Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          l5xEPlXllApggIR0cd1hx7AnOr4jHFvkEA0u9G/cZ3c=
Subject key identifier:   3F:8F:F7:CD:19:C2:31:62:F4:5A:EE:E0:C3:F8:29:42:E2:CF:FF:C6
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          02A2
Signing time:             Fri 17 Apr 2026 04:14:55 +0000
Manifest this update:     Fri 17 Apr 2026 04:14:55 +0000
Manifest next update:     Sun 19 Apr 2026 04:14:55 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: aSQd0aBOGuFxU5Jj2zpp983v93krPHZhcJVIOEtWA74=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: Apr 17 04:14:55 2026 GMT
            Not After : Apr 19 04:14:55 2026 GMT
        Subject: CN=69e1b3bf-c05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:ef:13:f8:92:8d:91:72:0d:93:51:10:b4:
                    6e:3b:de:02:f1:9f:41:9e:2a:ef:51:34:44:6b:c2:
                    a4:50:cf:d3:36:cf:7d:60:97:50:9b:19:21:b7:59:
                    9f:8e:33:73:f9:87:c6:2a:94:90:0d:f6:ae:e8:26:
                    ae:23:c9:4a:c3:09:dc:b1:d2:f7:c3:06:4b:3d:5c:
                    19:43:f8:9f:02:ec:8f:b5:a7:13:7e:a3:86:8f:61:
                    f6:93:fb:ab:aa:5b:b9:49:f1:54:84:74:b1:28:7b:
                    da:b3:9d:f3:dc:f6:a5:ba:bc:5b:8d:41:eb:91:be:
                    3b:be:9d:27:1a:8e:7f:e2:e6:c9:4d:7d:45:06:17:
                    b8:ef:5a:0d:c3:e4:f2:46:0b:46:4e:65:7e:9b:d1:
                    dc:32:ff:01:a5:c3:f3:7e:35:5d:4b:36:99:bf:e8:
                    8d:b7:23:eb:bc:b8:b5:ee:59:99:e9:19:b7:4a:01:
                    57:fb:d5:d9:0f:eb:21:1c:ad:03:10:18:ff:06:95:
                    8d:a6:17:bb:ce:b3:1a:8e:27:02:aa:3e:37:4f:3a:
                    06:5c:0d:f1:54:e6:1e:d6:55:35:b8:10:c1:8b:69:
                    bd:3b:f4:ba:6b:c7:64:96:2e:c1:14:69:28:1b:c0:
                    9e:b9:48:9b:0f:da:88:69:b9:a7:c2:d3:ad:44:23:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8F:F7:CD:19:C2:31:62:F4:5A:EE:E0:C3:F8:29:42:E2:CF:FF:C6
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:b5:27:ca:d1:49:b6:26:93:2a:57:81:2a:0f:51:3f:99:
         c1:88:47:d0:5c:ec:ac:9c:76:d8:f5:b1:6e:7e:01:47:48:28:
         6d:12:39:85:74:4a:d5:bc:b4:24:5b:94:60:c8:01:1c:62:bf:
         65:d6:8c:cb:b3:c3:71:de:a8:1c:c7:7f:79:1d:5a:a6:76:5b:
         63:f9:68:65:e2:f0:44:0c:32:79:54:9f:45:92:a7:9e:78:0b:
         41:42:b4:88:8c:4a:eb:5b:98:78:30:8a:0c:d5:b0:b2:07:db:
         24:82:0c:78:08:1a:c3:04:fa:84:4e:93:98:a3:5b:06:76:6c:
         aa:fd:99:74:a8:3f:0d:58:14:9d:21:3e:2e:33:7c:f9:13:1e:
         24:1d:8e:7a:a4:63:dc:cb:bd:5e:2f:24:96:e6:37:97:c3:4a:
         59:40:39:d6:db:b4:ee:bb:e3:ff:0b:5b:41:b6:78:78:80:97:
         02:a4:6d:bb:06:c5:43:ec:ba:26:96:51:cd:75:ac:fb:0a:a9:
         63:4b:bc:4a:82:7a:7f:dd:77:8d:26:4d:df:d3:29:72:50:b0:
         1f:a6:ed:9e:84:85:08:bf:d2:6e:24:cb:b0:2c:50:4c:a8:1b:
         bc:73:9b:2e:4a:5e:1d:e0:6b:19:81:f1:28:78:a1:ff:3f:44:
         7f:2f:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:58 2026 by rpki-client