Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          UI3Iw759EpYRLqYrbubnNGenONUx0dbVt1e2Mz//0OE=
Subject key identifier:   87:68:49:0B:81:CF:21:5F:56:1C:D5:6D:8A:80:47:70:7C:8D:73:C8
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       C9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          C5
Signing time:             Tue 28 Jul 2026 05:24:14 +0000
Manifest this update:     Tue 28 Jul 2026 05:24:13 +0000
Manifest next update:     Thu 30 Jul 2026 05:24:13 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: E7+CEaT/BYSJP3l03vpY+CYHCmmPXPhbmeg9GRBsdq4=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Jul 28 05:24:13 2026 GMT
            Not After : Jul 30 05:24:13 2026 GMT
        Subject: CN=6a683cfe-d723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:45:d3:82:b9:ea:51:c4:c3:70:85:3e:c4:
                    99:4e:b9:d9:07:51:81:33:35:9e:34:c7:fb:58:55:
                    d4:82:8e:0d:a0:ff:30:ae:30:a2:f3:76:af:36:fd:
                    79:a0:45:2b:ba:9c:21:e8:ac:dc:c5:5a:58:72:17:
                    fa:50:ab:04:73:aa:8f:8f:2e:0a:46:9a:e4:c8:74:
                    29:5f:b5:27:82:b6:e4:ed:43:5a:4f:bb:2b:52:a5:
                    31:98:48:c8:cd:05:cb:b8:87:87:ba:9c:c3:e0:24:
                    36:fd:63:65:66:23:f2:ad:19:37:0e:c6:89:a4:91:
                    e1:e7:8e:02:10:b3:cc:d6:4a:db:59:fa:c8:56:e7:
                    9f:b9:36:82:49:ea:d9:2f:08:0a:ff:0c:d7:7f:f8:
                    11:b2:12:0f:31:7b:ba:b3:0d:94:62:2f:34:65:a0:
                    55:f1:58:e9:44:7a:ff:62:1b:b5:8b:5d:e8:e9:62:
                    68:a6:2a:3b:bd:e9:a4:22:15:24:81:72:75:76:b7:
                    e7:74:d9:38:da:9b:09:9d:67:eb:fd:6d:95:5e:ef:
                    1d:df:e2:5d:25:06:0f:8d:7a:50:66:db:99:7b:a2:
                    91:01:c8:06:90:83:12:f5:60:f3:75:1c:69:23:94:
                    41:c3:b6:50:19:bd:b7:5c:d6:f3:9f:48:dc:f8:ed:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:49:0B:81:CF:21:5F:56:1C:D5:6D:8A:80:47:70:7C:8D:73:C8
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:60:dc:ea:ba:e2:08:56:08:31:23:57:cc:0a:b3:9a:e7:ae:
         bf:11:42:fc:1b:7c:5c:31:2f:d7:5d:79:bf:dc:a6:49:e7:e5:
         4a:5f:15:c5:d3:21:81:d9:4f:12:33:10:66:f5:c9:6f:9f:d0:
         0e:08:43:35:b4:42:df:68:6b:db:63:0f:37:6c:4f:85:fd:27:
         e8:de:30:45:ca:6b:22:36:38:bc:74:e7:bf:c9:47:a6:fd:42:
         4f:d4:12:26:63:74:7e:10:1c:a6:89:16:67:ce:ca:20:0a:aa:
         f9:e6:b1:0a:45:22:65:f6:3e:c8:ac:29:e7:ab:9a:5b:25:ee:
         08:5a:58:f7:ea:4a:03:c3:cd:c6:20:13:83:f0:5b:77:1a:fd:
         79:91:e3:fa:78:3b:ae:dc:c9:6c:68:c1:a3:9c:f7:e2:d4:d1:
         7b:e2:44:32:0c:af:5c:17:da:6f:00:11:14:d5:5a:f6:42:01:
         9e:fb:39:fe:93:c2:4f:4f:08:64:e8:4c:2b:c6:4a:fe:15:b7:
         e6:6f:da:ec:23:e6:38:73:e1:54:a2:7b:28:62:34:4a:42:5a:
         28:9b:f1:c6:72:fa:0c:0f:69:d8:92:9d:68:58:dd:d1:30:f9:
         15:18:82:27:82:26:5b:4d:9e:70:13:be:43:c6:fa:91:fa:4b:
         5d:a8:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:06 2026 by rpki-client