Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          nAgHWzuMPP9W9F9RHF/ojInHZW5h6+4F92jSsd+mqic=
Subject key identifier:   07:AF:97:21:10:68:C0:6A:1B:CF:67:78:05:DD:F7:E4:77:B5:15:9E
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       0643
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          063F
Signing time:             Mon 02 Mar 2026 01:53:18 +0000
Manifest this update:     Mon 02 Mar 2026 01:53:18 +0000
Manifest next update:     Wed 04 Mar 2026 01:53:18 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: B9bBBq+BY3kbtli5CREIZ1Eef/7hQM6RknOlbuiWcmw=)
                          2: 8065B86A532E11EC801D331CD8A014CE.roa (hash: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=)
                          3: 21625A96533111ECB2F6BE24D8A014CE.roa (hash: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                          rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Mar  2 01:53:18 2026 GMT
            Not After : Mar  4 01:53:18 2026 GMT
        Subject: CN=69a4ed8e-87de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:e5:ca:3f:7d:1f:20:0b:70:5e:69:a4:64:
                    8e:7d:66:eb:b7:c0:d7:34:a5:5a:2d:3a:d0:41:24:
                    47:95:dd:1d:b5:b7:87:90:78:77:b0:4b:17:34:c6:
                    8c:61:22:40:27:27:8f:a0:59:8b:7d:ec:39:35:ce:
                    23:15:8e:a8:c6:d5:69:f1:56:02:24:50:27:fa:4d:
                    89:b5:2c:69:d4:bc:7c:52:e4:b9:e7:dd:84:33:e0:
                    f9:7e:8c:a6:e0:4a:22:b1:c1:e5:72:de:fb:cd:8c:
                    b9:8c:38:57:93:4e:fc:ac:9c:04:a6:40:7c:0e:09:
                    be:fb:0a:c9:96:2e:de:da:0f:08:f1:80:25:9c:0e:
                    12:3c:0e:1b:45:29:74:e5:95:08:0a:73:e5:49:1d:
                    31:1d:61:84:4b:0b:fb:3a:7f:e8:43:6e:e0:2b:f7:
                    81:be:94:94:ec:20:7f:95:b8:56:cd:77:72:2d:da:
                    02:48:8e:b4:8d:65:4c:7b:17:4b:a8:f6:25:33:13:
                    a3:db:53:4a:e6:4d:30:66:65:9f:9b:60:a1:1e:f8:
                    4c:97:c4:2b:e9:33:2c:c0:4f:a8:55:57:f9:b1:73:
                    01:ab:9c:77:b4:73:f3:ed:ae:9d:4c:d3:3e:bc:2e:
                    12:fa:72:15:58:6f:f9:04:ff:0a:73:41:ac:71:62:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AF:97:21:10:68:C0:6A:1B:CF:67:78:05:DD:F7:E4:77:B5:15:9E
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:7e:74:c0:9f:b7:a5:8e:6d:da:b7:8e:1f:45:33:e4:65:
         83:bf:f9:89:5f:b2:4b:f0:ca:79:19:a9:ac:92:9a:29:d8:ee:
         56:8a:93:4b:6b:a5:94:52:02:06:17:9a:0b:e1:41:db:99:11:
         c9:6b:e7:e9:52:51:cb:8e:74:f0:b2:c2:10:0d:b0:44:7f:a9:
         5e:b0:dd:42:a3:68:e9:98:08:cd:03:94:c2:92:73:ef:a2:6e:
         fc:aa:1e:de:d0:48:c0:50:3f:7f:c4:cc:51:f4:6b:86:ba:77:
         dd:b3:a5:dd:f1:41:43:99:4a:ea:2f:47:d7:d0:96:1e:4b:69:
         60:b4:4c:7f:6d:d3:fa:6a:6a:2a:69:a1:ad:21:8d:f9:07:4e:
         0b:4b:6f:26:fc:c9:0e:c5:52:b8:dc:0a:5b:ad:fe:5f:7c:f9:
         ca:4c:3b:21:e4:09:98:ca:01:df:8d:d5:df:2d:71:6c:ab:22:
         13:56:84:51:a2:c9:f7:bb:2d:bf:06:7f:d7:6c:c8:f9:37:e1:
         0a:d0:d9:91:88:9a:8e:7f:7a:da:56:27:d5:5e:bd:88:37:45:
         49:4c:93:07:a2:16:3c:c3:50:48:be:fd:ff:7d:5a:17:8b:d0:
         66:76:f1:4c:37:30:d0:e0:c2:e1:9a:23:12:35:76:d7:71:58:
         e6:75:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:29 2026 by rpki-client