Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          Bvqm5M0bTE9HG9OR6ciT6oU2okYTwAp5rXqomJRqC+E=
Subject key identifier:   3E:0B:1A:02:1F:FA:4C:6B:E4:C6:73:38:AF:82:7B:66:98:4C:87:59
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       0154
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          0152
Signing time:             Tue 12 May 2026 04:55:18 +0000
Manifest this update:     Tue 12 May 2026 04:55:17 +0000
Manifest next update:     Thu 14 May 2026 04:55:17 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: 93oL9TZBrfKvBdv2foL5vFRt3TOS2JkG2XALyQ+bGt0=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: May 12 04:55:17 2026 GMT
            Not After : May 14 04:55:17 2026 GMT
        Subject: CN=6a02b2b5-c6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:5f:87:f9:1c:60:b6:e9:34:e4:2f:54:e8:
                    44:71:7a:cc:9b:82:da:23:f9:67:de:62:ac:1a:42:
                    bd:9f:a0:52:0a:54:3e:66:a9:63:fd:10:8e:87:66:
                    2a:29:87:5f:f8:69:4b:e5:76:f4:c6:f8:d6:08:da:
                    43:56:bc:10:9a:3b:a9:97:30:2e:71:af:9e:38:1c:
                    5e:64:05:29:41:3d:29:03:81:13:db:2f:6b:f4:04:
                    58:45:14:5c:d3:79:0b:34:d0:46:3f:88:78:d0:3c:
                    08:16:dd:d4:f5:99:8c:9d:0e:cc:69:71:4c:39:ab:
                    92:34:3f:f0:55:52:78:8e:92:53:ed:fe:a4:5f:8e:
                    1d:2f:36:82:90:7c:59:9e:d8:82:1e:bc:88:9a:b2:
                    77:ca:4c:04:1b:40:b1:5d:35:37:dd:29:9f:88:2f:
                    bc:7e:6e:19:4f:19:4b:a8:04:6a:04:3d:45:f5:6c:
                    40:82:dd:a7:08:62:5d:e3:48:9f:99:50:66:bb:da:
                    76:9e:24:90:c5:c8:a9:58:16:d0:01:de:0d:df:c8:
                    09:0e:9f:18:f6:6f:c8:64:d2:d5:88:03:4c:9e:ca:
                    7f:9e:52:f1:d0:68:77:81:6b:51:5a:8b:0b:ee:08:
                    3b:3e:a6:f9:8f:de:47:e9:f4:6c:ef:ec:22:bc:b9:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0B:1A:02:1F:FA:4C:6B:E4:C6:73:38:AF:82:7B:66:98:4C:87:59
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:96:85:46:e1:73:27:de:41:07:9e:32:0f:6a:f2:65:6c:
         5b:2d:40:a2:5c:97:58:a1:62:c4:45:b6:36:46:9b:06:5e:86:
         c1:47:b8:33:9c:48:b2:17:d0:e5:5f:1b:2b:63:64:0d:01:d1:
         0b:c5:ba:63:e3:db:b9:69:cf:0b:7d:70:eb:32:4b:5c:a1:14:
         67:9c:a9:53:fe:4e:ee:63:0b:77:8d:bb:fa:b8:23:9d:44:c4:
         5b:56:ef:f5:3e:44:94:2c:f1:85:c0:5f:fb:a1:d6:f0:42:52:
         0a:35:1d:a7:61:ca:f5:5d:44:fc:5b:40:c3:8f:bc:50:b5:a1:
         0a:f2:9f:54:67:22:ba:1b:a8:73:74:2d:76:a0:a7:f7:bf:3c:
         c5:2d:ce:42:3a:c2:1e:bc:53:91:bc:89:9a:be:16:60:91:ae:
         75:73:1c:00:8e:2c:d1:71:bd:d8:06:8a:f4:63:cf:a9:ab:ef:
         7a:4d:d3:49:a0:2e:a7:e2:5e:10:10:68:e0:5f:89:7b:4a:fe:
         43:28:e8:a6:5e:af:b8:2c:b6:bd:80:3c:97:63:b7:ee:17:87:
         72:88:da:f9:e8:31:d3:6b:6d:c4:15:f0:c5:9b:56:c9:5e:e8:
         52:2a:f5:4c:85:44:b0:0c:20:3d:8a:89:21:7e:d1:53:82:43:
         37:04:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:43 2026 by rpki-client