Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          TPL8S6ZHpopVrC7joocwil8D8ggj/2sCLaae74j0toc=
Subject key identifier:   51:70:50:7F:CD:F1:09:AE:2F:46:8F:2E:0C:7D:AD:E0:B2:EA:79:48
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       0353
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          0352
Signing time:             Fri 17 Apr 2026 03:54:50 +0000
Manifest this update:     Fri 17 Apr 2026 03:54:50 +0000
Manifest next update:     Sun 19 Apr 2026 03:54:50 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: NEReFZ8VQR8SsEWdaQctvinbT/CV88MP7DMbWEzIQT4=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Apr 17 03:54:50 2026 GMT
            Not After : Apr 19 03:54:50 2026 GMT
        Subject: CN=69e1af0a-257e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:4c:43:03:61:77:fe:37:b0:af:f2:ac:5f:
                    e3:b4:71:f9:94:f5:65:d9:dc:98:88:e0:81:5f:b9:
                    b7:74:04:fc:cb:a7:94:d4:d6:6c:d5:11:5e:1d:12:
                    88:3f:62:14:16:fa:a1:83:ce:15:31:5a:36:28:21:
                    02:44:28:93:83:8f:f4:a6:a4:a6:b0:7d:ba:51:c8:
                    ed:00:c0:8e:9a:e9:18:71:2a:9a:fa:5a:f1:b5:ac:
                    15:50:83:92:00:68:d4:08:e6:eb:73:e1:32:04:ac:
                    96:06:0f:26:4b:56:7d:8a:18:c6:8a:33:89:b8:a7:
                    d0:34:de:20:7c:8f:b2:92:6b:4f:d8:1f:b3:f0:eb:
                    88:93:1b:49:fc:a1:61:94:60:a3:36:9d:fb:f1:fe:
                    76:d2:2e:95:bd:ac:9b:f9:66:bf:aa:99:60:80:71:
                    db:99:7e:3a:bb:de:5c:d4:c7:5d:09:7d:68:6e:f9:
                    15:51:63:47:a7:81:e9:99:b5:50:91:c9:22:f8:f5:
                    db:97:5b:a1:d5:8d:41:e3:10:94:a5:2f:86:ff:74:
                    88:09:fd:9b:ad:15:4f:b9:17:36:53:79:3a:67:ca:
                    4d:ee:67:b7:ae:48:f4:f4:be:08:61:e5:89:3f:b2:
                    ad:9c:f4:6f:5b:3a:24:a1:fc:90:cf:85:58:1b:ae:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:70:50:7F:CD:F1:09:AE:2F:46:8F:2E:0C:7D:AD:E0:B2:EA:79:48
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:07:0b:65:52:ae:6c:92:55:a7:3d:9d:02:1a:60:db:38:57:
         d0:dc:ee:27:04:34:2d:dc:db:e9:bf:42:de:e1:5b:4d:49:43:
         7b:77:63:ae:1c:2f:00:fe:c0:4f:92:62:c0:1d:ec:48:30:6d:
         19:56:84:f6:66:27:a0:07:47:9c:7f:fe:aa:07:bf:89:c4:13:
         45:cb:84:4c:65:c4:3b:b5:79:ea:a2:93:d4:3b:75:13:52:3d:
         2a:c5:08:55:47:a5:3e:ef:1e:78:06:27:07:4c:ac:55:15:89:
         a2:48:5f:97:ce:dd:26:60:15:9a:f5:22:48:43:ab:8d:b7:42:
         99:5c:e0:e7:9c:c8:ca:62:55:a7:4e:38:f1:cf:ff:f2:c3:84:
         ec:6c:d8:fd:1e:37:c4:25:4d:3f:5e:b9:9b:4b:57:05:9e:e3:
         dd:a2:21:e2:5c:12:c3:5d:66:e4:24:05:d8:f0:63:45:94:c5:
         c8:2a:b3:75:54:a7:e1:43:f6:42:f3:bd:8b:66:0f:16:71:67:
         e0:2f:dd:98:3f:f1:9a:0d:7c:cc:5d:be:70:1b:8d:ff:5d:db:
         9c:22:09:e4:f3:aa:79:f6:db:d5:6e:a8:00:8f:f2:97:7a:d7:
         f3:18:41:ec:11:40:0c:c8:2e:02:a0:ec:fb:27:c4:04:dd:21:
         4f:26:28:11
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzlBNzFBUjExMC8GA1UEBRMoMENERTBCN0U2NzhGRkVBOUUzQUUwNTc5RkVFMTg0
Nzc2MTJFNEZFOTAeFw0yNjA0MTcwMzU0NTBaFw0yNjA0MTkwMzU0NTBaMBgxFjAU
BgNVBAMTDTY5ZTFhZjBhLTI1N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMfUxDA2F3/jewr/KsX+O0cfmU9WXZ3JiI4IFfubd0BPzLp5TU1mzVEV4d
Eog/YhQW+qGDzhUxWjYoIQJEKJODj/SmpKawfbpRyO0AwI6a6RhxKpr6WvG1rBVQ
g5IAaNQI5utz4TIErJYGDyZLVn2KGMaKM4m4p9A03iB8j7KSa0/YH7Pw64iTG0n8
oWGUYKM2nfvx/nbSLpW9rJv5Zr+qmWCAcduZfjq73lzUx10JfWhu+RVRY0engemZ
tVCRySL49duXW6HVjUHjEJSlL4b/dIgJ/ZutFU+5FzZTeTpnyk3uZ7euSPT0vghh
5Yk/sq2c9G9bOiSh/JDPhVgbrghvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUUXBQ
f83xCa4vRo8uDH2t4LLqeUgwHwYDVR0jBBgwFoAUDN4LfmeP/qnjrgV5/uGEd2Eu
T+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5QTcxLzMxMUU1MDJBQUQ1MjExRUU4MkYwOTNBRTc3NTQxMkU2L0RONExm
bWVQX3FuanJnVjVfdUdFZDJFdVQtay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0RONExmbWVQX3FuanJnVjVfdUdFZDJFdVQtay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzlBNzEvMzExRTUwMkFBRDUyMTFFRTgyRjA5M0FFNzc1NDEy
RTYvRE40TGZtZVBfcW5qcmdWNV91R0VkMkV1VC1rLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYBwtlUq5sklWnPZ0CGmDbOFfQ3O4nBDQt
3Nvpv0Le4VtNSUN7d2OuHC8A/sBPkmLAHexIMG0ZVoT2ZiegB0ecf/6qB7+JxBNF
y4RMZcQ7tXnqopPUO3UTUj0qxQhVR6U+7x54BicHTKxVFYmiSF+Xzt0mYBWa9SJI
Q6uNt0KZXODnnMjKYlWnTjjxz//yw4TsbNj9HjfEJU0/XrmbS1cFnuPdoiHiXBLD
XWbkJAXY8GNFlMXIKrN1VKfhQ/ZC872LZg8WcWfgL92YP/GaDXzMXb5wG43/Xduc
Ignk86p59tvVbqgAj/KXetfzGEHsEUAMyC4CoOz7J8QE3SFPJigR
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:04 2026 by rpki-client