Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          lghzKtyA/Fo+fjbWv61Au6CLOidGg63w646hmyn9B1U=
Subject key identifier:   55:A1:3F:C4:12:C1:60:30:0B:D1:99:F8:5D:57:14:3D:ED:5C:84:09
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          03BE
Signing time:             Sun 01 Mar 2026 02:33:45 +0000
Manifest this update:     Sun 01 Mar 2026 02:33:44 +0000
Manifest next update:     Tue 03 Mar 2026 02:33:44 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: DwwVU8LdOMVOUjlArVIo2DkUXrIYeqKOwmuWUOkMWKc=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Mar  1 02:33:44 2026 GMT
            Not After : Mar  3 02:33:44 2026 GMT
        Subject: CN=69a3a589-a9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:3e:bb:2f:41:56:99:2c:2e:36:02:9b:23:
                    21:59:4f:d9:53:16:53:4e:ec:65:48:2d:49:89:ad:
                    2d:9a:7a:ce:4c:fe:d4:dd:29:20:2e:1f:29:08:0a:
                    83:5e:e5:6b:d6:48:95:42:c0:fa:0c:c5:86:49:7c:
                    0f:31:71:b7:aa:88:86:27:c6:10:2d:74:0b:ce:a4:
                    e2:48:ad:c6:62:d8:17:65:fa:19:b8:dc:73:69:74:
                    27:26:e4:79:1d:08:57:5b:80:ba:8b:7c:47:b8:8b:
                    11:f0:fa:4a:fd:25:ac:58:a0:92:00:59:50:ca:b4:
                    cf:aa:23:1d:fe:c1:7f:08:32:d8:01:e0:8f:05:b9:
                    f3:20:44:85:76:3b:fb:88:68:a9:35:c2:18:98:2d:
                    d0:e0:f4:b6:27:32:47:3f:ec:57:ca:79:ea:6f:a4:
                    3b:30:4f:b9:42:d2:df:1f:a8:b4:ea:e7:4f:2c:59:
                    cf:37:92:0b:06:8f:3b:43:8b:f2:c2:75:65:d6:22:
                    18:e8:06:55:57:20:b2:61:87:16:35:db:cc:c9:a3:
                    58:d2:7c:a0:9c:19:ea:f4:ec:9f:60:58:a3:e8:a1:
                    c3:f7:78:f7:d1:e3:6e:10:a7:b2:b4:08:30:ce:54:
                    04:45:7a:8e:98:5e:0c:62:c7:74:50:d0:ee:28:fb:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:3F:C4:12:C1:60:30:0B:D1:99:F8:5D:57:14:3D:ED:5C:84:09
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:30:d1:bb:a8:56:70:e6:27:b7:c5:3d:3b:70:1b:7c:d7:
         b8:e9:bd:5c:de:6b:21:cf:c3:08:a8:83:74:da:71:a8:9d:55:
         cb:07:3d:88:fe:40:41:0f:73:65:e6:d7:3f:c9:68:3f:8f:76:
         f7:15:05:ba:35:77:3d:56:e5:b3:e5:9e:13:67:c7:a0:c5:25:
         27:aa:32:bf:47:ad:37:0a:84:17:99:5f:56:74:1a:a4:2b:13:
         34:31:56:bc:a9:7a:b1:eb:c9:39:4a:e1:d4:6a:36:68:5c:49:
         cd:cf:78:1f:dc:30:20:1d:31:ac:a5:86:02:54:67:78:3c:70:
         6c:25:82:ad:84:25:6e:60:5d:e5:ea:38:d6:d4:85:66:a9:bb:
         1f:9e:57:27:5b:34:43:b6:05:ff:17:fb:04:bb:90:30:81:09:
         54:8d:2a:5d:a7:81:00:6c:46:f7:45:d6:0f:6c:5c:b4:de:bb:
         10:41:05:ed:16:55:e3:ed:dc:75:0c:2a:ce:7f:07:cb:44:34:
         c3:5e:05:7b:03:0c:93:d0:2c:38:4d:82:8d:2c:24:7e:df:07:
         55:ac:00:6c:21:c6:96:e2:2b:d7:d5:ba:3a:61:d3:ac:38:b4:
         0b:b4:9c:40:2f:f5:a5:2a:0d:8b:99:4f:58:7d:3d:34:56:bb:
         77:22:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:11 2026 by rpki-client