Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
File:                     Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft (raw, json)
Hash identifier:          xsW7QlZkf7Vf1KkjUl6m7B7zeVTuthE21E9C4dcAfMI=
Subject key identifier:   BD:A2:2F:77:30:05:F2:5B:C1:5A:3B:54:B0:BD:A9:B2:DC:77:59:82
Authority key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39
Certificate issuer:       /CN=F36B5EE7AR/serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
Certificate serial:       0128
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
Manifest number:          0127
Signing time:             Tue 12 May 2026 05:01:43 +0000
Manifest this update:     Tue 12 May 2026 05:01:42 +0000
Manifest next update:     Thu 14 May 2026 05:01:42 +0000
Files and hashes:         1: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl (hash: 4NxPmrzNUW2A5EHUZkYFwGIVtKLBNwEdisINmNYL0B8=)
                          2: 38D8D2366B9211F095FD868ADAE4EC9C.roa (hash: QAj9ZVXFClZ+xgA1S3DzLLKJ/tdZw+gURdKUv7+f/hc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                          rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
        Validity
            Not Before: May 12 05:01:42 2026 GMT
            Not After : May 14 05:01:42 2026 GMT
        Subject: CN=6a02b437-c5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:7e:d0:4d:a4:ab:81:46:d9:ee:02:26:69:
                    8f:6c:7b:38:f7:e1:c5:f6:41:3a:ca:13:7e:4e:65:
                    2f:29:31:ca:2d:1c:b1:aa:bb:11:24:4a:b2:52:db:
                    d9:45:b3:c7:f5:cd:d7:8d:a8:bd:7b:57:33:65:ab:
                    39:3d:a0:e4:82:0c:8a:4f:f0:85:e6:c4:b1:a4:98:
                    1f:29:3b:6b:4c:b2:79:02:77:96:f6:e6:42:fd:3e:
                    e8:98:ad:af:a7:b4:31:d1:11:a9:60:12:b2:53:04:
                    04:a8:4c:6b:8b:c7:e3:b4:38:70:ca:2d:d9:b4:4f:
                    a0:87:d0:e7:c8:81:19:54:cf:3f:9f:79:f3:da:82:
                    42:62:6c:f1:26:c2:52:3e:62:c9:a5:0f:d9:cb:e3:
                    17:66:1e:31:32:1a:e2:75:70:0c:8a:09:48:3e:bd:
                    40:75:4b:4d:ae:b5:0b:96:72:0a:18:80:fe:2f:bd:
                    5e:32:dd:91:cc:c1:45:d4:8e:01:78:ee:cd:59:3f:
                    3b:5f:0f:0a:ea:96:f3:2d:3a:94:33:28:48:17:97:
                    38:1b:8a:2e:af:e6:5e:8b:14:51:52:e4:38:42:04:
                    90:2a:b4:cc:05:61:14:86:c1:ff:8f:de:11:70:64:
                    9e:25:5e:31:c8:54:66:a4:76:08:45:09:ee:3b:8e:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:2F:77:30:05:F2:5B:C1:5A:3B:54:B0:BD:A9:B2:DC:77:59:82
            X509v3 Authority Key Identifier:
                keyid:67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:72:51:b8:61:01:fa:cb:7c:6a:c9:55:89:a7:3d:cc:21:
         1a:49:a8:6e:30:ca:62:43:8e:0d:29:97:31:cb:b4:3f:d4:e2:
         de:3d:e1:64:d9:1a:96:d7:c8:7a:d0:2a:05:d0:1f:78:f2:02:
         0b:d9:d4:90:ef:22:ed:1d:a3:39:55:8c:01:8c:6a:a9:c8:88:
         f1:69:81:2f:75:6f:82:5a:65:71:8a:54:f2:62:b2:a5:9c:a8:
         b4:2b:ff:41:ed:ae:ff:39:9d:c8:3b:d9:3d:8f:94:5b:8c:63:
         df:2f:a5:85:e4:58:56:61:27:68:58:97:c9:8b:eb:10:b0:1a:
         8d:11:5b:93:e7:62:45:9d:f4:2e:e8:46:c3:ab:f0:f2:e1:01:
         7b:39:af:e9:ec:8f:ad:2c:8f:b9:da:74:fe:4a:f4:a1:12:cf:
         82:d8:0a:e6:ee:9d:69:08:a6:0b:73:0d:3d:e2:fa:7e:7c:89:
         6b:2d:b0:c9:f5:d9:02:66:b9:08:c8:84:a3:c9:2c:0c:fc:fa:
         23:78:32:c0:d8:de:39:4f:db:f5:b4:f6:67:c5:59:5b:e5:2e:
         a2:26:31:11:f2:b8:fa:3d:da:ba:07:1b:dd:ec:16:c8:a2:05:
         24:b9:66:27:75:46:0a:35:60:05:16:87:35:cc:81:53:f9:5d:
         20:77:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:36 2026 by rpki-client