Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
File:                     rwNfxJBpXa-3lvnHN19zijES_Ds.mft (raw, json)
Hash identifier:          0kaXAHNmpcptrNpRH7P2V3w3hEYZRSJ7PtAw+O5tniE=
Subject key identifier:   AE:31:3C:5E:0F:D2:8A:42:6B:84:6D:39:D6:A3:8D:82:4B:CE:E6:93
Authority key identifier: AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
Certificate issuer:       /CN=F36A2303AR/serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Certificate serial:       08FC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
Manifest number:          08F4
Signing time:             Thu 26 Mar 2026 01:54:52 +0000
Manifest this update:     Thu 26 Mar 2026 01:54:51 +0000
Manifest next update:     Sat 28 Mar 2026 01:54:51 +0000
Files and hashes:         1: rwNfxJBpXa-3lvnHN19zijES_Ds.crl (hash: 3cXi4kAQ87lFQLwm2EP4t5nfIw/X5SR4DyqYxnC1QeU=)
                          2: 21886F0EB6A911EA91807C30F8AEA228.roa (hash: TV2ABY5r46tKbY4VJ67UTwENeFi5pRfNFMuvJZMh1Ig=)
                          3: F9049C56B6A811EAB7AD5330F8AEA228.roa (hash: puJnHm1yKIQzNnKozYu1/czI3lgLvuYWXkZKSjpCIAg=)
                          4: 66014E80B6A911EA8CCCD130F8AEA228.roa (hash: Acfk0sMfwafASajx4yozyWp5SI9yDQ3iqQnRyzzNIjk=)
                          5: C826A9BACBE011EA8AB11F1BF8AEA228.roa (hash: S2bChUKGsfQAiJQ183YhdQy2q5jddxkEYopSyi4QCaQ=)
                          6: 443B4FD0B6A911EA8BB19A30F8AEA228.roa (hash: DtlptNQu9HFFByv5u/iYfT6/AVvlDXCMfH1RWr1fnig=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                          rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AR, serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
        Validity
            Not Before: Mar 26 01:54:51 2026 GMT
            Not After : Mar 28 01:54:51 2026 GMT
        Subject: CN=69c491ec-97e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:9d:fc:f2:2e:b9:7c:d1:b3:a5:df:59:27:
                    6e:59:06:89:56:8f:ff:c8:7d:2e:c1:90:72:dd:56:
                    36:4f:f0:32:2e:95:36:0e:25:37:d6:01:40:83:50:
                    1f:dd:3e:eb:dd:36:d5:a9:f6:1d:cf:62:3f:98:73:
                    bf:7c:1d:2e:65:9e:fa:9d:67:7b:3d:a8:01:3c:24:
                    f0:35:e8:8e:89:d7:22:c9:20:a3:7a:f8:1a:6c:60:
                    53:8c:2e:c9:2f:90:e5:49:cd:2a:51:cc:af:28:2c:
                    ea:7a:e4:f2:5e:91:bf:ff:64:61:a1:52:15:ab:4c:
                    13:5a:0f:14:9c:d2:30:ea:42:49:e2:49:31:fc:7c:
                    81:c9:ce:3c:1f:73:28:63:0c:28:57:4f:35:c9:93:
                    93:ea:43:bd:12:6d:27:0c:5c:e0:69:0c:e5:9c:40:
                    8c:1d:07:d7:47:82:1f:6c:3c:bc:8f:ac:9f:98:0c:
                    07:45:a6:b6:5c:ac:27:3b:2d:7e:84:2a:06:37:ff:
                    dd:c9:d5:4c:45:99:bb:4d:f6:d6:a6:43:65:72:ed:
                    8a:36:b6:25:e3:6f:3a:a3:9f:7c:f3:42:5d:f0:73:
                    6b:79:ff:1b:04:32:42:28:d4:fc:4a:b1:46:83:23:
                    dc:6f:f8:95:ec:4c:85:8d:10:a4:1f:9f:6f:39:fc:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:31:3C:5E:0F:D2:8A:42:6B:84:6D:39:D6:A3:8D:82:4B:CE:E6:93
            X509v3 Authority Key Identifier:
                keyid:AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:51:84:e2:62:fc:c4:7b:7d:05:6b:85:54:e4:83:99:87:fb:
         1e:ab:54:f1:a2:5f:9b:10:d5:50:1b:06:e6:82:b4:28:5d:c7:
         89:23:1c:63:6e:2a:a2:0c:36:6a:74:b3:d6:34:ab:d1:2f:5e:
         62:33:ac:58:d0:ee:b3:25:1e:ba:79:f0:77:94:bc:72:5b:a0:
         f3:65:b5:ea:62:f1:76:7f:52:c6:90:df:34:47:00:be:51:da:
         5b:49:01:09:fc:47:fe:02:47:52:a8:cb:d6:2d:7b:a5:53:f3:
         a9:32:2e:c7:da:c8:6a:dc:a6:93:c7:cc:f8:f8:07:90:bc:e5:
         c4:80:3a:f3:89:0e:6b:90:8a:06:aa:bc:74:66:81:93:94:29:
         09:a9:cf:da:a5:5d:08:7f:ea:8d:de:0e:e4:5c:04:91:b7:5c:
         5d:ec:86:b9:80:33:71:80:1d:96:62:70:56:93:39:f6:3f:ec:
         ac:28:b2:5c:4b:50:78:e9:c1:97:6b:df:f4:0a:c1:6f:06:4c:
         7c:5f:b9:69:5d:7c:27:0b:ea:62:8d:0c:c2:c1:6a:55:27:b2:
         58:55:0d:05:38:7f:86:ed:65:1f:6d:40:d8:7e:76:15:76:4b:
         19:f0:83:16:df:45:fe:e2:7b:13:0c:0a:6c:88:72:3d:28:d1:
         41:45:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:30 2026 by rpki-client