Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
File:                     BWiAuMNgRKWRJvERqjVFvCDBKGI.mft (raw, json)
Hash identifier:          D7AptPQLNrTcdte+nnuTXqGSJRzJVAXvJAA8s+f9d70=
Subject key identifier:   7A:8B:42:AE:D8:BF:95:A1:8F:3A:FC:A7:51:1F:68:FA:AA:44:44:C9
Authority key identifier: 05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62
Certificate issuer:       /CN=F36FC328AR/serialNumber=056880B8C36044A59126F111AA3545BC20C12862
Certificate serial:       0685
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
Manifest number:          0683
Signing time:             Tue 12 May 2026 02:29:30 +0000
Manifest this update:     Tue 12 May 2026 02:29:29 +0000
Manifest next update:     Thu 14 May 2026 02:29:29 +0000
Files and hashes:         1: BWiAuMNgRKWRJvERqjVFvCDBKGI.crl (hash: vygMc+tCsH/YGdH/7q2nFCzvuGRJb+q4gpeFjTxzuNs=)
                          2: EB8BB54C228A11F19208D6B6DAE4EC9C.roa (hash: 5ahKQTUHbsT6qmsjyp5i17NZTsk325A7dnAXmVyCtMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
                          rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AR, serialNumber=056880B8C36044A59126F111AA3545BC20C12862
        Validity
            Not Before: May 12 02:29:29 2026 GMT
            Not After : May 14 02:29:29 2026 GMT
        Subject: CN=6a02908a-100b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:d0:1e:ee:0f:cd:e6:00:1d:d4:b5:2b:42:
                    3b:52:ff:82:fe:57:c4:8e:06:20:af:60:14:d0:28:
                    1f:42:4a:b5:48:30:a8:78:d2:80:cc:10:83:ee:ff:
                    ae:dd:d5:6e:85:00:70:6c:d5:63:2d:44:bd:be:6c:
                    b1:1b:4f:e9:57:6e:7e:c8:62:ad:00:21:16:eb:c4:
                    bc:d8:b7:04:2f:8f:1d:99:87:14:11:df:44:c9:de:
                    c5:e4:87:a2:ed:dd:22:d4:0f:40:7a:c2:d3:b5:2a:
                    9b:b6:c4:7e:84:b1:05:e2:23:3e:13:81:1e:e9:5d:
                    1d:24:61:f6:04:6c:55:45:a5:f7:50:05:85:8e:45:
                    11:7e:a1:3c:eb:90:67:6d:b2:58:f5:be:02:55:29:
                    dc:54:41:b6:35:d0:7b:41:c7:e2:02:86:fc:70:d8:
                    b7:e1:fc:43:4f:84:fa:e4:12:20:64:d5:fe:5c:ed:
                    c5:c5:51:48:20:32:b0:a9:41:cb:79:b7:ac:49:48:
                    61:7d:5d:e1:7a:28:d2:18:df:89:e1:38:d4:a8:c9:
                    f6:9a:44:47:10:58:7a:f1:4e:49:87:61:6e:2f:b2:
                    52:22:c9:3f:0c:86:81:96:03:55:da:a0:1c:ce:a3:
                    69:11:9b:c7:7d:23:ae:19:5a:f6:f8:90:a2:c5:de:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:42:AE:D8:BF:95:A1:8F:3A:FC:A7:51:1F:68:FA:AA:44:44:C9
