Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.mft (raw, json)
Hash identifier:          UwCo2N3ccoPr0FBCxRohXSvdBOXtsUjJxemv21g7eDg=
Subject key identifier:   F3:A4:4B:1F:7A:5B:A5:72:F0:BE:90:9D:E4:67:D5:67:18:2D:39:8D
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Certificate issuer:       /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial:       0221
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
Manifest number:          0220
Signing time:             Wed 13 May 2026 04:41:04 +0000
Manifest this update:     Wed 13 May 2026 04:41:04 +0000
Manifest next update:     Fri 15 May 2026 04:41:04 +0000
Files and hashes:         1: jho3RHX7X1BwyGbGDdVeiurPcXM.crl (hash: UbM2lf2sfodAvDkP93PDOz77cTKWRWiboKYWUaU8Kuk=)
                          2: 77A53CFAAD8011EF8D542C9E762E951A.roa (hash: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                          rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AR, serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Validity
            Not Before: May 13 04:41:04 2026 GMT
            Not After : May 15 04:41:04 2026 GMT
        Subject: CN=6a0400e0-c7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:56:50:22:dc:a1:ec:df:5e:bb:8a:aa:87:
                    7a:9e:91:a3:d1:d7:bc:86:78:3e:19:20:bc:4d:b3:
                    b4:f9:fb:ad:5c:9e:9c:a0:70:c5:c6:b2:ca:e4:1e:
                    3f:b6:f6:70:b6:13:21:18:bb:ea:f3:4b:d8:37:e3:
                    32:40:54:93:9e:9a:41:0c:ac:45:64:ce:6d:d8:08:
                    60:2f:4f:1e:85:19:6f:c0:b4:7b:52:1c:45:5e:1b:
                    08:1d:3c:cc:23:30:8f:04:84:e5:90:e1:71:70:78:
                    e2:4a:a1:dc:8c:cd:ee:5b:0b:35:43:89:04:2b:17:
                    39:7c:9c:6e:3d:a6:fe:36:90:c5:a1:15:c2:75:a6:
                    d2:17:1f:32:f6:f4:75:c5:99:0f:ef:b7:7e:8d:9e:
                    ea:df:fb:1b:2d:61:97:d6:13:4f:81:2d:14:b6:ad:
                    7a:17:8e:40:79:33:8f:89:26:32:96:01:27:19:ed:
                    41:84:6c:18:5c:f8:ff:74:85:85:74:6d:32:7a:5e:
                    41:ff:50:98:6a:e9:46:5f:3d:f6:f4:fd:0d:50:61:
                    81:c5:da:50:be:a2:87:66:38:be:3f:c1:3a:ea:45:
                    fb:d3:4d:1a:19:87:40:27:c6:b6:82:9d:88:d9:07:
                    76:6b:f0:f6:e5:b8:10:47:0e:c4:ed:e2:99:81:1f:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:4B:1F:7A:5B:A5:72:F0:BE:90:9D:E4:67:D5:67:18:2D:39:8D
            X509v3 Authority Key Identifier:
                keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ce:fc:8d:25:33:d5:14:52:21:39:ed:42:07:c9:22:b2:90:
         a6:81:ea:8f:0c:f4:55:b2:43:de:4e:46:8e:39:50:fd:a7:99:
         ac:fb:4d:df:60:c8:20:5f:ad:52:44:80:07:a8:39:13:2a:6c:
         15:9d:0a:c4:b5:d5:d0:61:cf:2b:8e:4f:5e:19:d0:f1:ec:3e:
         44:da:b4:15:62:06:ed:a5:f2:a7:6f:81:89:6d:32:c2:d0:1d:
         9e:8d:03:5b:ed:60:21:74:a7:a1:fb:96:ad:79:72:60:99:ef:
         eb:de:ac:a0:c6:59:bf:34:cd:37:9a:83:76:8a:13:86:ec:83:
         98:74:d2:39:60:f5:11:4f:1d:bd:74:12:87:d6:88:54:b5:9a:
         a1:1f:d2:3b:dd:42:51:a8:08:d8:bb:4d:f5:29:68:df:aa:d3:
         5f:2c:80:ac:fe:bd:f1:f2:19:c2:9a:38:e5:67:c4:d2:1e:7c:
         4e:49:d7:f1:55:50:28:cd:54:27:ea:30:33:cc:11:dc:b7:0e:
         1e:dc:09:c8:c7:c2:e6:bc:3c:5d:27:ab:ce:d4:6f:4e:24:32:
         31:e5:6e:c7:3a:ab:58:21:79:1c:39:47:a8:de:4a:a9:0e:5f:
         0c:f7:f1:1e:be:c5:3a:0b:e1:1e:0e:10:95:19:47:c4:4e:fe:
         10:ee:7c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:50 2026 by rpki-client