Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          n9jNG0+4x+qp85i7Q8nU2t0Yay5ZQOlfCvi6qhLxamY=
Subject key identifier:   C1:C2:C6:EF:C2:F2:5E:E7:54:0A:9F:EF:5B:DF:35:77:C7:31:2B:5D
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       05AC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          05AB
Signing time:             Sun 01 Mar 2026 01:59:09 +0000
Manifest this update:     Sun 01 Mar 2026 01:59:09 +0000
Manifest next update:     Tue 03 Mar 2026 01:59:09 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: peBPI7YIUJRU/uHGVKuQcTWk0VVlP83WHnIzMCQ96JU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Mar  1 01:59:09 2026 GMT
            Not After : Mar  3 01:59:09 2026 GMT
        Subject: CN=69a39d6d-4102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:98:0b:f2:ca:6c:a8:d3:3b:77:64:ea:0d:
                    0c:a0:3f:6f:ca:a2:2b:5c:31:4e:3b:27:4d:b8:0d:
                    d3:1a:10:48:8f:ce:66:cb:1f:c4:93:66:ec:98:b2:
                    c0:5f:4e:9b:c3:00:8c:e3:eb:fc:fc:a6:45:12:d7:
                    0f:01:5b:60:56:76:ed:15:bd:e6:b7:57:95:0a:2b:
                    12:87:16:88:a0:c6:e1:90:16:db:37:8d:31:49:90:
                    b8:27:1d:c5:1b:a6:a5:8c:54:5a:02:d3:d7:96:58:
                    2d:ce:87:b2:a5:65:96:e8:cd:10:e8:ba:6e:d2:2e:
                    fd:a3:97:c5:1a:eb:e7:a4:53:fb:55:56:64:f1:41:
                    a0:81:24:fa:85:9b:b5:8e:22:5a:bc:80:10:51:74:
                    ec:a1:d1:4d:d2:55:3f:c1:55:c2:db:f3:f6:36:27:
                    c8:64:da:31:a3:3e:1c:ae:b7:92:23:48:ba:42:ad:
                    fd:1a:8e:e2:9d:3d:4d:3e:16:5b:f6:da:ff:cd:53:
                    c2:49:89:3b:c6:a5:fd:dc:0e:90:77:35:1b:97:98:
                    f6:33:c3:91:f5:e0:7c:17:ba:f5:a8:9e:b8:8e:71:
                    be:db:6b:6a:0e:ab:80:32:dd:9c:5d:7c:e6:87:fa:
                    14:13:6b:fd:3a:2d:6f:f8:a4:ca:2e:5d:51:7f:83:
                    6f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:C6:EF:C2:F2:5E:E7:54:0A:9F:EF:5B:DF:35:77:C7:31:2B:5D
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:23:09:56:0b:8c:26:2f:8a:51:dc:f1:3d:ca:eb:bd:c4:fc:
         02:06:cd:b9:3d:8f:4e:19:13:50:b9:f6:5d:67:1a:9d:f3:94:
         65:03:2e:9d:25:4a:80:b2:57:80:88:2b:14:98:5b:01:37:69:
         b5:8c:2c:a9:d2:cf:e8:89:19:9d:55:f0:6d:d2:8d:f4:0c:b0:
         ee:95:09:b2:32:31:f6:5e:07:d6:c4:63:db:0c:ac:bb:45:d8:
         75:42:5c:ec:13:a3:ea:e9:6d:4b:fb:11:f7:25:87:f9:6d:e5:
         18:b4:2e:d7:59:0b:3f:0f:da:6b:c5:d1:68:46:b7:7a:7d:83:
         50:a5:c2:02:b0:be:57:da:f4:22:5e:9f:a1:6a:11:0b:c0:62:
         59:36:e6:92:24:b4:e5:45:54:a0:de:4b:98:3d:de:d6:b4:4e:
         60:ef:03:de:83:ac:36:8c:e4:3a:ff:0e:f2:4e:be:e1:0a:44:
         da:0b:30:1b:88:b0:39:1b:98:c4:2b:cd:61:de:40:11:16:7a:
         05:ff:35:7e:25:33:cc:71:9f:89:e3:24:bb:c0:d5:19:fa:ab:
         ed:25:81:ba:e3:a7:04:7e:3d:31:35:0b:78:8a:5b:04:0e:06:
         0d:80:de:57:be:48:97:63:78:ec:4f:84:20:17:80:85:07:e2:
         0a:96:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:45 2026 by rpki-client