Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          AtkIPDtFPD14uuEoi0JL+JlMM+W5AE6uS1IDg/QZKz4=
Subject key identifier:   91:95:02:17:3C:93:F8:86:2B:27:40:0C:8A:D0:64:16:B5:47:7A:91
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0DF3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0DF1
Signing time:             Fri 17 Apr 2026 01:05:14 +0000
Manifest this update:     Fri 17 Apr 2026 01:05:14 +0000
Manifest next update:     Sun 19 Apr 2026 01:05:14 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: IzOTGvnHXNa0yQDXpExG8Gpl6+4kqN5rK0vknzdUtbk=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3571 (0xdf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Apr 17 01:05:14 2026 GMT
            Not After : Apr 19 01:05:14 2026 GMT
        Subject: CN=69e1874a-2391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:ed:e6:8b:4f:a8:22:4d:d8:71:eb:ad:5c:
                    c7:8c:5e:cc:c3:e2:30:fe:98:c5:95:c3:9b:5b:e9:
                    5d:26:8e:ae:00:8b:9d:06:03:f1:9c:9f:57:62:27:
                    ea:fb:2c:9b:f3:ee:d5:c8:e2:b1:67:93:4c:63:d6:
                    09:16:4e:ab:3c:12:ee:f4:70:19:aa:d3:4a:79:b4:
                    15:17:ab:86:46:ae:29:a3:08:ec:68:82:5d:98:32:
                    d3:b0:1a:c7:88:62:67:ba:f5:74:98:c1:fd:6c:c2:
                    1b:b1:75:b9:a3:0a:b8:c9:1d:38:ca:eb:5e:2d:62:
                    9a:fd:aa:d2:e8:22:00:78:ab:aa:d1:48:e7:11:8f:
                    5d:df:e3:04:44:32:d5:ff:64:22:0f:b6:fe:2f:d6:
                    64:f1:b3:32:98:dc:66:e6:03:8f:57:d3:46:8d:87:
                    d9:2c:d7:b9:48:c0:08:7e:d6:7b:b2:2b:55:02:44:
                    57:e3:e4:b8:5d:13:be:05:cf:4d:fd:de:42:8b:f4:
                    56:27:93:d2:f6:91:b9:9b:43:47:e6:d6:db:9f:9f:
                    f5:57:75:c8:35:94:cc:66:83:64:7d:b1:bc:ae:27:
                    fd:09:76:8e:9f:d9:35:ef:51:7d:13:c8:11:54:4c:
                    f1:b0:b7:5f:75:e3:79:46:ec:0c:be:19:40:60:7c:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:95:02:17:3C:93:F8:86:2B:27:40:0C:8A:D0:64:16:B5:47:7A:91
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:5d:85:c9:b6:5b:1d:d5:ee:cd:47:f0:2a:8a:38:f6:50:
         3d:a1:8c:09:89:db:0a:10:9c:5b:6c:79:0b:e6:c4:19:4d:a5:
         67:35:07:49:a6:fd:19:07:56:60:ad:f6:97:b8:23:23:af:c9:
         c5:c5:06:cf:27:88:f5:a3:28:d5:76:7d:98:73:23:b8:0f:d5:
         1e:38:15:c9:c9:5c:17:47:5e:0c:a4:68:27:34:05:eb:3d:b6:
         47:e3:89:5b:ca:7a:07:58:b3:0d:ef:9e:2e:a3:80:15:5c:00:
         12:d2:d1:f3:4f:69:dc:dc:38:f1:59:5e:0b:5a:62:4e:35:ff:
         77:d2:95:a0:8d:b6:fe:e3:31:f0:8a:a7:25:23:a3:9f:40:7c:
         33:f4:21:3a:5a:be:4f:9c:c6:5d:77:81:a1:c9:b0:72:8a:3b:
         9d:4c:cb:33:b0:5d:72:f9:ef:99:a9:04:56:c7:0e:2a:47:d7:
         d3:b0:ed:6f:20:c6:eb:59:3b:0a:62:23:21:88:34:e9:8a:e6:
         f5:33:60:15:08:36:02:c5:fb:e9:5f:61:8e:65:b4:6d:e6:41:
         86:60:fc:1b:01:da:83:39:78:ae:07:3f:27:a1:ea:9a:5f:70:
         6a:82:8e:80:9f:d0:f2:60:f5:47:80:75:64:8c:cc:51:76:f2:
         d6:ac:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:16 2026 by rpki-client