Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
File:                     D-g4ATBnRIcNHQamDPfzuj5UJlI.mft (raw, json)
Hash identifier:          uWWTofSYZj0sCNVskuXl+UZh22t04dbvBbwKyl6PsiM=
Subject key identifier:   5D:8E:04:93:A3:6A:D5:68:4A:E1:65:85:6D:3E:99:B1:44:31:71:4E
Authority key identifier: 0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52
Certificate issuer:       /CN=F362E39EAR/serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
Certificate serial:       0E60
Authority info access:    rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
Manifest number:          0E5D
Signing time:             Tue 28 Jul 2026 01:04:56 +0000
Manifest this update:     Tue 28 Jul 2026 01:04:55 +0000
Manifest next update:     Thu 30 Jul 2026 01:04:55 +0000
Files and hashes:         1: D-g4ATBnRIcNHQamDPfzuj5UJlI.crl (hash: R+ArbXRvcXPFkBGEidXNg65JCDiuQcfQACAj1rVJDno=)
                          2: 85751D2246C411F0B35CB878DAE4EC9C.roa (hash: 8RnruMpMOyIroRB7WdabR+dI97SGVIprP/OPugvR+SU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                          rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3680 (0xe60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAR, serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
        Validity
            Not Before: Jul 28 01:04:55 2026 GMT
            Not After : Jul 30 01:04:55 2026 GMT
        Subject: CN=6a680038-c09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:18:b6:8a:77:69:ba:42:42:80:0c:21:11:
                    9c:55:15:80:a0:dd:dd:25:7d:24:90:a5:2d:1a:e9:
                    26:e3:a6:4e:44:0d:e8:21:63:ac:e4:42:ae:ea:97:
                    c5:6a:00:ed:68:9e:a7:82:94:9f:0c:26:63:9c:2d:
                    26:17:88:8e:b8:49:49:34:e8:70:8b:c7:a8:98:f2:
                    01:c6:d5:66:25:a1:2e:30:ec:61:2d:d3:d7:0a:a7:
                    49:06:49:63:21:00:09:1c:f6:15:37:14:c4:a5:fe:
                    0b:a3:7a:12:dc:59:82:fd:86:9e:8d:d0:c6:71:84:
                    a7:f2:7e:57:e0:28:49:b9:97:ff:9b:c2:72:08:31:
                    d3:50:34:fa:17:be:fe:2e:b8:94:d1:d6:e9:88:82:
                    fe:d2:6d:06:31:ec:45:56:62:80:44:07:d3:a3:05:
                    83:da:7c:e6:1a:33:f0:db:6a:6d:70:b4:34:37:80:
                    b2:d6:4c:a9:87:f7:c5:0e:a5:ba:23:f6:7c:9b:75:
                    ce:2f:74:7a:3a:bc:22:01:83:f5:b7:13:97:4a:0b:
                    cf:a0:ab:8b:a1:b0:3e:45:a4:36:91:19:4a:5b:8c:
                    f4:71:fa:25:8a:b2:14:94:09:37:e2:ff:4d:66:74:
                    40:51:a2:0d:9a:e7:bb:e9:40:d6:3a:fb:bf:09:0c:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8E:04:93:A3:6A:D5:68:4A:E1:65:85:6D:3E:99:B1:44:31:71:4E
            X509v3 Authority Key Identifier:
                keyid:0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:a7:51:34:01:4f:2a:ee:fd:01:16:b3:ad:31:cd:a6:0b:
         20:6f:fa:87:6f:0d:64:b0:5b:8d:79:7e:d3:d0:d2:f1:17:4f:
         d3:a7:b9:40:dc:dc:40:f6:b3:c3:8a:96:5d:3e:39:4c:b9:6d:
         be:c2:79:2a:4f:3d:2c:52:a5:b7:73:05:60:8a:45:9b:7a:e6:
         92:cc:02:82:28:a6:d2:de:90:06:ec:e4:66:b7:4b:b2:97:3e:
         3f:cf:db:13:f9:1e:71:df:41:cd:39:1a:89:4c:db:27:17:4c:
         92:23:47:45:1e:e0:58:fb:96:53:23:55:3c:64:6c:9d:d4:01:
         35:4d:bf:ac:0d:ae:2e:bf:c6:e7:fa:d5:86:97:81:d1:19:ae:
         27:03:86:06:07:ec:a7:7c:d7:13:99:fe:7b:6f:59:f7:2e:c3:
         bd:69:ed:db:90:fb:3b:f7:15:12:31:b3:06:5c:75:b8:de:d3:
         c9:87:b4:6e:de:e6:cf:61:e5:8b:78:29:6b:e4:9f:eb:44:ed:
         13:64:75:ac:ca:54:0f:22:dc:e0:f6:3f:5e:c7:fc:f8:2a:4c:
         5d:e8:f9:32:a9:a6:2d:1e:ce:13:96:e3:47:af:8e:d4:94:5a:
         6e:c6:1c:98:bb:c1:ad:ce:a9:2c:57:bb:f0:5d:78:7e:dc:67:
         03:8f:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:06 2026 by rpki-client