Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          OZk7ONhYCubzq3TG19JJx8awtYsKHI+6JPv9KryLGRQ=
Subject key identifier:   DF:1E:12:8E:4A:17:E1:06:C5:4E:67:FD:A6:C8:4B:3C:75:45:8A:6A
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       03EE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          03ED
Signing time:             Fri 17 Apr 2026 03:37:10 +0000
Manifest this update:     Fri 17 Apr 2026 03:37:09 +0000
Manifest next update:     Sun 19 Apr 2026 03:37:09 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: ZCZoN9cR+/O+vhDywAhSJgV3lqTuIUqI5hLpuodxTWo=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Apr 17 03:37:09 2026 GMT
            Not After : Apr 19 03:37:09 2026 GMT
        Subject: CN=69e1aae6-84c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:c6:2d:81:0e:e1:0d:7e:eb:e9:43:2c:cd:
                    2b:52:ec:e9:17:39:30:16:06:2d:00:76:14:9d:12:
                    09:0f:0b:be:73:89:ce:1c:d8:f5:f6:b6:74:00:14:
                    15:29:18:af:3a:b7:c5:65:bc:37:a7:5c:a2:56:56:
                    30:b8:03:c8:88:23:96:77:c9:56:28:e9:c0:9c:fd:
                    f6:b5:cd:07:53:9e:63:af:d9:7b:0d:87:23:73:d9:
                    1c:d0:ba:9f:4b:50:3a:46:1f:cd:87:3d:26:48:78:
                    03:f8:4b:85:10:96:d5:ba:39:01:c0:5a:e9:10:e0:
                    58:70:43:c7:bc:5f:3b:09:ad:61:f9:23:a3:df:03:
                    e7:8b:23:5a:ba:d5:18:26:a5:73:8a:6b:21:f1:48:
                    00:84:6e:76:f5:cb:be:08:49:ea:78:86:39:18:a7:
                    ff:44:11:b0:63:e5:5f:23:a5:9e:40:79:80:10:b9:
                    37:ad:38:e0:1a:9f:3b:4d:c1:1c:b6:28:66:a4:47:
                    66:d1:25:b9:b5:de:27:db:33:88:7f:e9:73:32:43:
                    7a:36:b2:93:4c:fb:63:d5:10:df:ac:06:e7:8e:df:
                    4c:c3:18:f5:82:fd:4a:98:3a:c3:ef:32:cd:95:f5:
                    c2:ce:11:bd:33:0a:03:80:a1:36:81:52:02:e4:89:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:12:8E:4A:17:E1:06:C5:4E:67:FD:A6:C8:4B:3C:75:45:8A:6A
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c6:a2:ec:0d:2e:e1:30:7b:ad:65:51:09:29:8f:2e:10:e9:
         01:bf:1f:83:94:df:fa:b5:ef:55:d2:a6:05:f3:bf:42:f2:c3:
         02:cf:94:37:a8:ac:f9:27:0e:ce:27:83:25:7a:00:c6:03:e0:
         f4:ef:2e:10:5d:a3:b1:5f:60:53:15:d6:21:29:74:61:f3:0b:
         32:fa:df:2e:0d:0f:91:aa:e4:76:49:db:5f:36:80:7d:d6:20:
         1d:28:67:10:35:7c:17:e4:f2:68:7a:5d:00:39:eb:3a:65:c1:
         f1:d5:15:2a:8b:dd:05:93:ab:64:e8:88:ea:10:88:e2:19:5e:
         0a:94:93:e8:b1:81:06:ca:ad:03:60:b5:8f:ec:cb:cb:5a:ec:
         00:51:f7:79:f0:1a:d0:c8:df:0d:06:30:99:36:26:04:06:7e:
         18:3d:d2:81:85:28:5e:11:ae:ff:93:79:6c:83:63:58:f0:e0:
         e1:37:2a:38:d9:01:8d:0e:c9:92:e2:83:6c:95:bc:22:31:43:
         a2:74:75:44:43:2e:46:a6:95:41:13:89:bf:90:54:6e:b6:c3:
         3e:b6:ee:44:43:65:0f:02:80:14:1c:fb:cb:c6:f5:cb:52:a0:
         56:21:30:63:26:72:a7:2d:76:66:3b:43:75:90:87:04:80:5e:
         c6:73:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:38 2026 by rpki-client