Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          20aVVuJ4UVpRq0eykFtQhZD0RbT8duhR84M1mOz6NME=
Subject key identifier:   A5:E6:DB:87:E1:D3:90:AF:B9:40:C3:65:CF:5E:7E:81:44:09:3A:27
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          0121
Signing time:             Wed 25 Mar 2026 05:55:09 +0000
Manifest this update:     Wed 25 Mar 2026 05:55:08 +0000
Manifest next update:     Fri 27 Mar 2026 05:55:08 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: BO6GFb4f0YSW8GGDxyqKdA8MCFC6VBcqTpNnR6P1kZw=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 05:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Mar 25 05:55:08 2026 GMT
            Not After : Mar 27 05:55:08 2026 GMT
        Subject: CN=69c378bd-2460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:9a:63:ef:36:e9:4b:2a:4b:ee:95:dc:bf:
                    2a:59:41:37:d2:7b:a6:38:08:7a:5f:02:5b:c1:fd:
                    1a:79:e6:bc:90:a5:36:2b:bc:87:ee:9c:f7:c8:6d:
                    ac:f8:56:52:f4:5d:d9:b5:62:af:f5:e7:76:74:ab:
                    9c:2e:9b:3a:e6:25:96:13:c7:f8:da:00:0e:77:df:
                    5a:0e:91:9a:3e:d3:d7:ec:23:4d:93:d3:f3:e5:5a:
                    90:7a:f5:16:3a:6d:6a:66:9f:66:a4:27:e3:a7:03:
                    dd:9b:32:30:37:63:7a:5b:44:b3:87:0e:ca:20:ba:
                    d9:7e:65:7a:9a:ac:3d:85:b3:65:47:f8:8f:38:35:
                    c6:04:88:1a:4f:31:33:e0:47:ff:cd:bb:13:e8:ef:
                    04:69:d7:10:55:aa:54:b0:61:60:77:66:ff:45:c1:
                    0b:69:50:56:00:50:ba:f6:10:e7:30:40:06:98:56:
                    86:ab:5f:ef:fa:e4:f1:50:7b:c6:b2:ce:1b:4d:0c:
                    01:d7:e5:8e:59:32:63:81:a9:e0:f3:ba:46:d3:52:
                    5e:d7:ec:1f:f7:02:e4:6d:dd:6a:a5:8b:e8:b6:15:
                    47:ee:1e:60:b7:1d:e0:34:72:53:61:9b:95:70:ac:
                    ef:ea:42:0d:63:44:a6:8a:18:3a:68:12:50:6b:48:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E6:DB:87:E1:D3:90:AF:B9:40:C3:65:CF:5E:7E:81:44:09:3A:27
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:33:5f:96:31:e6:b0:d1:23:c1:5c:b9:d8:e3:68:e6:15:
         ed:ce:5c:b2:e2:30:28:30:86:6c:4d:f6:f1:53:dd:60:34:a4:
         7f:bf:e8:be:c9:b0:de:83:7a:b6:19:cc:57:ce:07:fd:1f:65:
         41:51:06:69:77:b2:59:8b:0a:dd:5a:70:d5:11:17:18:ff:4d:
         7e:5c:c7:86:b4:1f:55:ea:46:4c:70:e3:61:41:ed:f3:e5:4b:
         77:f4:a9:bc:2c:2b:fb:96:4d:76:85:f7:2a:63:af:df:9d:08:
         ca:62:1d:27:cc:cd:8d:f8:04:d9:dc:4e:b7:f1:83:0b:36:4d:
         b7:a7:ea:57:90:b9:a1:c9:39:ca:8e:7f:52:6a:7b:b9:9d:30:
         25:09:57:58:db:71:b0:4f:6c:df:b1:cc:af:c6:4d:3b:f4:33:
         70:78:a0:a3:9e:67:ef:6c:bf:4f:3a:95:2f:68:48:0c:c5:e5:
         15:56:e3:57:2e:ac:ae:a8:44:b8:07:82:d3:f3:51:2c:94:79:
         cb:ee:a1:bf:f7:ae:c8:bf:f2:df:12:cf:bd:c0:08:b9:4e:3e:
         2a:53:21:38:0e:c2:c1:06:6e:67:9d:2d:3f:bc:0c:7d:96:18:
         1b:42:40:44:3d:ed:05:f9:c0:32:41:f3:d1:83:f5:45:2a:ac:
         39:30:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:10 2026 by rpki-client