Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          dN5HFmaUmS2TAB6pyPBAbxEIxETlTnrFwC/u35aZ7j8=
Subject key identifier:   6B:A6:50:30:5D:A9:58:66:A9:97:A6:FE:71:B3:25:03:2D:67:8E:E6
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       08AE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          08AA
Signing time:             Fri 17 Apr 2026 01:47:44 +0000
Manifest this update:     Fri 17 Apr 2026 01:47:44 +0000
Manifest next update:     Sun 19 Apr 2026 01:47:44 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: v0L3Vh33bEifEOKVd/W1mFL2cs0terl8ajEcpllSsJ0=)
                          2: AC4E8162494411EC8CA9436BD8A014CE.roa (hash: b3n4slgOS/MlasvqZ+C1CqSsBm6+jMSAotZwP76nH4w=)
                          3: 73CF35D0B0D611ECA0847BBD5A40D577.roa (hash: 5YOdoaN/nTrUVBHfwF7bO4BngZbRv1YMgLNCZWSSDi0=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Apr 17 01:47:44 2026 GMT
            Not After : Apr 19 01:47:44 2026 GMT
        Subject: CN=69e19140-aaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:cf:a7:43:02:ab:56:3a:e1:fc:de:97:81:
                    67:da:49:30:ed:0d:13:1f:74:e5:18:65:f9:91:be:
                    a6:5d:0e:fc:15:3b:bc:37:8a:df:8a:f3:af:61:c1:
                    a0:f1:15:6a:34:5c:60:c4:f2:16:47:b3:60:a3:d7:
                    12:7e:e5:ab:97:cd:a0:9d:5e:b2:20:59:fe:55:bb:
                    2d:48:7b:74:d0:44:5f:b3:f9:91:57:07:a0:79:7c:
                    72:ec:42:b8:39:1b:fb:a9:5e:83:c4:3e:14:63:64:
                    e5:4f:40:53:b2:d1:98:ce:7a:54:c3:79:76:65:9f:
                    02:28:88:9b:ac:22:c8:a9:8a:99:dc:57:2a:49:dd:
                    f5:fd:fa:f8:35:fb:a3:56:c3:22:e8:dd:39:3d:77:
                    6c:00:e4:37:a7:ee:6e:0b:ea:ba:07:07:cb:49:02:
                    a2:02:9d:42:d8:dd:0d:b8:44:80:18:58:b8:cd:7d:
                    c1:37:eb:2c:d1:09:e0:7d:27:33:b7:93:d4:2b:ef:
                    4e:cf:81:a5:b5:89:7c:e6:01:87:e7:5c:d7:94:ab:
                    20:f0:13:9f:73:46:bd:1a:5d:df:6c:9e:fa:82:b7:
                    92:9d:15:98:36:92:11:8a:d3:4d:5d:e9:11:d0:a5:
                    06:45:b9:55:d6:38:4d:4c:07:34:a3:93:ea:85:7a:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A6:50:30:5D:A9:58:66:A9:97:A6:FE:71:B3:25:03:2D:67:8E:E6
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:d6:70:e7:64:75:7b:7b:24:00:3e:d6:4a:8f:c7:c7:34:
         09:26:91:d7:5c:4c:45:c3:2e:86:3d:c0:fc:2c:6d:81:34:e7:
         e3:2e:70:29:e6:d4:7c:46:ee:47:bd:ff:46:ae:44:36:f9:d9:
         26:1c:25:eb:cd:e0:d3:0d:5b:a2:a6:b0:a8:c1:6d:e1:aa:3b:
         8a:de:0d:80:61:78:06:fb:d5:20:4d:22:bf:fd:3e:2c:a0:e2:
         88:84:bc:01:3b:f0:c4:c2:96:e5:0d:a5:a9:7e:6b:35:62:a7:
         b2:72:0f:88:2a:b6:39:2d:cb:02:9b:66:48:68:7a:92:53:a9:
         ae:8c:b3:39:84:95:00:cb:8f:01:32:4b:64:26:28:b2:29:8d:
         24:56:25:64:73:aa:d4:0d:a1:7a:3f:45:eb:8e:7f:1e:62:0e:
         68:a5:46:59:7c:fb:bf:a4:9c:58:4c:c8:47:82:7c:73:ed:00:
         ea:fa:5b:81:b0:78:3a:4c:86:e6:45:45:19:98:26:ca:35:43:
         bd:88:23:51:92:b8:51:e6:f0:b3:73:a1:b9:58:f3:6e:d2:44:
         bc:29:a1:58:29:20:a9:95:5b:a3:aa:17:7e:e8:4d:c3:72:fa:
         16:62:30:35:1b:ac:c7:e9:99:9b:7f:47:26:04:45:f0:53:31:
         12:bd:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:51 2026 by rpki-client