Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
File:                     h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft (raw, json)
Hash identifier:          /OTbNs+XBAFzUngEDyHC/mFHrMYtCNaDRth4bUAGR9E=
Subject key identifier:   39:04:F9:1D:05:50:1D:C2:71:8F:BA:BB:26:BF:D7:6B:1D:0E:93:CE
Authority key identifier: 87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
Certificate issuer:       /CN=F3658AF9AR/serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
Certificate serial:       CD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
Manifest number:          CD
Signing time:             Mon 02 Mar 2026 03:27:17 +0000
Manifest this update:     Mon 02 Mar 2026 03:27:17 +0000
Manifest next update:     Wed 04 Mar 2026 03:27:17 +0000
Files and hashes:         1: h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl (hash: 3e5TnylLwAsH8SEcazoAf/h+GVh7hf/gPo35VpX+K8Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                          rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AR, serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
        Validity
            Not Before: Mar  2 03:27:17 2026 GMT
            Not After : Mar  4 03:27:17 2026 GMT
        Subject: CN=69a50395-026b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:fc:7f:70:a9:f2:7c:37:74:df:39:af:f5:
                    c2:0b:35:f3:77:4b:2d:bd:d9:8a:f8:0b:11:eb:c7:
                    4a:25:70:f8:75:1c:a5:29:bc:b9:81:08:d2:74:5f:
                    b6:32:6f:62:c8:6a:18:bc:f7:9e:6c:8f:0c:ee:67:
                    61:13:92:36:99:0a:00:09:9a:d5:03:9e:d7:cd:dc:
                    d9:61:64:08:c1:12:58:95:e5:79:e4:8f:e1:50:53:
                    71:31:a7:ee:a0:ec:de:14:56:b7:1f:48:16:ed:eb:
                    51:a5:f9:57:24:da:eb:04:ca:a2:39:94:dc:e0:d7:
                    25:b4:e7:db:c7:a2:6f:74:d5:f3:cd:40:92:c1:4f:
                    a4:ba:07:d2:13:b1:41:4d:95:68:e3:7e:a0:b1:43:
                    63:26:22:c0:27:ec:2c:07:ea:62:34:2c:99:bd:96:
                    12:18:83:99:3e:06:80:53:ec:ba:42:56:7c:d8:2f:
                    17:64:0b:b2:57:4e:9d:dd:4d:3d:c8:67:d9:fd:b7:
                    6e:df:06:d0:5d:87:6c:bc:ec:af:95:8c:84:f3:da:
                    c9:e2:06:50:18:5a:71:04:49:89:56:99:bb:88:69:
                    a9:88:78:df:25:37:fe:cb:3d:d6:97:97:b9:32:af:
                    35:3a:2d:cf:0b:7f:79:25:ad:83:21:8c:a7:3f:d1:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:04:F9:1D:05:50:1D:C2:71:8F:BA:BB:26:BF:D7:6B:1D:0E:93:CE
            X509v3 Authority Key Identifier:
                keyid:87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:84:6e:8f:10:65:a2:14:44:52:8c:ee:dc:53:e3:37:c0:dd:
         39:f6:e2:b9:ca:02:3c:96:3f:d6:ba:5b:4b:71:6d:f7:ca:9b:
         b7:c7:5e:66:39:08:c7:05:58:d5:ba:ce:26:1e:0f:d0:17:5f:
         aa:a8:4f:b1:8a:98:94:70:7e:b2:bf:6e:6f:ea:9c:46:39:eb:
         37:fc:05:a0:98:8c:f4:96:b3:44:8d:03:2f:c1:02:2b:80:e5:
         6a:ee:35:da:cb:cd:89:fa:43:de:7c:7e:0c:9b:8d:42:4b:54:
         f1:68:20:d2:f3:31:a8:67:96:d5:cc:24:e3:b0:d5:2b:b9:70:
         6e:ce:38:4f:b2:70:37:6a:16:c9:48:4a:86:53:9d:0b:44:1f:
         5a:b6:8d:e6:7d:8c:e2:cd:92:d8:26:46:6e:14:7e:95:e3:16:
         b3:80:0f:00:61:7d:72:4a:69:21:20:8e:d0:a1:3e:7c:1d:69:
         22:e4:fe:db:22:95:1b:fa:53:d8:96:b1:a2:30:77:21:a7:ef:
         f2:64:0a:39:91:c6:e6:f9:2e:96:65:8a:50:d4:70:b8:59:7f:
         49:dd:86:6e:89:6c:f5:56:fa:19:7b:eb:78:11:72:65:05:d5:
         21:20:1c:1f:15:ca:c2:c7:b8:83:29:5a:bf:72:84:03:c3:83:
         86:42:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:05 2026 by rpki-client