Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          BE2wXvsFEJpJS0NiD1NQYasvkJqnZnFAPnvDCHfM3mM=
Subject key identifier:   59:5B:A6:13:76:EC:1F:C5:BF:4B:A7:F8:04:09:CA:3B:47:62:F6:ED
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       02C7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          02C6
Signing time:             Mon 02 Mar 2026 02:51:28 +0000
Manifest this update:     Mon 02 Mar 2026 02:51:28 +0000
Manifest next update:     Wed 04 Mar 2026 02:51:28 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: vRLfz1MAh0xA+9eYxOBC7XKpI19nPIJL1pht4QOj6ZU=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Mar  2 02:51:28 2026 GMT
            Not After : Mar  4 02:51:28 2026 GMT
        Subject: CN=69a4fb30-f4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:f4:99:7a:3c:ee:41:a4:ee:16:9d:7a:e8:
                    24:0b:26:03:38:32:d7:d5:02:37:c2:fd:98:50:06:
                    f7:69:2a:10:fe:0d:3c:2c:ab:a5:58:d4:f3:ab:58:
                    db:25:f0:93:03:e2:84:70:73:0b:66:c9:0a:d5:f7:
                    fd:48:d8:32:14:c9:7c:b8:0c:73:3e:79:49:37:b1:
                    26:52:8d:69:ed:5a:1f:6b:57:9b:fb:5b:1a:45:7c:
                    b6:c0:9a:c6:a9:99:5c:e0:a5:29:2a:16:3b:e3:f0:
                    55:84:5c:f9:43:e9:ff:ab:be:d0:10:0a:1e:46:32:
                    c3:3f:73:d1:89:3a:4f:d6:a0:68:df:e0:0c:14:34:
                    3b:55:4f:13:9d:ab:20:5d:14:9f:34:4c:20:ba:e2:
                    ba:02:a8:77:18:0c:27:9d:12:6f:65:88:9c:95:84:
                    e1:93:56:36:c6:12:ee:0a:41:fd:c5:21:01:9d:06:
                    8a:03:7a:33:d7:ad:2c:b9:c2:03:ac:c3:e7:64:18:
                    31:c7:5d:e2:5b:95:ed:ed:b8:8a:53:ba:e6:37:9c:
                    0b:da:ee:31:33:be:9b:4c:be:98:9d:02:92:c3:a6:
                    ba:00:56:c3:57:12:aa:24:fa:62:e2:0e:8b:c6:df:
                    a2:63:83:25:f3:db:88:e8:e6:84:5a:b0:28:60:bb:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5B:A6:13:76:EC:1F:C5:BF:4B:A7:F8:04:09:CA:3B:47:62:F6:ED
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:49:b8:c2:35:60:0f:55:24:3b:16:57:04:f8:ab:9a:ac:5d:
         35:a5:80:e6:d2:a6:6f:83:c8:de:26:e2:e9:7b:67:1a:b3:1f:
         7e:5d:8d:da:a6:bb:b7:47:ec:39:67:da:77:73:28:91:d2:cc:
         f6:5b:12:93:70:1a:b7:54:73:49:d8:cf:6e:ac:2c:e8:1b:de:
         c2:8c:32:fe:10:62:ce:a5:f6:f8:af:5f:bb:22:0c:94:29:91:
         62:92:f5:21:19:51:8b:56:a9:f3:45:f9:94:a1:c4:16:e7:39:
         71:ee:9c:a7:11:4b:fc:2a:c6:01:86:5c:1c:ae:59:41:5e:90:
         ca:49:a4:34:2b:8a:c1:de:4b:67:4c:3b:c0:5b:b4:52:c3:2f:
         47:06:88:a2:aa:38:92:7f:7f:a3:ec:fe:3d:ad:49:e1:af:6a:
         93:b7:eb:7c:3c:9b:08:28:81:4b:22:af:5b:1a:9d:4d:c9:fe:
         05:5f:8a:d3:59:f8:3d:5b:06:cb:08:8a:2b:00:24:71:17:28:
         be:45:a4:3b:24:65:1c:d2:c9:d2:77:03:81:89:d7:8a:a9:e4:
         2c:67:3d:7e:3d:bb:aa:8d:a7:0a:ed:b2:36:54:d8:ce:0b:35:
         dc:2e:c9:7f:ea:c4:fc:b7:c6:82:87:1e:bb:af:72:e7:3b:9a:
         fe:0e:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:37 2026 by rpki-client