghCVKJuQRNrQg3mpPDXxgpjSM3Ndbt1GkB7CnhxYTdo
rQs9klnSmPlYTQHXRjPeeQWZsDtCyf5hCUv8LFnsx1rhyBbgkUESeJdFV5nkMB9c
wDDKkhiCPUK9Gn0tTsbP6EmWY0o1NS3UxexbQsRXJ6gOJXowktfqZ8v1uiYm9cpw
vCeXAnl7//E3GpmwUIHn1+vo/xWe8J+0Jwfs2GfLeAhbIkpf2v1JU6B4mnotw5wP
oYioCGlGcTKv3bSaTxfyZu14spUHDfD8bHArrIsdFhxq56Lj4xq6
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:08 2026 by rpki-client