Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File:                     CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier:          qJXdQacjrD5SQ5X8e66sUclKV9LS4SOz8zwIA7IHUzY=
Subject key identifier:   38:9E:63:7D:57:C6:85:F8:B4:9A:EB:00:B4:00:E2:12:E9:E2:85:82
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       057D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number:          052E
Signing time:             Mon 02 Mar 2026 02:14:35 +0000
Manifest this update:     Mon 02 Mar 2026 02:14:34 +0000
Manifest next update:     Wed 04 Mar 2026 02:14:34 +0000
Files and hashes:         1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: ATS2OQaC4/Zw4qk4iIVgIF/VEe6F1ZFB6VPZF8qseb0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Mar  2 02:14:34 2026 GMT
            Not After : Mar  4 02:14:34 2026 GMT
        Subject: CN=69a4f28a-e30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:5c:8d:70:25:73:9f:45:30:00:2c:4d:a4:
                    c7:75:43:60:5a:a6:74:33:05:e5:4c:3e:60:8a:4f:
                    39:e9:83:4c:e6:d2:9e:fa:14:e3:7e:6c:3b:33:86:
                    10:51:e6:df:01:fa:8f:50:b6:8a:df:24:dc:ce:5b:
                    aa:92:c1:4f:9f:dd:48:62:9f:98:b5:ed:83:2e:e0:
                    20:12:53:f6:49:d0:e8:12:b2:ce:98:86:54:09:61:
                    3b:33:b6:73:d7:83:54:7a:cf:d0:62:95:29:20:70:
                    f3:e5:47:7a:49:7e:87:94:8f:e8:e2:5c:0d:33:69:
                    3c:e5:5f:d5:e8:c7:36:02:e4:48:8f:53:e7:5f:da:
                    1f:35:5a:a7:b4:06:29:31:cb:29:4c:55:72:05:4b:
                    f8:ec:88:35:b8:c5:98:fd:e4:e8:14:0f:3b:8b:b8:
                    ae:8b:ca:68:98:8d:25:e7:59:20:5e:8b:07:5b:a1:
                    35:b7:ab:3b:e8:fe:0d:c9:db:d9:a6:04:9c:2a:88:
                    d3:67:88:9a:f7:ae:97:2e:60:e8:db:72:94:03:58:
                    cf:fd:62:4e:b2:c2:52:f1:02:e6:5a:7c:b4:2f:35:
                    d6:57:5a:ee:5d:22:cf:b4:c1:2a:a2:68:92:e8:ec:
                    23:48:33:a8:bc:12:e9:2a:40:d0:89:8a:4b:ab:6d:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:63:7D:57:C6:85:F8:B4:9A:EB:00:B4:00:E2:12:E9:E2:85:82
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:97:90:4e:e2:58:d6:5d:96:ab:c1:8c:25:df:15:a0:5f:67:
         b8:2c:59:72:56:77:09:87:78:9a:6e:06:99:8f:1c:1b:7b:e0:
         3c:39:67:45:c3:46:e9:96:4a:6d:d9:2a:75:f9:6c:fa:d8:fe:
         b5:a0:8f:dd:72:c2:f6:ba:31:13:da:a1:ca:51:aa:b7:68:98:
         0e:0b:20:b4:85:a5:ae:55:ca:cd:75:06:c1:1f:cb:f4:92:06:
         5b:f9:4b:2a:81:4a:d5:15:0f:4c:f9:6b:80:dc:ad:a7:85:00:
         bc:45:ba:05:1f:d4:ac:ea:45:20:f9:99:8d:f6:17:bc:f5:36:
         93:43:f2:26:9c:3e:79:a2:75:78:a6:14:d7:8a:4b:df:c2:5a:
         de:47:86:2c:41:c1:0e:32:a2:35:9a:db:6b:f5:da:f9:78:9e:
         e9:13:39:67:91:65:28:44:6e:ac:fd:b3:58:35:c2:37:3c:70:
         5b:12:f1:cf:e6:d2:b2:87:4d:40:63:b3:05:69:87:be:45:8e:
         70:49:3d:0e:30:e2:3f:46:4b:2a:b9:6f:37:ef:d0:9c:1b:29:
         20:af:94:ca:94:8a:bc:4d:a4:b4:4b:e9:4e:c1:92:95:ed:d7:
         c1:bc:c1:90:5d:d1:c2:dd:40:45:a5:77:9f:35:a5:09:f0:5f:
         37:7a:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:55 2026 by rpki-client