Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File:                     KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier:          0T1tkwQTwq/bXq6/Y9cDNNgA3yQD3BS36m6CV4RCT9M=
Subject key identifier:   79:FD:A4:B2:D2:1C:3B:75:00:AE:B5:2C:2B:51:94:BD:F8:48:06:AE
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer:       /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial:       04A2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number:          04A1
Signing time:             Sun 01 Mar 2026 02:15:08 +0000
Manifest this update:     Sun 01 Mar 2026 02:15:08 +0000
Manifest next update:     Tue 03 Mar 2026 02:15:08 +0000
Files and hashes:         1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: 3roUCu23wkYVp11m7ZAG4UNxan2Z7wQy+unJblJvSo4=)
                          2: DB993B728F4F11ED982ED088F1222468.roa (hash: zmof4qkrG67Fqj/AA24Lhy1I6eBvEWQSDaesv5Uqj2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                          rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 02:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
        Validity
            Not Before: Mar  1 02:15:08 2026 GMT
            Not After : Mar  3 02:15:08 2026 GMT
        Subject: CN=69a3a12c-db97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:51:ed:9a:43:c3:fb:a4:b5:71:5a:aa:16:
                    8f:92:0c:61:53:e7:bb:4e:ff:51:26:22:a8:10:02:
                    70:02:14:19:b9:75:56:15:05:e1:42:de:6b:40:07:
                    6a:81:af:84:87:14:92:5f:6c:78:57:04:37:f6:c2:
                    f7:64:f2:d4:6b:db:bf:fe:38:4f:99:37:49:6b:0d:
                    8e:08:41:18:fa:73:3b:a6:d5:85:80:6c:d5:f0:ba:
                    8d:fa:c2:a1:f6:3a:c6:a9:6d:f8:ad:61:a6:a7:f5:
                    14:17:35:80:5e:0d:6a:23:a6:18:0a:a6:8e:ca:ad:
                    54:d8:b3:17:a0:8c:a6:7b:c0:57:23:ff:f9:e2:d3:
                    db:c8:3c:e6:84:f4:fd:d1:1f:ff:93:5f:6e:0d:b9:
                    5a:7d:dd:13:3b:0e:b9:7a:02:26:c9:fb:16:4e:00:
                    3d:7f:cf:9b:11:9e:12:17:6b:d0:70:4f:79:03:1b:
                    82:14:fb:cf:f4:be:5a:fc:a4:3f:59:6c:d5:a9:95:
                    7f:e2:67:6a:e4:b5:06:20:3a:1c:dc:9c:a8:bf:d8:
                    49:2a:86:4d:94:ad:29:98:7e:b1:0e:6c:72:a6:0b:
                    52:18:b0:63:c2:57:70:ef:06:77:2c:0b:be:35:54:
                    29:ff:9a:30:7c:72:8c:a1:35:a2:15:70:37:49:ce:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FD:A4:B2:D2:1C:3B:75:00:AE:B5:2C:2B:51:94:BD:F8:48:06:AE
            X509v3 Authority Key Identifier:
                keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:dd:3b:63:7a:0e:8d:56:af:3c:16:4d:4b:85:48:b4:bc:44:
         b1:87:3a:91:50:de:92:fd:7a:95:91:ca:6d:6f:cf:0c:b6:a0:
         a8:3c:99:62:bb:c9:cb:3f:6a:3f:35:ef:19:04:4b:db:ec:b8:
         f9:67:13:e2:29:fd:3f:51:fb:89:1e:39:12:6d:15:7f:44:cc:
         5d:5c:eb:5e:c0:1c:cc:a9:26:1b:38:7c:38:fe:85:e1:dc:ce:
         f3:55:c7:f1:27:bd:97:ce:8a:5c:4f:d7:5e:01:09:10:9f:91:
         0d:89:f0:31:5c:84:a8:a9:02:4d:31:10:8e:89:85:1b:c7:b2:
         41:25:89:94:00:32:55:cd:b9:4e:8c:c6:3f:a7:93:14:0a:fd:
         41:ff:95:e3:8b:a9:1b:f6:e1:69:10:80:a5:bc:4d:43:c5:04:
         7a:a5:0c:ad:ad:ad:84:ef:4a:d8:b7:e5:ad:a0:97:da:c8:aa:
         8d:22:70:c5:a4:a6:ad:7e:1c:70:8b:34:cd:79:f0:7d:ee:9a:
         cf:56:2c:9e:09:fe:58:c9:c3:69:ef:26:ba:08:c3:8f:54:67:
         45:59:33:82:3f:03:3a:ef:16:c9:dc:16:c4:48:f7:f3:c6:f4:
         c2:38:4e:98:44:15:0f:f3:ad:46:c2:e8:bb:42:5f:0b:46:ae:
         8e:a1:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:46 2026 by rpki-client