Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          ZTA4ntJ+S3LDYE2KW2q5sMQzX6fl38XJKyk0Near4Ls=
Subject key identifier:   3E:98:9B:6A:9F:C9:9E:0B:E1:4A:F9:78:DD:A7:39:64:A5:AF:B0:A4
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       05C1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          05C0
Signing time:             Mon 02 Mar 2026 01:58:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:58:14 +0000
Manifest next update:     Wed 04 Mar 2026 01:58:14 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: pXt3EC7rPkYSHgnRfKqTsDlyijL82tOXypHxLBR7zxQ=)
                          2: 5C5FD3B8B1B811ECBE7762D35A40D577.roa (hash: vGmD4pROB8VFUopnGf6To3GzFkP29HGjp5Gl6MpnPn0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473 (0x5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Mar  2 01:58:14 2026 GMT
            Not After : Mar  4 01:58:14 2026 GMT
        Subject: CN=69a4eeb7-7156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:45:3d:0c:8f:38:ed:10:ae:a2:46:23:12:
                    7a:60:d0:b8:d2:87:44:3b:48:75:d3:df:bd:c2:69:
                    fd:9c:e6:ab:af:6e:96:94:6b:63:b3:ef:9d:59:8e:
                    22:c1:a9:5a:9a:ad:ba:1e:9f:d1:5d:c3:6f:57:2b:
                    ed:f3:d0:c8:04:e9:2d:64:7f:c4:fd:36:46:49:dc:
                    d9:93:1f:fb:58:9b:73:f5:86:09:fd:83:ff:1f:7e:
                    c0:23:97:a9:43:f9:2e:27:95:f9:ba:c8:65:53:52:
                    c5:49:82:33:98:a8:99:49:9c:0f:78:80:96:6f:f0:
                    6e:28:1a:39:7b:b4:88:ad:c3:0c:b7:4c:fc:37:3e:
                    37:1a:83:22:5d:20:c9:7e:eb:5f:bd:a2:01:aa:ab:
                    61:f7:84:85:08:52:72:85:92:e9:40:6b:42:31:43:
                    78:97:f0:ee:81:b4:48:a9:9f:87:dd:29:e6:50:89:
                    8e:b8:82:0f:21:99:bc:5c:52:9a:c7:56:3b:19:d6:
                    d8:4a:fd:d2:91:e4:d1:c6:de:a5:42:36:59:6d:c6:
                    4d:63:12:7e:42:1a:fd:81:e8:dc:7e:82:ee:d4:f5:
                    f0:be:f3:9a:7d:b8:e0:1a:f5:d7:5a:47:d5:cd:14:
                    28:a9:9e:b2:5c:1a:6a:f2:d9:3b:2e:8f:33:fa:2c:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:98:9B:6A:9F:C9:9E:0B:E1:4A:F9:78:DD:A7:39:64:A5:AF:B0:A4
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ae:77:34:fd:d8:8c:89:f3:dc:c5:7c:7e:75:7a:fb:ab:88:
         d1:1c:29:ef:1f:3d:66:76:34:69:68:2f:f9:2a:c7:8b:b1:92:
         77:36:29:23:1e:7c:96:4c:ac:ab:8f:aa:8c:58:2a:93:bb:4c:
         ce:2f:b2:41:29:8e:f6:17:59:38:02:69:2a:89:53:f7:5f:f4:
         0f:58:20:7d:44:72:72:4c:07:5e:09:e1:40:3b:30:b8:ea:70:
         06:84:c9:1c:cb:25:ca:2a:2b:68:eb:97:e8:10:2f:89:68:63:
         17:e8:6c:bb:74:c2:1b:7f:1e:39:09:44:43:33:d7:c1:56:22:
         54:b6:62:d1:1f:b7:41:d1:fd:79:84:06:8a:6f:a7:d2:ff:04:
         b4:21:25:41:b3:b8:ed:3f:04:cc:3c:e8:c1:c1:ff:d0:6d:d0:
         7f:2a:69:62:42:e8:dc:32:4f:30:54:22:c8:bf:13:8d:ce:90:
         a9:e7:ad:05:f0:f8:89:59:2c:e2:2e:12:49:68:e0:32:51:4c:
         6c:d1:bf:b4:95:0c:f0:22:cd:66:56:03:23:ac:32:de:81:50:
         b7:2d:9a:cb:d7:3e:e9:15:36:6f:4c:22:39:b3:34:9d:91:93:
         4b:19:fc:33:a0:3e:fe:fa:13:ca:0f:87:55:84:b4:bd:51:e7:
         d3:12:61:6f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDZGRkVBUjExMC8GA1UEBRMoMjUzRjFBNjg3NzE1MTBBNjY1NkQ3RDY2MEY1MDNE
NTVCMDZCOTAwNDAeFw0yNjAzMDIwMTU4MTRaFw0yNjAzMDQwMTU4MTRaMBgxFjAU
BgNVBAMTDTY5YTRlZWI3LTcxNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA0EU9DI847RCuokYjEnpg0LjSh0Q7SHXT373Caf2c5quvbpaUa2Oz751Z
jiLBqVqarboen9Fdw29XK+3z0MgE6S1kf8T9NkZJ3NmTH/tYm3P1hgn9g/8ffsAj
l6lD+S4nlfm6yGVTUsVJgjOYqJlJnA94gJZv8G4oGjl7tIitwwy3TPw3PjcagyJd
IMl+61+9ogGqq2H3hIUIUnKFkulAa0IxQ3iX8O6BtEipn4fdKeZQiY64gg8hmbxc
UprHVjsZ1thK/dKR5NHG3qVCNlltxk1jEn5CGv2B6Nx+gu7U9fC+85p9uOAa9dda
R9XNFCipnrJcGmry2TsujzP6LNhlAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPpib
ap/JngvhSvl43ac5ZKWvsKQwHwYDVR0jBBgwFoAUJT8aaHcVEKZlbX1mD1A9VbBr
kAQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ2RkZFL0FGMTdDOURFQjAyOTExRUNBQkRGMkZDMDVBNDBENTc3L0pUOGFh
SGNWRUtabGJYMW1EMUE5VmJCcmtBUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0pUOGFhSGNWRUtabGJYMW1EMUE5VmJCcmtBUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDZGRkUvQUYxN0M5REVCMDI5MTFFQ0FCREYyRkMwNUE0MEQ1
NzcvSlQ4YWFIY1ZFS1psYlgxbUQxQTlWYkJya0FRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7rnc0/diMifPcxXx+dXr7q4jRHCnvHz1m
djRpaC/5KseLsZJ3NikjHnyWTKyrj6qMWCqTu0zOL7JBKY72F1k4AmkqiVP3X/QP
WCB9RHJyTAdeCeFAOzC46nAGhMkcyyXKKito65foEC+JaGMX6Gy7dMIbfx45CURD
M9fBViJUtmLRH7dB0f15hAaKb6fS/wS0ISVBs7jtPwTMPOjBwf/QbdB/KmliQujc
Mk8wVCLIvxONzpCp560F8PiJWSziLhJJaOAyUUxs0b+0lQzwIs1mVgMjrDLegVC3
LZrL1z7pFTZvTCI5szSdkZNLGfwzoD7++hPKD4dVhLS9UefTEmFv
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:29 2026 by rpki-client