Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File:                     CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier:          RFCkZ9bRA1yykGnez9J1LDvAiu8n11+LooOoQADJrNo=
Subject key identifier:   95:C6:F1:2D:FA:0E:2D:A4:AE:3A:7A:0F:F4:6C:51:C9:7B:9A:FB:33
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       05AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number:          055C
Signing time:             Fri 17 Apr 2026 03:05:45 +0000
Manifest this update:     Fri 17 Apr 2026 03:05:44 +0000
Manifest next update:     Sun 19 Apr 2026 03:05:44 +0000
Files and hashes:         1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: 0iL3w9KE8BxjwXTqdugjFdIofi/goQ15VdTOUg61D2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Apr 17 03:05:44 2026 GMT
            Not After : Apr 19 03:05:44 2026 GMT
        Subject: CN=69e1a389-b2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:59:c0:0d:60:b5:e9:07:69:c7:83:bf:49:
                    e5:1d:aa:32:92:fe:49:da:55:aa:df:95:5a:22:ba:
                    ee:b7:02:be:0b:1c:28:f7:ba:57:33:c5:2d:40:cd:
                    f3:3a:b9:ca:1b:81:ad:70:49:57:41:e6:15:cd:16:
                    89:2a:f6:8d:f2:89:ce:d7:80:81:64:d2:59:64:51:
                    14:78:b5:73:e0:e8:59:05:d9:4f:c5:91:90:52:60:
                    3d:1c:20:95:99:c6:5d:6d:6a:a7:d9:bb:73:2a:23:
                    6b:0b:3f:be:e4:eb:2d:19:42:55:9d:c3:c5:89:43:
                    a2:1d:32:6e:e4:75:71:51:cc:dc:d3:97:a0:84:f5:
                    a8:2c:2c:d4:d7:bd:50:9a:bf:b6:54:94:48:09:3e:
                    7b:e3:5b:66:43:fd:bf:f9:0c:d1:31:20:57:40:76:
                    de:b5:42:fc:8d:eb:40:b2:14:36:d7:16:03:8f:ca:
                    ec:3e:fc:ee:7c:9a:24:1e:f1:a0:d4:3a:30:74:62:
                    64:c2:e6:2d:b4:49:1a:de:8a:ff:99:dd:b3:e4:96:
                    76:64:be:be:fe:6f:d1:db:97:53:2a:58:ed:01:c3:
                    ea:15:1f:f5:06:48:9d:ca:b2:fe:53:57:a0:52:04:
                    8b:0b:3b:38:0b:83:bc:7f:9a:9e:ec:2a:4f:50:ab:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C6:F1:2D:FA:0E:2D:A4:AE:3A:7A:0F:F4:6C:51:C9:7B:9A:FB:33
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:27:14:c3:b3:7a:32:c1:f2:dd:de:ea:52:c3:e8:89:07:
         ef:0c:ec:f8:49:f7:26:14:c5:c0:21:8f:7d:74:0b:f0:56:dc:
         e9:b8:e8:1f:8f:ff:80:18:21:65:7c:75:d2:bb:a5:94:06:3b:
         4e:f0:fa:bc:1a:b3:9f:7a:e4:fd:50:d5:c1:ff:24:e3:0f:97:
         8f:22:ec:b9:51:42:23:e3:b1:5e:02:ad:ab:50:c5:ee:2d:29:
         2c:17:cd:e3:1b:67:a6:8c:7b:e9:15:a0:31:dd:35:32:00:c5:
         f2:15:2a:40:86:c2:92:33:5a:9c:9f:b3:10:80:17:ad:67:6e:
         b4:32:a5:2a:ed:e4:6e:e5:37:1a:86:c7:4c:6c:cc:20:e1:bd:
         61:49:77:6f:43:0b:61:7e:69:b6:a1:9e:bc:fc:ad:f5:f6:61:
         29:e5:d0:bb:a9:ce:63:c3:f8:26:fa:a5:8a:53:34:68:f4:70:
         ae:65:18:4c:a9:fa:ba:c6:0a:6d:7b:e0:e4:b8:a8:ff:e3:20:
         82:39:7e:78:f6:7e:4f:b9:c3:87:f3:e5:87:70:c7:0d:14:7f:
         6a:02:ef:8e:ea:e3:b4:70:3b:33:dd:97:33:0b:1e:7c:78:4f:
         6f:7d:1f:67:68:7e:07:0c:38:c6:79:fd:ef:51:22:12:65:75:
         49:28:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:38 2026 by rpki-client