Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          TLYuchY8Y930qk1OZztsJw4FvOqb3u/a7OVyd4os36A=
Subject key identifier:   C2:B0:EE:88:FA:78:C4:8D:A8:CE:CC:F2:9E:DF:44:76:25:1C:28:04
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       04E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          04E0
Signing time:             Tue 12 May 2026 03:09:01 +0000
Manifest this update:     Tue 12 May 2026 03:09:00 +0000
Manifest next update:     Thu 14 May 2026 03:09:00 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: 9ZaEnVbQCbVXml7IBOsrwBpzeubD/L+y0LSCLelVkPY=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 03:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: May 12 03:09:00 2026 GMT
            Not After : May 14 03:09:00 2026 GMT
        Subject: CN=6a0299cd-b6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:61:75:31:d7:b6:cd:7d:72:4d:64:2a:04:9a:
                    b8:54:74:52:9c:b3:09:79:a3:b6:21:a9:ec:c5:a1:
                    ca:ee:d6:41:7a:55:4d:56:cd:0c:5d:ff:8b:a0:22:
                    e5:43:f3:5c:f4:99:89:c0:2d:45:40:09:20:31:ae:
                    8d:01:f5:2a:3b:31:8c:34:c3:68:eb:37:c6:69:c8:
                    ab:b5:fd:61:ed:db:46:37:26:91:dc:0f:6a:ee:56:
                    a3:4d:3d:a4:47:93:9a:2a:9a:df:72:42:c2:62:f9:
                    59:ed:63:39:41:70:12:3f:3b:53:f7:09:84:fa:68:
                    b5:b9:e4:be:81:f2:79:86:1b:96:6a:3f:5c:49:32:
                    4d:2e:b4:3f:88:71:ca:8f:a8:3e:b6:d4:a6:57:26:
                    9e:66:2f:53:6a:6e:96:6e:07:e7:84:eb:86:37:f1:
                    f1:13:3f:a9:77:7a:48:5f:80:2e:3b:97:6e:b5:44:
                    b3:82:4b:75:19:5a:02:87:73:11:04:08:ae:bd:3c:
                    ac:aa:8c:fd:94:4a:4a:ae:16:53:eb:06:db:08:f5:
                    88:44:0d:e4:62:a0:2c:c7:63:63:a6:94:aa:37:92:
                    58:51:fa:4f:58:f0:99:b5:13:13:74:5d:80:a3:62:
                    25:d3:53:a2:55:ba:04:ea:e3:fc:73:18:b7:6a:02:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B0:EE:88:FA:78:C4:8D:A8:CE:CC:F2:9E:DF:44:76:25:1C:28:04
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:23:7f:90:08:49:37:24:da:ad:1c:3c:a2:bc:e9:fa:15:64:
         56:58:f2:fc:c8:1f:25:89:51:a2:59:6f:a3:db:fa:d1:7e:7d:
         1f:12:ae:79:27:4f:fd:12:30:ad:a6:27:48:af:75:87:5c:e1:
         16:dc:c3:22:98:a5:fe:8e:35:3a:09:4c:32:04:22:94:8d:6a:
         81:d8:3e:3c:e7:12:fe:b9:57:ab:5e:2b:3f:dc:a0:b4:de:65:
         bf:10:99:46:f2:9f:f7:2e:80:5b:3c:1a:61:db:f4:d2:b4:ef:
         55:b4:84:9d:bd:5d:f3:34:53:59:5e:07:69:13:38:85:39:31:
         02:84:aa:5d:26:1f:08:b0:88:cc:0f:e0:9e:8b:f4:57:aa:ce:
         0c:4b:92:f2:cd:88:9f:45:09:6d:89:3c:23:a9:5a:23:4d:79:
         74:02:3a:63:e9:16:c3:38:b9:a8:1e:3c:30:86:32:00:5f:4a:
         36:70:ca:4f:7c:e7:7b:28:8e:2d:ad:c5:f5:2b:0d:38:cc:de:
         99:18:73:0c:b1:94:25:41:d0:d5:3c:2b:fc:db:b8:a4:ad:36:
         f1:2b:8d:f1:3f:77:78:58:f8:80:83:98:14:ed:b0:16:fb:8f:
         24:51:56:ab:7f:1e:ae:3e:70:f7:e7:75:e5:10:9d:77:cd:1d:
         1e:44:5b:1d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkUyRURBUjExMC8GA1UEBRMoNjVEMjk1Q0Y1NDQ3OERGODVBRDY0QUVBOTA2NjhC
QzQxMTRGRDMzRTAeFw0yNjA1MTIwMzA5MDBaFw0yNjA1MTQwMzA5MDBaMBgxFjAU
BgNVBAMTDTZhMDI5OWNkLWI2ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDsYXUx17bNfXJNZCoEmrhUdFKcswl5o7YhqezFocru1kF6VU1WzQxd/4ug
IuVD81z0mYnALUVACSAxro0B9So7MYw0w2jrN8ZpyKu1/WHt20Y3JpHcD2ruVqNN
PaRHk5oqmt9yQsJi+VntYzlBcBI/O1P3CYT6aLW55L6B8nmGG5ZqP1xJMk0utD+I
ccqPqD621KZXJp5mL1NqbpZuB+eE64Y38fETP6l3ekhfgC47l261RLOCS3UZWgKH
cxEECK69PKyqjP2USkquFlPrBtsI9YhEDeRioCzHY2OmlKo3klhR+k9Y8Jm1ExN0
XYCjYiXTU6JVugTq4/xzGLdqAt17AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUwrDu
iPp4xI2ozszynt9EdiUcKAQwHwYDVR0jBBgwFoAUZdKVz1RHjfha1krqkGaLxBFP
0z4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJFMkVELzE5QTc4MjRDOTdERjExRURCOTU2NDVGM0YxMjIyNDY4L1pkS1Z6
MVJIamZoYTFrcnFrR2FMeEJGUDB6NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1pkS1Z6MVJIamZoYTFrcnFrR2FMeEJGUDB6NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkUyRUQvMTlBNzgyNEM5N0RGMTFFREI5NTY0NUYzRjEyMjI0
NjgvWmRLVnoxUkhqZmhhMWtycWtHYUx4QkZQMHo0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxI3+QCEk3JNqtHDyivOn6FWRWWPL8yB8l
iVGiWW+j2/rRfn0fEq55J0/9EjCtpidIr3WHXOEW3MMimKX+jjU6CUwyBCKUjWqB
2D485xL+uVerXis/3KC03mW/EJlG8p/3LoBbPBph2/TStO9VtISdvV3zNFNZXgdp
EziFOTEChKpdJh8IsIjMD+Cei/RXqs4MS5LyzYifRQltiTwjqVojTXl0Ajpj6RbD
OLmoHjwwhjIAX0o2cMpPfOd7KI4trcX1Kw04zN6ZGHMMsZQlQdDVPCv827ikrTbx
K43xP3d4WPiAg5gU7bAW+48kUVarfx6uPnD353XlEJ13zR0eRFsd
-----END CERTIFICATE-----
Generated at Wed May 13 05:10:53 2026 by rpki-client