Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File:                     TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier:          g3dEMbDyCIzJl2UYPsECZOkHaNeSMrVTQ3Bk2Oa6ukY=
Subject key identifier:   8F:EE:A1:CF:4A:A6:57:B5:33:D3:98:A0:3A:87:C8:84:18:90:09:20
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer:       /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial:       0CC1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number:          0CC0
Signing time:             Fri 17 Apr 2026 01:08:58 +0000
Manifest this update:     Fri 17 Apr 2026 01:08:57 +0000
Manifest next update:     Sun 19 Apr 2026 01:08:57 +0000
Files and hashes:         1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: 2KNu9ZkmHRUD2jQ/BdimEBMYPO5qFY13AmKsQlTNpic=)
                          2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                          rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3265 (0xcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AR, serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
        Validity
            Not Before: Apr 17 01:08:57 2026 GMT
            Not After : Apr 19 01:08:57 2026 GMT
        Subject: CN=69e1882a-8716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:08:ba:2a:0c:73:5a:7d:b0:04:dd:fb:5e:
                    0e:0e:2e:f5:88:45:02:93:63:bb:b1:de:51:96:e5:
                    07:61:32:91:4c:1a:44:31:29:3b:e8:a1:b5:ca:58:
                    89:25:c4:1f:63:df:08:5a:dd:ce:fa:2e:ec:91:2f:
                    8e:c2:3c:7e:55:ba:fa:8e:66:b8:f9:a8:99:13:a2:
                    11:fc:1f:73:99:66:a7:34:26:f5:b0:2f:8c:4e:13:
                    c8:a5:8e:1b:3e:ab:72:38:be:f4:c3:e6:83:30:34:
                    9a:7c:3e:da:dd:b1:8b:96:11:17:0e:e5:17:06:b5:
                    7e:2e:b0:9e:9e:96:9f:ff:fd:6a:d6:88:6f:78:f8:
                    6d:ae:9c:df:86:b6:3f:a0:d1:1f:0e:b2:97:fa:f9:
                    d4:2e:05:15:b0:fe:49:10:88:9a:f5:8b:b7:54:40:
                    09:70:44:02:08:da:4d:45:95:31:e3:2b:6b:93:db:
                    fc:ab:22:67:6b:87:75:3b:6b:51:96:5e:cd:7a:44:
                    c7:69:13:1f:be:be:eb:89:e2:83:ae:64:fc:51:5f:
                    0c:94:9b:93:7b:af:e3:71:69:ed:38:e4:49:e6:14:
                    aa:1e:29:04:db:22:2f:f2:d0:a3:73:86:da:cf:43:
                    d7:7d:bd:03:20:66:76:1f:e2:1e:a7:27:71:b2:39:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EE:A1:CF:4A:A6:57:B5:33:D3:98:A0:3A:87:C8:84:18:90:09:20
            X509v3 Authority Key Identifier:
                keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:74:57:5b:26:70:dc:c9:b9:8d:41:09:0a:ba:37:07:24:37:
         5c:bf:b3:5c:e0:e5:8e:ff:3d:b0:60:89:1e:02:46:e7:a5:ca:
         0e:e3:93:e4:e4:6f:ef:ca:85:e2:25:0a:64:cf:4e:30:9a:57:
         66:8e:84:b7:99:b8:ae:48:2a:4d:55:96:8e:39:78:8b:0e:09:
         91:e8:8f:d2:99:2f:60:66:43:cb:ad:54:52:f2:a5:a3:21:46:
         4f:96:ce:fd:70:08:9e:38:52:95:fb:23:fe:0f:91:1a:a2:da:
         c7:c5:fb:b0:a2:02:98:9b:d0:94:7e:c3:8a:c6:6b:81:eb:1c:
         29:62:87:4c:ea:4d:ce:23:bb:cd:4a:d7:a3:94:9c:76:5e:9a:
         54:9d:98:30:77:ab:b2:31:28:bc:b3:e0:a8:9f:50:bf:d7:13:
         49:9c:47:c3:04:7e:e3:26:fe:03:33:fc:34:a9:a6:d5:2f:12:
         8e:28:f2:5c:52:9c:b4:71:7e:1c:cb:11:cd:05:db:9c:78:94:
         6d:de:17:80:04:9b:5d:eb:2e:85:07:ae:40:71:01:db:86:88:
         ba:15:c7:69:ea:7f:1d:6e:85:96:42:5e:29:90:9e:ba:63:40:
         33:f2:38:03:e1:c0:67:cd:86:08:9b:50:5b:bc:25:92:f2:aa:
         44:db:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:31 2026 by rpki-client