Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          MwvEKNr4CULIgv35HgQAZAyfUoXZN3MjAvnpMsxcav0=
Subject key identifier:   2F:F1:64:30:2B:0C:22:0F:A8:45:A9:40:A2:FA:6C:48:A9:D0:9E:05
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          31
Signing time:             Mon 02 Mar 2026 03:38:29 +0000
Manifest this update:     Mon 02 Mar 2026 03:38:28 +0000
Manifest next update:     Wed 04 Mar 2026 03:38:28 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: DcnUgbKoennRLzLD5UlwJEWlx18AEOjzNsTtusUzA54=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Mar  2 03:38:28 2026 GMT
            Not After : Mar  4 03:38:28 2026 GMT
        Subject: CN=69a50635-3400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:4a:97:1f:c0:a2:9b:78:5a:79:91:91:9e:
                    37:29:23:aa:a9:11:e1:3b:d9:1a:16:e5:06:e0:2a:
                    ab:79:5b:37:75:47:57:df:2c:94:0b:36:22:86:b1:
                    07:91:6e:13:01:8c:de:c0:6d:0c:e1:5d:52:8a:b0:
                    5a:7f:ec:88:6f:0d:83:71:64:2c:91:61:dc:aa:98:
                    13:c4:8b:bf:3c:2a:ae:9c:dc:13:f1:aa:46:66:4f:
                    42:11:1b:a1:17:89:f8:25:db:78:ae:22:41:d6:1d:
                    49:99:c0:b2:5d:29:09:93:86:ca:c9:37:a9:e2:2e:
                    00:ca:eb:ed:bb:98:2a:f9:24:aa:05:6e:21:27:3e:
                    86:41:cb:db:36:c7:58:91:55:33:7f:f4:90:c0:a7:
                    77:4f:3e:99:3d:56:62:56:0f:59:f5:43:c5:85:cf:
                    c0:c2:4a:38:2e:92:da:c5:fc:f2:eb:64:90:4b:ce:
                    3b:96:85:ca:05:5d:70:97:8b:8b:f5:ba:fa:0c:42:
                    17:e7:91:5d:db:ff:22:6d:3f:7a:6a:60:68:03:d1:
                    18:22:ee:14:1d:ae:cc:de:fa:05:6b:b3:00:32:8e:
                    79:82:d1:d0:02:e1:11:ec:29:c9:da:e8:9e:d8:6d:
                    c2:c9:18:67:04:02:1e:2e:a4:fd:e3:d6:54:55:78:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F1:64:30:2B:0C:22:0F:A8:45:A9:40:A2:FA:6C:48:A9:D0:9E:05
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:49:53:e3:f1:69:9f:d2:5b:eb:fa:ac:c1:65:08:91:00:
         3e:66:83:48:2b:1d:06:25:e4:7b:4e:2f:16:89:88:d5:d2:1e:
         9d:e6:28:bd:c5:82:64:4b:58:e0:73:8b:87:da:a4:6a:07:04:
         84:8c:4f:9d:17:1d:23:bb:29:b2:d4:aa:2c:f2:6c:86:9f:c9:
         12:83:9d:1a:97:ab:9e:a7:0f:0d:4c:3a:e8:52:71:56:c3:88:
         25:07:48:56:9a:f6:46:9c:23:2d:1d:af:16:76:a0:2c:f8:5e:
         50:28:63:bf:49:a6:dd:5c:58:02:b8:5c:6f:09:22:f9:f7:6b:
         74:2a:c8:58:77:88:91:62:89:5e:c1:06:eb:e3:90:e2:f3:8f:
         f6:c1:ca:0c:05:33:1f:ca:d7:43:3e:fc:5f:5b:e9:98:3b:08:
         a3:38:c5:f9:14:30:9f:4b:95:b3:24:db:80:d4:b2:81:b8:7e:
         94:45:37:d7:9c:44:4d:1b:4a:e1:38:d0:fc:ef:20:68:ab:cb:
         f1:65:2c:9e:4a:52:30:90:35:33:d6:93:f3:2a:8d:01:3c:e7:
         9f:4e:ca:72:e5:75:87:26:03:39:93:bd:5d:15:72:74:90:4c:
         35:fe:b6:9f:23:9f:02:04:24:c7:fc:4f:d2:d2:57:04:9c:e4:
         53:be:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:18 2026 by rpki-client