Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          i0rCgK1p3PGVO8yc7ndFuVdUZa8D9v5qW0iklYGP56Q=
Subject key identifier:   15:83:40:1E:B5:E6:7A:70:D3:3E:66:41:E1:34:49:D0:7B:E1:44:39
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       0415
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          0414
Signing time:             Wed 13 May 2026 03:35:11 +0000
Manifest this update:     Wed 13 May 2026 03:35:10 +0000
Manifest next update:     Fri 15 May 2026 03:35:10 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: wsZJLIPRxE7eX0gkF8JvfNj5O3FsuAseahDxY/Z+GB4=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: May 13 03:35:10 2026 GMT
            Not After : May 15 03:35:10 2026 GMT
        Subject: CN=6a03f16f-a69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:13:ef:07:24:e7:5b:46:45:b0:99:b3:eb:
                    66:53:79:7b:de:00:dd:fa:68:86:f2:11:28:fc:bd:
                    b9:bc:66:f7:87:c3:c9:70:47:a5:11:9f:3f:20:16:
                    d8:cb:77:72:eb:c1:65:32:b8:45:02:b4:1f:95:37:
                    75:0e:ce:5e:0f:e1:da:33:b2:33:57:f6:4d:15:7a:
                    22:19:9e:c3:cb:b1:36:8f:05:f8:87:62:22:a4:e3:
                    ea:77:92:14:d0:e8:a3:ca:e3:c8:e7:68:d3:2b:b6:
                    2e:55:a6:53:01:b8:6e:cc:c2:a7:e4:aa:ed:6d:2c:
                    d6:fb:b8:36:9a:d5:d6:d2:1d:de:40:4e:a8:12:02:
                    28:1a:1a:f1:78:c1:e5:51:e9:88:52:83:14:35:bf:
                    6d:da:4e:17:2e:58:95:39:b8:fc:aa:c2:0f:e9:41:
                    58:7d:4b:79:44:6d:ac:9c:92:ce:fc:77:96:71:b8:
                    ca:cb:e1:74:97:00:40:5c:41:4e:0f:b2:f7:d1:d0:
                    8c:cd:d4:29:36:e2:af:44:6d:f6:61:08:ec:d5:18:
                    3c:ea:16:ba:ce:72:06:1d:a5:3c:3b:ca:55:e8:53:
                    31:bc:53:55:a4:ed:54:fa:26:8a:31:1d:f3:f0:9c:
                    26:7e:d6:d6:c0:09:da:a3:4c:83:ff:58:03:ec:53:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:83:40:1E:B5:E6:7A:70:D3:3E:66:41:E1:34:49:D0:7B:E1:44:39
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:10:e8:d2:b1:5f:d4:9c:e7:62:57:dd:32:73:96:4c:5d:5b:
         d0:70:fc:96:f8:f0:66:d1:79:ca:4e:fb:a4:fa:28:2d:39:36:
         38:d5:01:51:4e:8b:5d:fd:46:eb:f2:4c:6b:91:2a:06:b2:86:
         ba:73:0e:87:4e:be:58:8b:6c:d1:8a:c1:75:4e:9c:d4:a2:a1:
         2b:ef:b5:dd:7f:e2:a5:2f:5a:f6:16:6d:08:bd:19:f8:5f:dd:
         87:ff:3e:47:f3:3e:f2:d5:84:9c:54:bb:c9:ad:24:59:56:bf:
         66:be:1d:71:42:92:3a:46:07:dd:18:3f:d6:d1:37:f2:7f:3a:
         e5:58:a4:c8:b7:61:2a:9c:1b:64:df:89:2b:b3:8b:33:78:54:
         09:20:b2:e7:3e:8f:5c:98:b6:8e:e6:04:53:46:b7:69:5b:37:
         f2:b7:a4:18:86:fd:e5:52:32:fa:91:54:22:0c:ad:56:91:7d:
         a8:87:37:3a:81:37:8b:f4:bd:2c:9b:ea:79:86:5b:c9:4a:13:
         c9:78:16:b9:27:f0:84:bd:63:cb:68:2a:f5:53:d2:a9:ea:c5:
         8d:d4:08:0a:ba:9e:91:fe:34:2e:24:9c:3d:ce:5c:69:55:8a:
         3f:3c:5d:41:46:ed:86:eb:b7:5a:d9:f5:fc:fd:d1:39:03:e8:
         a3:85:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:35 2026 by rpki-client