Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
File:                     iXuXO6A-uTTexeB2EobT3XyBo7c.mft (raw, json)
Hash identifier:          JUb0zyiiAh7MuTF9T3pku5ryDqHB91lLKUd72VGxQRk=
Subject key identifier:   02:71:E0:2F:31:6D:ED:93:01:72:AE:80:FE:92:49:D1:56:EB:83:63
Authority key identifier: 89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
Certificate issuer:       /CN=F36D3DBFAR/serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Certificate serial:       013D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
Manifest number:          013C
Signing time:             Thu 26 Mar 2026 05:52:51 +0000
Manifest this update:     Thu 26 Mar 2026 05:52:50 +0000
Manifest next update:     Sat 28 Mar 2026 05:52:50 +0000
Files and hashes:         1: iXuXO6A-uTTexeB2EobT3XyBo7c.crl (hash: uJoWwxCVzAWAUDJiBqzq/5VQfeUXIWAOhra7bYNtfgU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                          rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAR, serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
        Validity
            Not Before: Mar 26 05:52:50 2026 GMT
            Not After : Mar 28 05:52:50 2026 GMT
        Subject: CN=69c4c9b3-7556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:de:e7:69:de:4c:05:7b:48:6a:52:5d:4d:
                    5a:a0:1d:de:8f:5c:81:60:ff:09:49:fb:84:64:f1:
                    b8:ba:c0:b6:f4:4a:8f:49:5b:31:15:ae:bc:c3:be:
                    15:3a:fc:b1:43:52:16:43:65:3f:a9:6e:8b:f8:3c:
                    a8:94:4e:58:d0:87:c3:e0:20:42:52:69:34:79:cb:
                    03:6c:b9:af:62:cb:c1:71:47:15:1a:31:eb:41:bc:
                    66:0b:03:e5:38:c2:a1:fa:45:38:03:53:70:68:eb:
                    f2:59:4a:04:0e:71:4c:78:95:dd:b4:af:b0:5d:2f:
                    0c:bf:96:14:42:30:f5:57:03:5a:45:eb:3f:c1:69:
                    5c:b6:93:b1:bf:3f:4e:ab:01:22:e1:bd:38:ad:08:
                    d2:60:f3:a5:7e:63:62:40:8f:3a:08:c8:4d:69:1c:
                    2b:e6:aa:bd:8d:2e:b8:1b:97:5d:e2:a5:e8:5b:da:
                    97:4f:90:c8:22:71:9e:67:41:e3:0c:4f:45:73:75:
                    70:4a:41:38:7b:2e:38:85:a6:b6:77:98:a2:86:54:
                    52:59:21:28:c5:a2:26:ff:ad:ed:e5:aa:52:4b:56:
                    22:f3:c3:6f:bc:1a:57:26:08:d1:b9:c4:45:78:f6:
                    f5:d8:20:cf:c4:fe:04:cd:3a:cd:3f:5b:f4:3d:cc:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:71:E0:2F:31:6D:ED:93:01:72:AE:80:FE:92:49:D1:56:EB:83:63
            X509v3 Authority Key Identifier:
                keyid:89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:52:fa:2a:53:e7:79:28:92:56:75:94:99:62:f0:54:f1:
         e2:64:02:7f:b7:04:59:8c:f2:b1:d8:ec:55:38:93:d2:1b:dd:
         9b:bc:77:8b:48:46:95:b9:4a:22:7f:ac:1f:3f:2a:6d:66:fc:
         4c:72:f3:9d:d5:d6:48:b6:b7:d2:5c:79:a7:24:ad:2b:25:00:
         27:72:6d:16:bb:f7:43:4a:95:86:cd:a3:c8:db:d1:ed:e1:15:
         92:dd:c9:15:31:3b:68:a9:07:18:19:02:ec:9b:59:4f:a9:49:
         8f:6b:dc:c6:8a:f6:1a:54:dd:4d:17:9f:b9:78:6c:9b:cb:a4:
         6f:db:92:ee:41:fd:bd:5a:ec:cd:3c:ce:79:7b:9c:48:7e:f3:
         ca:e9:51:74:fe:68:d2:0f:69:88:b6:61:7a:5a:d8:4e:cb:78:
         75:91:43:b9:a4:10:2e:ce:a2:d1:8d:d0:7a:2e:7f:e8:2b:13:
         62:f0:6c:71:8a:66:b4:82:ae:6f:fb:b3:87:ab:25:fd:50:71:
         39:60:ad:0f:1a:ed:f4:57:de:1d:77:4b:35:6c:8a:c3:21:79:
         e0:97:93:39:ba:68:c4:17:41:cd:4c:8d:34:11:9e:b5:41:89:
         a4:c6:f0:fa:17:a7:30:90:42:dc:71:05:ee:b5:c2:66:08:6b:
         94:e6:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:08 2026 by rpki-client