Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
File:                     9ghiikaC9VOASvOrLlihnDCordI.mft (raw, json)
Hash identifier:          l2sHSZiKIZm5F1rj549rbA/UfqF+WdE/uJIFO7k/bSE=
Subject key identifier:   90:3C:0C:95:9F:E5:4C:CC:4A:EA:F4:12:34:96:76:48:CA:2A:D4:80
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       0244
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
Manifest number:          0237
Signing time:             Mon 02 Mar 2026 03:07:09 +0000
Manifest this update:     Mon 02 Mar 2026 03:07:09 +0000
Manifest next update:     Wed 04 Mar 2026 03:07:09 +0000
Files and hashes:         1: 9ghiikaC9VOASvOrLlihnDCordI.crl (hash: qALgGx1v38UIHE2xKV6/ztlHQg8LaUE5RZN8JFIM0XA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR, serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Mar  2 03:07:09 2026 GMT
            Not After : Mar  4 03:07:09 2026 GMT
        Subject: CN=69a4fedd-551d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:41:3d:be:c9:54:8e:61:ee:99:6c:5d:bb:
                    e7:f6:8f:be:06:e8:ab:fa:68:b2:a6:3c:24:f7:34:
                    fa:95:8e:7b:4f:28:62:ef:0e:5d:0d:b6:f0:75:86:
                    91:11:f4:cb:77:a9:62:e8:d6:84:17:f6:16:b1:c1:
                    44:83:84:ae:80:61:2c:7e:92:22:dc:b6:c4:89:02:
                    c7:86:53:cc:aa:4d:cb:47:92:52:a0:46:65:e9:c0:
                    2c:6f:9b:3e:79:d0:6c:de:55:b4:df:6e:d4:18:ec:
                    fb:8f:1b:72:1e:6b:af:68:7f:fe:65:b2:84:af:5f:
                    c7:bc:5d:27:11:4a:bb:27:a9:c7:8c:a2:1d:95:66:
                    8a:93:a4:c8:d0:83:e7:d4:5c:05:54:34:02:ed:9c:
                    98:0a:9c:5d:f8:5d:90:e2:1a:74:cd:13:07:63:74:
                    c2:63:0c:fe:d9:30:d4:29:8e:6e:e2:bf:41:eb:4b:
                    a1:b8:af:40:77:ef:fe:52:1e:d5:d0:ea:db:f8:56:
                    88:e4:33:50:45:39:13:c7:0a:f4:fb:88:8b:5a:06:
                    d4:a3:0b:fb:e6:1e:15:5c:dc:9d:5b:c7:35:a1:57:
                    21:56:b9:e9:76:d2:35:e0:a2:c4:60:04:40:8c:c5:
                    78:b8:43:05:dc:77:36:53:eb:5c:af:c2:87:8f:04:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3C:0C:95:9F:E5:4C:CC:4A:EA:F4:12:34:96:76:48:CA:2A:D4:80
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:69:8b:5f:7e:22:43:3e:ca:bf:1a:5d:cb:21:c0:dd:71:
         b8:bc:b3:2f:6b:1e:51:96:35:fe:a2:71:be:43:94:f3:c9:cb:
         91:42:60:34:ab:2e:99:56:6d:06:81:5d:cd:74:68:54:09:bf:
         d5:1d:0a:4d:7e:2d:e6:58:e5:88:9c:db:f5:1a:42:e6:ad:bb:
         56:95:78:e1:c3:80:a8:73:2f:c5:2c:92:69:a4:bf:5c:02:12:
         c0:d1:47:9e:16:5b:59:43:c9:be:54:00:aa:14:e0:be:09:33:
         61:32:8b:29:de:9d:32:3b:96:8a:aa:82:b3:4b:fb:b4:8b:b6:
         b9:99:33:0d:ae:50:c2:11:9e:ca:d0:89:7a:46:44:f8:59:2a:
         c4:f7:ed:fd:d2:25:24:28:2d:1f:13:e4:1c:15:83:d9:f6:49:
         17:20:83:f6:10:72:e5:f5:4c:c0:72:6d:02:7c:9a:83:f2:15:
         49:38:93:c8:5a:01:ca:0b:4c:0e:fa:aa:45:03:04:b1:6c:5b:
         fb:ff:21:58:54:98:30:e2:54:fc:39:7f:16:2d:cc:b7:5f:2d:
         a3:36:df:c5:dd:10:6a:d9:e0:c7:b0:1a:24:f7:f1:0f:90:80:
         22:dd:9d:f1:99:13:9e:01:94:3f:5e:38:44:15:82:a0:0e:c3:
         0a:c2:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:18 2026 by rpki-client