Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          HjicYvO3D/GTSsagmDFchyEOWPpqVKFPQsL2W6HI9M4=
Subject key identifier:   33:B2:AD:CE:51:69:52:61:FF:8D:43:C2:A4:EA:9D:A9:F5:AF:43:95
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       0455
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          0454
Signing time:             Tue 28 Jul 2026 03:39:08 +0000
Manifest this update:     Tue 28 Jul 2026 03:39:07 +0000
Manifest next update:     Thu 30 Jul 2026 03:39:07 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: 95ARnSUhrSpkh0uFT+RPSZnaYksRfctIv8llHDXc+Ps=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Jul 28 03:39:07 2026 GMT
            Not After : Jul 30 03:39:07 2026 GMT
        Subject: CN=6a68245c-2b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:a0:9d:38:92:23:73:8c:3f:03:b7:d5:3a:
                    11:40:8f:69:27:2e:aa:ee:f9:5d:16:18:d7:19:fe:
                    18:3a:29:d3:84:cf:5d:ee:ab:c7:50:db:45:05:67:
                    b7:d3:aa:77:2c:86:47:f0:47:59:9a:d7:37:6e:f0:
                    50:4a:ba:c5:ec:61:ac:f6:ab:86:02:f6:74:ab:c2:
                    37:bd:74:b5:2a:97:aa:85:0a:75:ae:95:92:26:4c:
                    f7:52:6a:77:b6:c4:af:1f:6d:45:37:05:00:22:df:
                    c1:d9:a9:bf:30:e8:af:e5:d6:23:9a:5e:36:d6:bf:
                    b9:d1:7d:d1:df:01:ac:aa:2b:c2:e7:62:73:3e:e8:
                    27:0f:e3:12:01:52:43:e1:24:f8:8a:b7:eb:1b:fd:
                    c7:e0:3c:af:7f:6c:e2:c7:8c:40:52:79:8f:8c:37:
                    4f:9e:f2:3b:98:8e:41:e4:11:cf:f2:e5:e2:87:35:
                    f9:21:24:f7:31:70:fc:89:ad:4e:22:87:62:3b:cf:
                    f2:13:d7:b7:73:e0:23:03:3c:7b:12:84:ae:1a:7d:
                    fa:9d:c5:b9:07:b9:67:72:3b:08:b1:a9:c6:09:2a:
                    a6:da:95:21:d7:fc:66:f9:ed:24:1c:de:83:f7:47:
                    09:17:9c:61:b0:51:db:86:37:26:d6:7c:3b:9a:77:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B2:AD:CE:51:69:52:61:FF:8D:43:C2:A4:EA:9D:A9:F5:AF:43:95
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:ca:e2:b5:5b:f6:76:d2:93:07:d2:39:5a:1d:30:f4:2a:03:
         06:98:4b:c9:0e:09:bc:53:6c:8b:9a:a8:9c:41:53:68:2a:0b:
         83:51:b7:fc:98:fc:28:8e:69:94:5e:8f:f2:04:f8:4c:5a:47:
         98:59:f9:a2:f5:94:94:0c:14:3d:6e:a8:9f:8c:e1:ac:2b:64:
         55:43:55:4a:1d:2b:89:6d:22:db:8c:4d:25:d1:59:7f:dc:a9:
         68:85:07:65:d0:24:85:dd:55:af:3f:c3:4a:85:9d:85:8a:7e:
         f5:41:66:c7:89:02:40:52:86:75:b2:48:25:72:79:24:99:9d:
         71:3d:f8:22:a6:57:1e:9d:d9:3d:19:dc:17:ca:1f:78:37:d2:
         d0:7b:f5:b9:e8:64:bd:59:e2:cc:de:f9:8a:b9:7b:cd:2e:fd:
         8e:81:fa:37:a8:59:91:65:6d:fb:a6:a7:99:d0:f3:4f:07:2e:
         39:01:9b:f3:7a:3f:a0:59:7b:4f:74:9f:f8:b1:1d:9b:22:72:
         14:b6:c0:fb:b3:c5:3e:03:50:f0:32:63:89:d4:f2:7c:2e:31:
         3d:8a:67:e0:a5:49:60:2b:28:1a:72:5f:c2:30:72:90:1b:79:
         8b:9a:ba:97:3a:f8:f9:2b:0c:5d:0d:bb:85:4f:1d:11:2d:38:
         67:ca:5f:4d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNjA3MjgwMzM5MDdaFw0yNjA3MzAwMzM5MDdaMBgxFjAU
BgNVBAMTDTZhNjgyNDVjLTJiMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9RaCdOJIjc4w/A7fVOhFAj2knLqru+V0WGNcZ/hg6KdOEz13uq8dQ20UF
Z7fTqncshkfwR1ma1zdu8FBKusXsYaz2q4YC9nSrwje9dLUql6qFCnWulZImTPdS
ane2xK8fbUU3BQAi38HZqb8w6K/l1iOaXjbWv7nRfdHfAayqK8LnYnM+6CcP4xIB
UkPhJPiKt+sb/cfgPK9/bOLHjEBSeY+MN0+e8juYjkHkEc/y5eKHNfkhJPcxcPyJ
rU4ih2I7z/IT17dz4CMDPHsShK4affqdxbkHuWdyOwixqcYJKqbalSHX/Gb57SQc
3oP3RwkXnGGwUduGNybWfDuad5wHAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUM7Kt
zlFpUmH/jUPCpOqdqfWvQ5UwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDCyuK1W/Z20pMH0jlaHTD0KgMGmEvJDgm8
U2yLmqicQVNoKguDUbf8mPwojmmUXo/yBPhMWkeYWfmi9ZSUDBQ9bqifjOGsK2RV
Q1VKHSuJbSLbjE0l0Vl/3KlohQdl0CSF3VWvP8NKhZ2Fin71QWbHiQJAUoZ1skgl
cnkkmZ1xPfgiplcendk9GdwXyh94N9LQe/W56GS9WeLM3vmKuXvNLv2Ogfo3qFmR
ZW37pqeZ0PNPBy45AZvzej+gWXtPdJ/4sR2bInIUtsD7s8U+A1DwMmOJ1PJ8LjE9
imfgpUlgKygacl/CMHKQG3mLmrqXOvj5KwxdDbuFTx0RLThnyl9N
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:43 2026 by rpki-client