Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          Mdkuvp+e3u7kWlCVpfj/iFA+W+xQXG0QMIWml5f29xI=
Subject key identifier:   3A:35:C6:BA:EE:3D:3A:37:37:37:9C:3A:68:64:EE:E3:32:AD:BD:18
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0629
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          0628
Signing time:             Sat 13 Jun 2026 02:39:07 +0000
Manifest this update:     Sat 13 Jun 2026 02:39:07 +0000
Manifest next update:     Mon 15 Jun 2026 02:39:07 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: HKGBp5bWb9nYqWJRTABoWdPhpudf2f2Y7xp+akMc2Ig=)
                          2: 5C5FD3B8B1B811ECBE7762D35A40D577.roa (hash: vGmD4pROB8VFUopnGf6To3GzFkP29HGjp5Gl6MpnPn0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577 (0x629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Jun 13 02:39:07 2026 GMT
            Not After : Jun 15 02:39:07 2026 GMT
        Subject: CN=6a2cc2cb-ee8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:72:71:bb:c5:e4:c5:93:53:9d:52:96:af:
                    26:28:37:d0:04:44:ff:5a:3f:f8:1f:d0:0a:25:37:
                    57:7f:88:a0:44:07:0e:40:5a:d0:08:31:a9:2f:2b:
                    05:a3:5c:89:9c:cb:82:58:db:c2:6b:f9:81:db:e4:
                    11:bd:68:70:67:67:1e:65:22:d0:5b:bd:1d:c2:ff:
                    b8:76:dc:7b:74:54:8a:e1:20:5a:2c:c5:4d:49:0a:
                    5c:6d:e9:0b:5e:da:0d:f4:3f:82:ad:e7:1d:d5:f3:
                    4f:58:48:de:8f:c0:1a:09:bf:7f:fa:8d:31:c9:da:
                    dc:ca:9f:e9:e2:f8:d8:b5:12:e1:0c:a0:53:1b:85:
                    e1:36:1e:1a:63:6a:63:20:88:e4:fd:55:6c:35:89:
                    f9:31:81:d4:aa:45:18:94:0d:42:2b:5d:99:3b:94:
                    04:0b:f0:74:01:c4:07:8b:55:b2:29:0c:2d:17:88:
                    7e:51:54:0f:57:6b:4d:78:3d:30:83:ee:31:2a:4f:
                    24:6c:58:bc:7e:0e:44:3f:24:3b:4d:ba:1a:28:7e:
                    06:a7:13:b7:83:c9:64:07:d4:f5:69:4a:eb:1a:f3:
                    e7:45:f0:12:b3:06:2b:38:93:5a:f8:24:90:e7:68:
                    b9:eb:bc:76:e4:eb:41:46:44:16:a6:ff:86:c8:57:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:C6:BA:EE:3D:3A:37:37:37:9C:3A:68:64:EE:E3:32:AD:BD:18
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:0b:5b:72:95:46:21:1c:6b:cd:9c:05:28:cd:4e:d1:02:a9:
         71:c7:50:8e:9c:32:29:9c:00:97:5e:83:4c:a0:8f:ca:cc:b7:
         c0:b8:7c:6c:95:ec:23:43:f3:be:44:5a:df:ee:e5:e3:0e:31:
         f1:f8:36:cb:72:8e:b4:b3:a4:04:c5:1e:87:08:75:ca:5d:17:
         63:65:fc:43:10:01:a1:01:8e:47:29:29:83:ee:e5:30:65:31:
         68:5f:aa:6d:e0:d2:1e:6c:5d:da:65:ae:12:13:59:6b:6a:86:
         80:06:aa:91:2c:7c:f7:50:d7:f1:06:e9:3c:a3:3d:04:54:b1:
         f1:f1:15:45:e8:d9:14:cf:ee:f8:eb:52:f5:2b:55:33:40:f5:
         62:53:cf:06:53:81:8d:63:63:b6:ba:3b:38:b5:43:b9:a8:ca:
         c1:5c:29:72:4e:95:ec:78:9b:78:8e:3b:ac:7b:59:ed:de:9f:
         09:0d:69:57:0d:83:bc:19:2e:fa:b1:e3:02:9f:9b:da:81:1f:
         f9:bc:91:4e:2e:52:8b:37:2b:ba:4f:35:ad:7f:05:29:78:d1:
         bc:3b:49:90:4a:1e:1a:86:bc:a4:04:18:4e:a8:6d:cf:c0:8b:
         91:73:9c:6c:99:57:2f:ea:f2:c7:53:0c:51:e4:93:bc:2b:ea:
         a7:09:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:30 2026 by rpki-client