Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          uAyMbwd+rbGbHV+YVZmhlfjVUYpGCukXEMYQZtMxmkk=
Subject key identifier:   BB:CE:FF:7F:23:5E:0B:CB:5C:3F:CC:B8:47:05:1C:44:B5:D8:15:99
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0E01
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0DFE
Signing time:             Mon 02 Mar 2026 00:57:28 +0000
Manifest this update:     Mon 02 Mar 2026 00:57:28 +0000
Manifest next update:     Wed 04 Mar 2026 00:57:28 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: HUfQqrHyh8zFwsMH6t1o8csby6sxHDW46FLkhgiws88=)
                          2: EDABBC36FD1A11F097529AC4DAE4EC9C.roa (hash: GFx2ygGJ/nDrq7dilcUfzvmT0jcrZotNdwu67yJFyXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3585 (0xe01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: Mar  2 00:57:28 2026 GMT
            Not After : Mar  4 00:57:28 2026 GMT
        Subject: CN=69a4e078-ba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:60:95:88:31:95:c6:71:8d:91:24:fc:4d:
                    4b:a8:fd:a2:d8:39:ae:00:52:22:c0:fd:4c:dc:6b:
                    e1:26:ef:0a:82:11:de:88:72:3a:6a:bd:57:b6:5a:
                    70:26:1d:e0:c9:75:75:8b:d4:9f:cb:81:b9:75:af:
                    c5:a9:5f:7b:27:d6:5c:1b:22:de:35:88:5b:bf:2e:
                    b9:93:dd:d8:22:d6:6e:9d:39:d2:28:8e:0f:0e:a4:
                    d6:4d:11:e1:1b:f8:b7:9b:7b:87:59:f3:29:b1:3a:
                    5d:89:c7:d6:32:b6:ff:d9:fa:3c:c3:13:05:b8:e7:
                    da:ad:f8:91:65:33:6b:d5:f8:55:3d:80:fe:c9:af:
                    25:ef:2c:11:c6:57:36:52:6a:fc:40:11:3a:40:70:
                    cb:ac:ea:81:80:dc:8a:45:50:19:70:08:30:38:52:
                    a0:b5:45:4d:71:c1:aa:ae:ff:c5:57:4b:cf:cf:6a:
                    24:8b:fd:05:42:a4:3f:66:7c:b0:63:93:a4:ce:3e:
                    c6:82:65:6e:43:50:e9:21:30:15:91:94:7f:4f:37:
                    68:ab:c5:c3:05:ac:7c:01:e4:68:25:f8:1f:89:6f:
                    74:7c:6f:f6:da:f2:7b:ee:16:52:d3:66:d6:78:4e:
                    09:5b:43:9f:25:5e:1b:dd:3c:09:88:fe:2e:fc:a5:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CE:FF:7F:23:5E:0B:CB:5C:3F:CC:B8:47:05:1C:44:B5:D8:15:99
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4d:4d:68:99:1c:e9:14:8d:ff:a9:fd:3b:01:4d:92:c0:f2:
         0e:f5:0f:af:37:ce:5f:6c:6a:51:3f:12:1c:8d:90:f1:6d:3b:
         8c:71:b9:36:e0:da:f7:d7:06:1d:10:7e:92:19:d6:89:08:a6:
         60:98:b0:2a:43:c0:cb:a1:52:90:68:98:6f:8a:09:e3:6b:a5:
         1f:19:99:72:7b:bc:a7:c3:b7:9a:ad:8a:62:e5:0d:a0:57:6c:
         42:43:49:d0:80:cb:30:36:56:e8:de:60:88:00:c6:d8:86:c3:
         57:47:70:12:2e:98:d3:f5:63:e0:b5:d6:27:82:a0:1b:97:66:
         d2:d3:f5:06:34:f6:02:df:96:a3:57:59:a9:e6:b2:ee:d6:a9:
         d6:7b:23:60:75:f4:bd:fc:d7:97:2a:19:b6:a8:8c:e5:be:92:
         4a:03:a2:7e:79:3e:74:2f:18:1c:7a:c0:65:cb:aa:d3:66:78:
         7f:86:ef:ef:22:37:58:10:5f:e1:e6:22:88:bc:ef:45:ae:6d:
         f9:c9:58:ef:ab:c4:f7:6a:a9:33:e0:ec:01:e5:9b:f4:66:bf:
         2b:e3:ea:c0:d5:63:d1:f3:2a:fb:54:41:72:70:41:d0:1c:28:
         c5:07:8b:22:e3:f6:7f:cf:00:f4:6a:c7:88:d5:0b:7d:5f:0c:
         c2:51:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:33 2026 by rpki-client