Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier:          H/DGgsq4uuK1zfWytuzx6f7Rey4om9ew8peNE7Ih5K8=
Subject key identifier:   0B:6B:CE:EC:AA:8D:14:95:0B:A1:55:52:46:72:B1:28:8A:35:70:8F
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer:       /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial:       0444
Authority info access:    rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number:          0443
Signing time:             Tue 12 May 2026 03:28:29 +0000
Manifest this update:     Tue 12 May 2026 03:28:28 +0000
Manifest next update:     Thu 14 May 2026 03:28:28 +0000
Files and hashes:         1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: GvijLIm8eXE7R4kfPxPGQaBW9xJFnMy2JL8TiHbRm7M=)
                          2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                          rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Validity
            Not Before: May 12 03:28:28 2026 GMT
            Not After : May 14 03:28:28 2026 GMT
        Subject: CN=6a029e5d-d2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:70:29:50:32:5f:cc:04:05:01:14:25:92:
                    26:c3:52:11:75:e9:52:82:16:e2:7b:f5:3a:6b:7c:
                    d2:36:3a:81:57:0a:3a:27:4b:44:5c:0a:97:8a:d1:
                    0d:79:36:c7:f0:7d:1e:9b:b2:f7:e1:dc:e7:e7:bf:
                    1b:78:d8:e4:42:b3:d6:91:f6:a2:08:50:0e:da:b1:
                    8b:4a:7e:0b:16:79:da:3b:d9:79:5e:ed:84:7a:e5:
                    32:8a:64:fc:2b:1e:6c:be:16:66:b1:38:7a:68:c6:
                    91:8b:eb:8c:3b:31:df:75:55:d6:88:7d:76:85:0e:
                    a6:9e:40:da:2e:42:4c:e0:1a:51:a7:fc:c3:40:f5:
                    5e:74:cc:7c:90:e3:d2:32:1e:b2:f2:f9:f7:89:61:
                    9e:5e:4f:c8:27:19:be:5a:6f:71:05:ff:9f:cd:1a:
                    f4:72:5c:fd:8b:d4:b8:c3:1c:a4:41:95:62:5c:08:
                    5a:8b:3b:46:89:46:40:9b:f2:57:8a:41:77:29:54:
                    9b:60:1f:82:97:54:fc:f6:dc:88:88:cb:3a:1b:ee:
                    59:41:32:af:d4:48:a0:b5:3c:4d:a2:be:47:1d:0e:
                    42:a7:be:e2:50:e9:0c:a1:62:30:4f:95:cd:5a:1f:
                    00:e2:62:8d:7c:ec:71:22:3a:53:2c:3b:5b:55:a6:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:CE:EC:AA:8D:14:95:0B:A1:55:52:46:72:B1:28:8A:35:70:8F
            X509v3 Authority Key Identifier:
                keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:48:96:3e:dd:02:70:23:11:98:63:73:16:8c:45:87:6b:
         4d:31:12:d3:d6:a8:6c:ae:6e:e3:75:cc:02:8f:a6:53:a9:f5:
         9a:90:6a:05:85:b3:04:2e:6a:de:28:52:86:fa:84:a4:3e:d2:
         c7:c6:54:e7:69:91:3d:ae:e9:41:d3:48:41:7d:18:21:a2:7f:
         75:a8:fc:6e:d6:68:5c:4f:97:d0:90:84:59:e8:44:81:91:0b:
         55:6a:76:b2:23:75:46:a9:98:1a:e7:f1:f6:87:7d:7b:58:bd:
         42:3e:41:05:72:3b:97:67:19:9f:56:54:9d:30:a7:13:df:4f:
         24:e6:83:6e:39:fe:67:59:d0:72:26:f7:d5:24:73:04:ac:a4:
         84:fc:34:9c:93:f7:95:24:c5:60:66:01:6c:21:f2:63:86:23:
         a6:6f:a7:97:0e:ea:da:42:b0:0c:15:e6:b6:96:52:75:cb:dd:
         63:d2:a7:e0:51:50:f4:84:9c:07:e4:9f:49:00:c1:5b:48:62:
         a0:ec:54:91:b9:9d:48:c9:b2:b6:6b:5c:be:90:0b:e2:02:1b:
         36:f3:f2:cc:ee:f6:24:d3:3f:e3:0a:31:c9:bb:8a:84:32:ba:
         4d:b5:1a:42:94:f0:b3:5e:74:18:af:36:86:31:91:84:8c:a4:
         e1:ab:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:31 2026 by rpki-client