Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
File:                     iNIzyaKwFij9KfyxIJhpkPWebZs.mft (raw, json)
Hash identifier:          JI1CwMDn4Ju7xaiq0jTXzGtXn7NgHO/ltBPyn5OrIAU=
Subject key identifier:   3D:87:0C:22:8C:84:84:B7:0D:BA:9F:F4:77:80:4D:E2:D4:F8:23:11
Authority key identifier: 88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B
Certificate issuer:       /CN=F3636791AR/serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
Certificate serial:       70
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
Manifest number:          70
Signing time:             Tue 28 Jul 2026 05:33:16 +0000
Manifest this update:     Tue 28 Jul 2026 05:33:15 +0000
Manifest next update:     Thu 30 Jul 2026 05:33:15 +0000
Files and hashes:         1: iNIzyaKwFij9KfyxIJhpkPWebZs.crl (hash: 8LjfP59x/l3k6QtrnKa/GdTPk2OS5psAFGusI3pOGp4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                          rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AR, serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
        Validity
            Not Before: Jul 28 05:33:15 2026 GMT
            Not After : Jul 30 05:33:15 2026 GMT
        Subject: CN=6a683f1c-5e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:29:3f:e2:3e:f6:07:47:ac:2f:3b:2f:80:
                    8c:1f:93:76:85:12:fd:8d:b8:af:d3:1b:a6:ed:90:
                    1d:5f:15:c1:d0:b4:11:32:c7:8a:9e:d3:48:0a:38:
                    ed:f8:d8:fc:03:70:23:ba:ee:a2:05:1f:e6:38:8a:
                    2e:14:c8:a8:98:8a:0f:91:e8:9b:71:9c:23:0f:6b:
                    d5:d1:8c:c9:85:1b:b4:32:2a:96:99:f6:68:62:04:
                    fa:42:4d:a0:6a:7d:e7:78:ff:d6:ec:8e:79:86:66:
                    16:b4:45:d5:2c:3b:f5:02:70:22:2a:86:85:44:e1:
                    10:4c:e4:a3:8e:f7:4d:8d:bb:aa:d3:23:26:ce:fe:
                    93:da:86:a0:7f:7b:78:c2:a0:74:89:29:55:55:5c:
                    5d:c7:16:77:01:4d:77:b9:3a:76:c1:d4:b5:72:81:
                    f9:12:9a:09:11:96:1d:3a:ec:a6:9a:f8:0d:42:b8:
                    1d:f9:f9:d5:ab:98:49:38:b7:74:4f:2c:62:aa:d4:
                    08:45:67:87:66:8e:b7:17:4c:f8:17:1c:b4:d5:2e:
                    dd:44:76:2c:59:ad:b5:36:d5:9a:81:71:f8:5a:26:
                    22:22:df:5c:02:bd:16:06:6d:e7:d3:59:89:64:3b:
                    c9:8b:26:cb:4b:8d:16:98:b8:1a:88:ba:b0:a2:56:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:87:0C:22:8C:84:84:B7:0D:BA:9F:F4:77:80:4D:E2:D4:F8:23:11
            X509v3 Authority Key Identifier:
                keyid:88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:62:fc:8d:da:c1:a8:5c:04:c9:59:c9:f3:ac:bd:87:ce:a4:
         68:b6:81:e2:25:6b:f3:17:f6:a2:60:4c:5b:14:34:dd:1e:84:
         c8:33:92:34:8a:f3:76:85:14:e1:c3:73:ed:ff:ee:92:1b:ff:
         b0:7a:9b:55:6f:76:6c:af:7a:9e:ff:5f:e9:87:88:46:0a:dc:
         de:c5:4b:c6:2b:14:5c:e6:66:ab:f7:fb:aa:ba:82:73:eb:66:
         7b:86:6f:b8:23:2f:11:ee:dc:4a:6d:68:1f:c0:10:7c:bc:73:
         8e:57:fc:84:13:8c:35:38:72:df:63:c8:f3:ba:5f:76:6a:02:
         16:59:5f:08:c9:1e:3e:e2:f0:06:4b:35:b9:ae:0e:02:d2:98:
         18:cd:7e:54:9a:ba:fc:0b:f0:32:c3:58:96:c9:55:a3:e5:77:
         d8:68:9b:a6:49:c3:8e:18:df:d2:71:5b:7b:f8:73:ea:b9:d9:
         a3:01:4a:bb:85:0b:25:82:b8:37:93:8a:a4:5a:ac:81:29:9e:
         09:3e:5b:af:55:3d:c5:45:23:45:db:04:42:25:5e:67:ab:3e:
         51:bc:9b:a2:e8:77:18:57:97:4b:70:87:bd:04:19:e1:85:3c:
         91:b3:17:5f:5a:10:64:f4:f5:09:96:10:20:6f:28:99:07:9f:
         b3:01:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:20 2026 by rpki-client