Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.mft (raw, json)
Hash identifier:          xoLUMbtHyCnmdWbbgUkXlAKFDpgHjeVEPF1isBiZ5kU=
Subject key identifier:   97:9E:A9:E3:76:C5:D0:F1:39:21:D8:FE:33:32:2F:DE:96:97:E0:E4
Authority key identifier: 98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Certificate issuer:       /CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Certificate serial:       0A24
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
Manifest number:          0A21
Signing time:             Wed 13 May 2026 01:28:11 +0000
Manifest this update:     Wed 13 May 2026 01:28:10 +0000
Manifest next update:     Fri 15 May 2026 01:28:10 +0000
Files and hashes:         1: mDG4OL4rkAR85SvUJaCCldQ2HvI.crl (hash: Lzc47JdhIv+nNEhqNmu43LJsB552ogH4ROXRdqdS+a0=)
                          2: 2B42CBB2841C11EA8535FD14F8AEA228.roa (hash: dahsJO63bmsOpbiHiBcDrrEKjGQByqLKcepUunArLEQ=)
                          3: 58068464849811EAA9BC2712F8AEA228.roa (hash: NPwlzjfWgkGmqApnLab/DQv5DjJ9aHzrshBcmsHKY5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                          rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2596 (0xa24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAR, serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Validity
            Not Before: May 13 01:28:10 2026 GMT
            Not After : May 15 01:28:10 2026 GMT
        Subject: CN=6a03d3ab-cbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:e2:3d:e9:29:86:b2:b6:54:31:20:30:a6:
                    90:72:07:ff:59:23:0a:c1:66:e9:7a:26:ad:c4:8c:
                    92:e4:53:6c:10:6a:ec:02:6a:aa:64:56:2e:84:bf:
                    6f:8e:e9:6a:40:8d:52:c3:ed:38:5a:d5:c2:dd:52:
                    5c:2a:20:68:10:d6:0e:b6:67:1f:69:04:99:99:c4:
                    61:9f:56:fa:76:d3:5b:97:9e:fd:5b:80:34:e5:e4:
                    c7:5b:6b:2d:6e:1b:58:b7:86:51:bc:c9:80:b8:cc:
                    d5:f8:34:7b:13:7e:35:bb:ac:ba:76:7d:26:fa:ca:
                    39:5d:57:07:95:8e:72:02:2d:c9:39:c3:31:c1:68:
                    43:08:61:a0:13:71:9e:0a:a4:90:c9:1c:ea:78:be:
                    c7:5f:b7:3f:b1:9b:57:c8:45:fa:98:62:35:aa:00:
                    79:a1:1e:1d:50:04:b6:b9:60:01:e8:df:93:05:5f:
                    b9:25:8a:0b:70:0f:15:33:0f:fe:d8:04:72:aa:24:
                    e2:48:b2:82:e1:06:c8:49:dd:af:19:5c:a8:38:0f:
                    c2:64:8d:9c:c3:54:c2:78:cf:df:84:91:44:a0:cd:
                    b6:58:f8:0d:d4:24:b7:73:87:f2:95:72:c3:43:c5:
                    3d:e2:fe:6b:3d:3e:c3:c2:05:36:eb:46:92:d3:37:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9E:A9:E3:76:C5:D0:F1:39:21:D8:FE:33:32:2F:DE:96:97:E0:E4
            X509v3 Authority Key Identifier:
                keyid:98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:80:43:a4:4a:b2:35:bf:03:2c:d4:3d:3f:cc:c8:6d:ea:39:
         63:37:64:a0:45:09:2c:d2:72:39:a2:40:fc:b0:6a:78:f9:10:
         d9:79:bd:c3:4e:8e:ed:18:12:25:e3:80:9c:8d:98:27:2f:2a:
         87:d4:65:b4:98:37:52:59:b5:26:bc:40:41:37:91:1b:05:16:
         ea:77:66:a2:1d:d5:14:5e:11:cd:c1:5e:d2:05:aa:ef:b3:36:
         c4:70:f9:72:f8:be:1c:3b:70:ab:d2:8a:49:44:5f:0a:f2:21:
         a4:95:73:73:e8:9d:cc:41:03:9a:78:ab:f0:f6:69:89:83:4c:
         e7:a7:97:e9:38:f1:e8:7c:c7:8f:82:29:38:1c:08:e3:aa:62:
         15:87:2e:47:2f:28:fd:59:59:70:53:f8:0b:87:83:1e:8f:f8:
         64:e1:a0:01:94:95:26:9e:78:a6:bf:c8:35:c6:93:2a:1d:f2:
         64:11:96:d2:74:63:68:fa:0d:94:ab:db:1e:f4:4d:90:8f:19:
         58:1b:3d:71:64:d7:cc:3f:14:20:d1:e4:34:db:76:75:b4:7b:
         11:ff:b9:74:e7:1e:7d:ce:53:43:06:da:29:75:ee:80:e2:c4:
         fa:75:63:ca:e1:20:c7:e6:50:a1:5d:81:0c:ac:57:59:c2:95:
         5e:29:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:32:48 2026 by rpki-client