Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
File:                     JLpRXiIce3jm_t013ct_c3pPMiE.mft (raw, json)
Hash identifier:          +5U0T7NgVL5TR5IFcmQMivbVZRfpJHZnDhJZUmReKww=
Subject key identifier:   86:EF:9B:4C:E1:9C:90:73:F3:A2:2D:63:9F:11:CC:89:C4:7D:48:F8
Authority key identifier: 24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21
Certificate issuer:       /CN=F36A6EA0AR/serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
Certificate serial:       74
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
Manifest number:          73
Signing time:             Wed 25 Mar 2026 06:22:13 +0000
Manifest this update:     Wed 25 Mar 2026 06:22:12 +0000
Manifest next update:     Fri 27 Mar 2026 06:22:12 +0000
Files and hashes:         1: JLpRXiIce3jm_t013ct_c3pPMiE.crl (hash: gbE2veJ4cF0LM05ke7e65erPv/Dk2azrbBeV5GwWX4Q=)
                          2: 60AB4C7CD34C11F0BCAFF7AFDAE4EC9C.roa (hash: uLF46C2w7GxR+RjRekTp0NOCaiBr/IY0Xs0woPFGw7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                          rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 06:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AR, serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
        Validity
            Not Before: Mar 25 06:22:12 2026 GMT
            Not After : Mar 27 06:22:12 2026 GMT
        Subject: CN=69c37f15-8198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:57:09:3c:85:a9:ef:f5:75:d7:25:f2:e2:
                    42:c9:2d:1e:47:ac:56:59:0a:ec:86:ef:f6:e3:78:
                    e5:1e:0f:9a:c6:eb:94:54:5a:9c:73:7c:cd:9a:88:
                    94:ff:e2:ed:47:00:36:69:0f:85:e1:9c:bb:20:9f:
                    b8:aa:a6:3e:c3:f2:8d:7b:68:90:a9:27:c7:ce:93:
                    8d:8f:6a:a8:2a:2d:d3:e5:19:ad:c3:d9:75:2f:17:
                    93:3d:d8:05:c0:30:5d:fc:9f:5a:cf:38:90:7e:6c:
                    75:e6:49:f3:05:d1:7a:6a:37:78:94:23:05:87:61:
                    b0:95:fd:1c:35:d7:6e:dc:31:62:b4:42:cc:87:d7:
                    c2:8c:7c:20:44:58:0f:84:d7:06:28:ce:20:a7:1d:
                    82:21:f8:91:36:29:91:34:d0:78:5e:55:4b:19:26:
                    fb:1c:c4:77:6f:91:c7:70:84:8e:96:fa:62:c0:b2:
                    95:03:06:d8:c9:e8:1a:f6:d0:29:03:ac:33:db:20:
                    ab:8a:72:8c:a8:d8:c5:ab:de:1b:9a:13:15:62:0d:
                    c6:68:64:b4:00:ad:f2:a9:27:e5:0a:d7:c0:e9:e0:
                    0e:32:f1:b5:46:39:34:86:94:33:6d:d7:2b:fc:ad:
                    9f:e8:40:0e:41:7e:ea:2c:c4:3d:2d:36:5f:bb:72:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EF:9B:4C:E1:9C:90:73:F3:A2:2D:63:9F:11:CC:89:C4:7D:48:F8
            X509v3 Authority Key Identifier:
                keyid:24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6f:a1:32:48:bf:c4:20:59:ef:83:d0:b9:7d:20:49:5e:da:
         95:bc:63:48:2a:0f:3f:8a:3e:9d:9d:08:59:49:c1:28:c3:f8:
         c6:b6:f9:f5:09:c0:71:3b:f4:46:9c:2b:4b:73:ea:72:09:05:
         b7:88:75:fe:19:83:be:ac:ac:92:8a:3d:ca:07:34:2a:ca:5d:
         30:3a:be:7f:67:d1:29:12:a3:86:c7:61:69:12:dc:be:7a:f1:
         c9:68:d7:5b:d0:af:ca:20:8a:cd:c7:6a:eb:c9:46:4c:3a:39:
         ab:4a:a7:9f:d2:e2:e2:26:bf:eb:99:e8:de:c9:6b:94:33:f9:
         5e:f6:ba:9f:2f:5d:16:9a:15:e7:b5:ef:16:b8:f6:97:34:08:
         6a:b6:84:13:e4:a0:2b:ed:d7:ed:4f:26:af:44:40:63:66:af:
         ce:cf:87:f4:f6:5d:03:ff:a4:fe:7e:80:43:54:c3:ec:60:2e:
         cd:dd:4d:5e:12:21:ab:69:4f:af:9f:ae:92:b0:e6:7f:6b:4f:
         48:91:8d:13:dd:c4:9a:1c:a3:19:2d:20:87:13:90:0d:5e:e5:
         28:9c:41:29:9f:c1:e0:f8:7c:16:ca:ca:f4:69:06:ac:f1:d7:
         e5:dd:05:3d:47:25:17:49:d0:5a:1d:0b:c7:1a:9a:f5:35:79:
         e7:bb:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:26 2026 by rpki-client