Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
File:                     35Ti668FVkXR68M9dxpKkrH1obo.mft (raw, json)
Hash identifier:          +fyIM8nkKG8kA2mfwI3jpfDUpSrzGBEa7uD6MkraqeE=
Subject key identifier:   DF:06:C3:14:DF:4F:D1:05:9B:A2:DB:EB:D7:0C:1F:65:38:49:45:BE
Authority key identifier: DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Certificate issuer:       /CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Certificate serial:       0532
Authority info access:    rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
Manifest number:          0531
Signing time:             Wed 25 Mar 2026 03:28:56 +0000
Manifest this update:     Wed 25 Mar 2026 03:28:55 +0000
Manifest next update:     Fri 27 Mar 2026 03:28:55 +0000
Files and hashes:         1: 35Ti668FVkXR68M9dxpKkrH1obo.crl (hash: /gdB0/xU9viHx/3jkBg+woBpxaFjl4m92Ts6RwHXBUw=)
                          2: 22DB7C2C343B11ED93BC198DF1222468.roa (hash: MYN14FUjceVL/wAPb2hSaQa3Lgxp0KPz1gwNzEYrDaM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                          rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4943AR, serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
        Validity
            Not Before: Mar 25 03:28:55 2026 GMT
            Not After : Mar 27 03:28:55 2026 GMT
        Subject: CN=69c35678-60a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:f9:d3:88:f1:34:41:aa:29:39:24:d7:40:
                    c3:6c:ec:ff:cb:62:49:02:8c:e6:93:2e:98:5c:1c:
                    cc:02:fb:df:0c:fc:d4:c2:fc:cb:9f:f7:92:d9:7b:
                    f2:dd:0a:a4:e4:4f:a9:88:eb:f0:fa:30:2e:8f:7e:
                    b4:f5:33:d8:2d:dd:f4:64:e9:f6:39:e2:4e:20:ed:
                    16:22:fc:77:e7:31:8a:ce:c0:f8:91:52:ee:60:81:
                    75:16:3e:0f:38:1a:a6:db:f3:84:e2:67:e5:39:c8:
                    29:49:ca:8d:3c:17:99:d4:ac:a1:6e:49:d5:e4:e0:
                    d9:d0:e6:59:8d:e1:c7:ef:c9:7e:17:57:c5:d2:fd:
                    20:e9:0c:2a:b1:83:dd:61:42:86:05:7e:6f:85:ec:
                    3a:ca:ac:ed:e0:af:fe:2c:fc:58:f6:2f:38:f9:d5:
                    d3:ac:20:a6:df:0e:63:07:94:1c:34:8d:45:35:a3:
                    21:67:a9:23:63:48:73:77:2a:1f:4d:48:3f:b4:c0:
                    56:98:ed:63:75:d1:53:d7:4f:fb:db:46:29:88:c1:
                    92:1b:58:ad:77:79:99:22:72:17:27:80:2b:fe:74:
                    70:f2:92:db:71:bc:5f:ef:f8:f1:f8:18:34:8b:22:
                    b5:e1:90:25:4f:86:f1:0d:c4:51:c4:e0:7c:bf:50:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:C3:14:DF:4F:D1:05:9B:A2:DB:EB:D7:0C:1F:65:38:49:45:BE
            X509v3 Authority Key Identifier:
                keyid:DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1f:00:f5:94:fd:5a:b6:bb:57:1a:83:31:d2:6c:49:b4:ef:
         bb:31:d3:2c:b8:92:be:5b:bc:86:c5:8e:cf:01:4e:91:0f:a7:
         72:93:da:1a:b6:46:ac:81:1d:d8:7b:10:74:10:2e:70:2b:63:
         a6:ca:5e:9c:b5:30:c1:67:44:da:b8:7e:dd:14:f1:dc:7d:0c:
         7b:15:02:d0:96:35:c3:ab:00:45:52:f4:7c:c1:b7:a6:45:65:
         fe:7a:72:42:06:7d:7e:34:01:f1:b2:6a:e1:5e:b9:ac:3b:4c:
         d0:c7:2b:6c:0e:d8:5a:dd:92:aa:1f:c2:67:4d:de:02:8d:dc:
         16:66:d2:2b:ad:88:db:3f:d3:08:80:e5:48:56:9c:8e:35:86:
         36:46:d4:25:6e:c0:6c:ce:2b:6a:bc:43:4a:dc:34:82:5b:5d:
         73:e7:8c:8d:12:24:ea:f8:23:81:6e:69:76:0b:1f:73:f2:dd:
         93:2c:80:f0:f8:de:1e:75:41:27:95:a8:68:a8:e3:f3:0c:84:
         98:ab:2b:d5:8d:c8:37:a5:41:50:35:fe:0e:ca:82:e1:2f:2a:
         fe:2e:89:47:06:46:10:9c:74:d6:4b:00:63:42:b3:3d:21:b5:
         0d:18:25:bc:3a:ab:a4:16:68:4c:a7:77:0e:0f:ed:81:ea:04:
         61:e2:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:19 2026 by rpki-client