            X509v3 Authority Key Identifier:
                keyid:05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c4:19:58:63:a9:79:bc:1f:e7:9d:41:28:07:07:b1:af:09:
         c7:75:c7:11:86:72:ad:3f:b4:59:1b:5f:c9:5f:da:df:9a:68:
         ab:b1:4e:51:98:98:74:79:75:38:5e:47:96:0c:02:ec:4f:cb:
         27:d8:67:19:b5:17:91:1b:0e:62:25:00:81:e2:16:3c:b1:73:
         53:ea:3a:ba:3b:14:13:c1:38:18:bb:55:1b:59:bd:f9:49:c3:
         d0:fe:40:3b:d8:b5:d4:cd:cd:11:e8:74:d0:c1:d0:7d:3d:98:
         fd:86:55:90:d8:bc:b1:21:da:7e:22:f0:1e:88:c3:19:67:4b:
         5a:1f:aa:5d:e9:c6:80:58:f1:9c:ea:43:55:d7:9c:83:74:bd:
         c3:55:8f:91:eb:4b:d8:53:49:37:c3:11:e0:af:75:9a:35:83:
         47:81:5c:09:99:4b:49:47:cd:56:d5:b7:92:c8:e5:cc:df:f0:
         00:82:01:7a:44:37:97:a7:d4:84:02:2b:60:38:50:84:3c:d7:
         8b:d8:93:d7:24:34:2a:c8:00:ae:c9:0b:99:6a:ca:44:e4:a1:
         79:2c:5a:00:26:fe:7e:81:84:92:65:82:e9:cb:4f:67:18:a2:
         d6:c1:f3:34:f6:f5:04:2f:1c:fe:3c:34:f7:c4:dd:11:a6:b4:
         bd:fc:ed:8f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkMzMjhBUjExMC8GA1UEBRMoMDU2ODgwQjhDMzYwNDRBNTkxMjZGMTExQUEzNTQ1
QkMyMEMxMjg2MjAeFw0yNjA1MTIwMjI5MjlaFw0yNjA1MTQwMjI5MjlaMBgxFjAU
BgNVBAMTDTZhMDI5MDhhLTEwMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9XNAe7g/N5gAd1LUrQjtS/4L+V8SOBiCvYBTQKB9CSrVIMKh40oDMEIPu
/67d1W6FAHBs1WMtRL2+bLEbT+lXbn7IYq0AIRbrxLzYtwQvjx2ZhxQR30TJ3sXk
h6Lt3SLUD0B6wtO1Kpu2xH6EsQXiIz4TgR7pXR0kYfYEbFVFpfdQBYWORRF+oTzr
kGdtslj1vgJVKdxUQbY10HtBx+IChvxw2Lfh/ENPhPrkEiBk1f5c7cXFUUggMrCp
Qct5t6xJSGF9XeF6KNIY34nhONSoyfaaREcQWHrxTkmHYW4vslIiyT8MhoGWA1Xa
oBzOo2kRm8d9I64ZWvb4kKLF3vSvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUeotC
rti/laGPOvynUR9o+qpERMkwHwYDVR0jBBgwFoAUBWiAuMNgRKWRJvERqjVFvCDB
KGIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDMzI4LzI5NzZFMkJBNTExRjExRUM5MzI5MTU3REQ4QTAxNENFL0JXaUF1
TU5nUktXUkp2RVJxalZGdkNEQktHSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0JXaUF1TU5nUktXUkp2RVJxalZGdkNEQktHSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RkMzMjgvMjk3NkUyQkE1MTFGMTFFQzkzMjkxNTdERDhBMDE0
Q0UvQldpQXVNTmdSS1dSSnZFUnFqVkZ2Q0RCS0dJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCexBlYY6l5vB/nnUEoBwexrwnHdccRhnKt
P7RZG1/JX9rfmmirsU5RmJh0eXU4XkeWDALsT8sn2GcZtReRGw5iJQCB4hY8sXNT
6jq6OxQTwTgYu1UbWb35ScPQ/kA72LXUzc0R6HTQwdB9PZj9hlWQ2LyxIdp+IvAe
iMMZZ0taH6pd6caAWPGc6kNV15yDdL3DVY+R60vYU0k3wxHgr3WaNYNHgVwJmUtJ
R81W1beSyOXM3/AAggF6RDeXp9SEAitgOFCEPNeL2JPXJDQqyACuyQuZaspE5KF5
LFoAJv5+gYSSZYLpy09nGKLWwfM09vUELxz+PDT3xN0RprS9/O2P
-----END CERTIFICATE-----
Generated at Wed May 13 01:12:42 2026 by rpki-client