Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          i4PobcleNxIBr7fuoeCGem7h32O7yNfvxTU1BbIhnGs=
Subject key identifier:   DD:A1:D5:7B:19:1D:B2:AD:AA:45:18:45:EA:BA:F4:A1:49:F0:A6:02
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       0A1F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          0A17
Signing time:             Fri 17 Apr 2026 01:23:09 +0000
Manifest this update:     Fri 17 Apr 2026 01:23:09 +0000
Manifest next update:     Sun 19 Apr 2026 01:23:09 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: atfIxIKO4bds3eEg+sV9OvXfcDkKJ8ZbIyeOln6NhOI=)
                          2: B2B71F48BBB711F0A55267C8DAE4EC9C.roa (hash: kChp13s64I7ds7m3cFb8J8f9uZBGgnrFBEhdaD7OJR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591 (0xa1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: Apr 17 01:23:09 2026 GMT
            Not After : Apr 19 01:23:09 2026 GMT
        Subject: CN=69e18b7d-0f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:bb:1b:18:67:6c:6c:ab:ca:58:8a:b1:e6:
                    1a:a7:81:15:37:4d:b4:f6:f9:87:a9:df:c9:62:7b:
                    ed:7c:6a:de:cb:06:59:9f:10:39:3b:2a:43:2f:bd:
                    52:f3:42:1c:45:96:f0:dc:84:fd:64:74:36:d4:3d:
                    a0:d4:19:60:36:42:09:75:fe:0d:84:7a:69:57:7b:
                    e2:88:f1:db:67:3d:dc:1f:9d:ab:e4:41:64:5a:ed:
                    2e:ef:e8:4c:79:fb:27:da:d8:c7:a6:7c:15:e3:f2:
                    ad:d5:fa:7e:29:f2:98:57:d7:31:45:a2:b9:0a:4c:
                    40:38:23:af:20:06:12:fc:55:c7:04:ea:64:83:e2:
                    23:40:0a:3d:97:3b:ec:c0:0a:a8:36:61:c4:0d:86:
                    62:6d:12:53:cc:67:2e:0d:f3:fa:30:0c:24:65:0f:
                    b1:cd:a6:05:45:0b:04:b9:20:c6:2a:f0:c2:0c:58:
                    28:55:d4:9a:f0:6d:f9:4a:a8:7a:c2:d7:7e:54:0a:
                    0b:98:31:12:72:64:65:8f:b0:3e:f3:6c:e3:94:9f:
                    12:c4:53:6c:af:34:a9:d2:a8:16:c3:43:f3:85:f6:
                    61:5c:ea:b9:a4:da:2e:5f:9d:31:93:4d:a4:23:4e:
                    31:86:02:55:d8:3b:d0:dc:fe:57:7c:69:80:f7:06:
                    fa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A1:D5:7B:19:1D:B2:AD:AA:45:18:45:EA:BA:F4:A1:49:F0:A6:02
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:16:9b:c9:88:84:13:da:39:74:e2:95:fc:b8:02:c6:9a:
         9c:10:28:81:d6:42:d3:57:c1:b4:57:a1:61:02:9c:35:e6:59:
         9e:ae:8a:ef:a7:1e:51:0a:14:4c:8d:db:34:22:ec:86:d5:37:
         8d:49:93:83:ed:12:c2:27:40:36:7e:fd:7d:70:92:66:00:07:
         8a:6c:2b:1d:e8:91:db:99:3b:92:28:8d:7f:07:7d:ad:f7:1a:
         2b:22:de:8c:db:26:2e:53:79:51:74:ae:1f:9b:b1:b9:fe:1a:
         70:dd:a7:25:3b:d5:a9:8e:b6:38:ec:06:3f:79:d3:26:00:ad:
         c4:02:aa:9e:fd:37:af:2f:0f:78:0c:58:93:de:40:ed:8c:97:
         f7:fb:ed:17:aa:13:7c:3d:f3:68:08:cb:ef:db:a2:05:72:c2:
         1c:f0:a8:42:d5:d5:6c:10:dd:43:9b:03:59:26:53:90:63:98:
         4d:e6:df:00:ca:53:b6:3f:1c:fa:d8:00:31:f3:23:03:3c:8b:
         cc:0c:8f:44:8d:bd:6e:7a:15:66:71:68:4b:ae:30:92:f0:67:
         14:0f:eb:17:ef:55:34:da:c0:85:8a:7c:4a:f6:75:c4:bb:17:
         2f:99:69:f8:fc:c7:39:55:be:41:07:ad:3f:cd:ce:c3:cc:71:
         b1:38:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:35 2026 by rpki-client