Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          85SvIv6eOQwjaVG2OK5yQwTrtq2zUcn9zcZ6TNIFYIk=
Subject key identifier:   90:49:D5:BA:1F:FE:63:5B:C2:BC:C1:52:8E:69:FE:F8:B9:A0:0E:38
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0F55
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0F55
Signing time:             Thu 26 Mar 2026 00:58:38 +0000
Manifest this update:     Thu 26 Mar 2026 00:58:37 +0000
Manifest next update:     Sat 28 Mar 2026 00:58:37 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: OwoJdrUZPJP9qA3mdCCDaQnkV3guL6xLBCjIAW04ytk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3925 (0xf55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Mar 26 00:58:37 2026 GMT
            Not After : Mar 28 00:58:37 2026 GMT
        Subject: CN=69c484be-8a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:39:34:c6:83:4c:9d:13:c4:a4:87:69:bb:
                    21:5a:d8:40:d4:3c:92:8b:72:b0:13:97:ee:72:c8:
                    c2:90:fb:dc:28:46:e1:78:96:fa:4b:dd:9e:67:14:
                    08:4a:61:81:f9:78:12:c0:c8:f5:e1:46:a7:d8:ab:
                    1f:26:63:81:46:22:d7:ff:dd:04:8f:3e:42:68:b2:
                    72:c4:e3:a9:f7:79:ca:65:20:96:4a:7f:ff:9b:1b:
                    0b:ad:b0:c9:5b:4b:d8:e3:89:45:ea:06:a8:ed:f3:
                    79:b0:d6:ce:90:42:d1:96:10:3d:33:ab:87:49:02:
                    11:2b:88:77:06:26:9d:16:76:42:2b:7b:f2:40:18:
                    cb:66:13:da:8a:03:9f:7f:56:5b:d5:78:19:3c:4a:
                    04:5e:33:14:62:6a:90:47:ae:59:01:2e:a7:46:2e:
                    95:d1:0d:e8:f9:f9:56:18:26:91:81:ab:6b:81:9f:
                    07:c0:c6:83:fc:75:c5:30:ff:4b:f1:8e:2c:9f:17:
                    c7:19:0c:24:f4:13:be:95:2c:6c:11:12:94:6f:01:
                    f4:d7:be:b7:16:1d:4f:b3:7c:d0:42:d5:4f:43:e9:
                    c9:02:42:79:cd:53:03:88:8d:6d:c2:7b:56:fb:a4:
                    d8:1c:45:74:28:51:3d:2e:66:40:68:00:bc:ba:05:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:D5:BA:1F:FE:63:5B:C2:BC:C1:52:8E:69:FE:F8:B9:A0:0E:38
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:b3:f6:d4:5d:e9:c4:bb:0e:e9:1f:60:45:7f:8f:a0:90:
         c9:24:ae:02:02:07:ce:55:ee:b2:2a:11:3a:cb:8f:e7:c1:95:
         97:91:18:42:c1:48:95:c6:02:b1:fe:f4:ca:44:6d:c2:25:3a:
         f4:d0:9d:b0:0e:cc:0b:96:9e:0d:37:4b:f4:d5:02:df:fe:44:
         20:8a:6f:06:ec:b1:36:6c:30:8e:3c:ed:c6:4b:94:1a:89:33:
         5b:fc:87:52:70:d8:79:50:c6:fe:fc:c1:a8:f1:f8:9e:24:cb:
         40:b5:cc:1c:da:84:8b:84:c6:34:c6:4f:3c:6c:d1:29:3e:00:
         c2:18:5d:b5:09:97:d2:7b:67:c6:1b:cc:9d:a9:64:27:7d:8f:
         96:2a:a7:39:af:ff:4e:c4:e8:57:f7:b6:d1:cd:d9:15:5e:2f:
         e5:3d:cc:44:af:0a:c4:91:81:70:a5:af:25:1b:61:e7:f4:ff:
         44:18:6c:e4:c1:9c:02:be:fd:0a:4f:85:4e:4a:d2:fa:7c:2f:
         ed:59:1f:2f:15:a9:b9:47:31:82:37:52:dc:7f:e0:1e:5b:07:
         0a:aa:1d:5b:60:fb:1f:6b:75:3e:64:11:3d:44:af:b7:8c:5a:
         a5:ec:fa:4d:76:2a:5c:dd:81:93:3a:64:38:67:e4:b4:1c:79:
         e2:9c:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:57 2026 by rpki-client