Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          zYlMalDIT/Bug1dKWnm02BcXo6S1RPXj2q5WEVsxmY4=
Subject key identifier:   5D:C6:90:D1:C0:67:4C:A3:5E:50:95:7B:43:E7:19:0F:02:BC:AB:FB
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       03DB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          03D9
Signing time:             Thu 26 Mar 2026 04:18:36 +0000
Manifest this update:     Thu 26 Mar 2026 04:18:35 +0000
Manifest next update:     Sat 28 Mar 2026 04:18:35 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: S/AbDk9ld/19r0/pjCbJCRu8+vCtPunh9qgruPyaF0k=)
                          2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
                          3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Mar 26 04:18:35 2026 GMT
            Not After : Mar 28 04:18:35 2026 GMT
        Subject: CN=69c4b39c-28e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:1e:7f:4c:68:79:e3:0d:c2:06:01:1b:07:
                    3d:e2:95:c8:06:02:ce:1a:24:99:af:07:35:52:f2:
                    f5:27:11:ae:af:c1:6b:11:e6:f1:4d:39:62:80:21:
                    69:df:71:a6:80:95:8c:10:1a:d0:18:f1:4f:5c:07:
                    14:07:18:0f:cc:4a:4e:77:97:43:a5:03:5e:3f:96:
                    72:fa:04:26:87:ea:77:82:55:91:39:1d:0a:c1:3f:
                    ac:c9:63:46:46:20:38:3f:6f:a1:5d:75:65:c4:fc:
                    4a:13:2f:7d:4e:f1:b3:15:88:3b:14:7a:9f:e7:a5:
                    ba:f4:b9:76:b2:0a:2f:29:8b:e9:90:58:57:6e:74:
                    7d:0a:31:78:3f:da:3f:68:56:7a:49:b3:d4:36:3e:
                    b5:0f:24:28:ac:29:71:89:57:17:6e:42:33:00:09:
                    a9:cf:c1:44:3c:ed:ca:16:b2:27:8e:95:98:00:fc:
                    1e:8e:89:7d:a1:03:9e:16:bd:cf:37:d0:0e:75:8f:
                    b5:81:18:af:5f:c7:b6:ad:25:cf:88:9f:5f:4d:35:
                    91:a5:1d:23:29:3e:10:b4:41:d7:d0:12:6c:1c:52:
                    bc:64:f6:8f:2d:fd:49:3c:a2:c2:10:f1:ed:1c:22:
                    c8:2f:2a:ac:3d:fc:e5:57:da:16:25:84:5e:ba:7d:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C6:90:D1:C0:67:4C:A3:5E:50:95:7B:43:E7:19:0F:02:BC:AB:FB
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:10:6f:4a:c2:04:3b:f3:dd:bb:df:7a:f2:c9:51:09:1d:12:
         36:5d:9e:13:f0:a5:84:e6:a0:11:6b:15:e4:ab:3c:7a:66:6f:
         7a:e5:36:f2:12:ac:7c:fa:24:5c:4c:41:8a:b2:b4:80:0d:ba:
         cc:85:c5:60:43:23:da:41:93:de:fd:85:c8:10:d1:37:93:68:
         af:f3:d4:c0:d0:7f:c8:72:db:8e:5c:40:22:dc:51:0f:79:ba:
         23:dd:83:a0:71:ad:e1:2a:ad:c8:4e:67:8c:1f:71:24:0a:ad:
         24:76:d3:50:8c:86:e6:e6:bf:0e:5f:a3:de:62:d9:4c:00:ed:
         c0:31:75:40:b5:46:18:6a:81:39:bb:2e:51:e5:9e:ab:f5:88:
         ce:fd:e2:f2:6c:88:72:30:ba:ab:66:e2:65:56:ad:ea:86:1b:
         6f:69:15:9b:db:da:06:1a:50:a1:d3:80:3f:d4:25:b7:81:9a:
         9f:00:b8:b6:9c:3c:d6:3b:32:76:67:18:ac:f2:ad:b7:83:54:
         bd:e4:bc:07:7a:08:0c:da:16:c1:62:f7:37:9d:ca:f1:c7:92:
         06:fe:c9:48:de:f9:70:ed:57:81:70:3c:04:72:7c:6d:be:91:
         91:2c:0c:05:b1:7c:37:4f:2b:68:59:4c:48:a1:76:ad:f7:01:
         4c:d8:c0:36
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA9swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZBUjExMC8GA1UEBRMoQzY0NzM2MjVFQUVGRDY3MzZDOTA3RDIzMUREOUM1
REJEQjlGNUVBQjAeFw0yNjAzMjYwNDE4MzVaFw0yNjAzMjgwNDE4MzVaMBgxFjAU
BgNVBAMTDTY5YzRiMzljLTI4ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9ox5/TGh54w3CBgEbBz3ilcgGAs4aJJmvBzVS8vUnEa6vwWsR5vFNOWKA
IWnfcaaAlYwQGtAY8U9cBxQHGA/MSk53l0OlA14/lnL6BCaH6neCVZE5HQrBP6zJ
Y0ZGIDg/b6FddWXE/EoTL31O8bMViDsUep/npbr0uXayCi8pi+mQWFdudH0KMXg/
2j9oVnpJs9Q2PrUPJCisKXGJVxduQjMACanPwUQ87coWsieOlZgA/B6OiX2hA54W
vc830A51j7WBGK9fx7atJc+In19NNZGlHSMpPhC0QdfQEmwcUrxk9o8t/Uk8osIQ
8e0cIsgvKqw9/OVX2hYlhF66fTqxAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXcaQ
0cBnTKNeUJV7Q+cZDwK8q/swHwYDVR0jBBgwFoAUxkc2Jerv1nNskH0jHdnF29uf
XqswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGLzkzNDBEODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDL3hrYzJK
ZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hrYzJKZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjczMUYvOTM0MEQ4MjYzNzk3MTFFRTk2RkI3QTMxNEFEOUU2
RkMveGtjMkplcnYxbk5za0gwakhkbkYyOXVmWHFzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnEG9KwgQ7892733ryyVEJHRI2XZ4T8KWE
5qARaxXkqzx6Zm965TbyEqx8+iRcTEGKsrSADbrMhcVgQyPaQZPe/YXIENE3k2iv
89TA0H/IctuOXEAi3FEPeboj3YOgca3hKq3ITmeMH3EkCq0kdtNQjIbm5r8OX6Pe
YtlMAO3AMXVAtUYYaoE5uy5R5Z6r9YjO/eLybIhyMLqrZuJlVq3qhhtvaRWb29oG
GlCh04A/1CW3gZqfALi2nDzWOzJ2Zxis8q23g1S95LwHeggM2hbBYvc3ncrxx5IG
/slI3vlw7VeBcDwEcnxtvpGRLAwFsXw3TytoWUxIoXat9wFM2MA2
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:23 2026 by rpki-client