Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          t5JebkPM1n1Ue1MGMGTOJl3qmP516qG0SA2m0TwCxcA=
Subject key identifier:   96:EC:FF:E9:AB:E1:54:DF:E0:2D:2F:EC:57:3A:1F:07:E0:BB:0C:32
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       0880
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          087C
Signing time:             Mon 02 Mar 2026 01:26:17 +0000
Manifest this update:     Mon 02 Mar 2026 01:26:17 +0000
Manifest next update:     Wed 04 Mar 2026 01:26:17 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: g+Oi10JZWFPVrxBcJIcZ0VYs2VK1YmCgWmWfwO1ZnDQ=)
                          2: AC4E8162494411EC8CA9436BD8A014CE.roa (hash: b3n4slgOS/MlasvqZ+C1CqSsBm6+jMSAotZwP76nH4w=)
                          3: 73CF35D0B0D611ECA0847BBD5A40D577.roa (hash: 5YOdoaN/nTrUVBHfwF7bO4BngZbRv1YMgLNCZWSSDi0=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176 (0x880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Mar  2 01:26:17 2026 GMT
            Not After : Mar  4 01:26:17 2026 GMT
        Subject: CN=69a4e739-5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:e3:cf:ae:db:4a:93:3f:d7:85:b7:a0:0b:
                    57:77:05:b5:39:0a:55:57:e0:32:9f:66:b9:57:24:
                    ab:5f:7b:b5:91:75:06:e0:97:ed:57:e1:63:82:49:
                    d3:be:15:c6:93:29:8e:b3:39:fe:c3:52:b4:01:5c:
                    ec:38:ba:58:07:50:8d:65:8b:61:1a:9b:ad:0e:a1:
                    7a:85:28:01:61:06:0e:41:90:e6:b7:46:da:13:5a:
                    c1:b6:1a:7c:af:cd:84:56:51:e1:1f:04:26:85:d4:
                    76:14:2b:be:5e:59:9c:24:ef:b8:b9:90:fe:0d:c7:
                    f8:b2:8d:9c:c0:1e:a8:1d:80:54:ef:ce:67:56:69:
                    34:64:c8:ee:96:d6:14:8e:09:a2:ca:91:e7:d0:a6:
                    cc:e3:72:ba:e2:b1:30:a3:76:ff:aa:25:bf:92:c4:
                    75:df:35:c5:99:d7:7c:9c:51:29:55:56:ea:aa:d8:
                    fd:57:0c:d4:1c:64:a1:f3:fa:23:e6:e8:9a:65:cd:
                    43:8c:99:cc:c8:f5:9e:4b:b5:9a:23:91:5b:d6:d7:
                    c9:c8:34:e5:9f:8a:8a:5c:62:06:38:4c:94:09:29:
                    fd:db:ee:08:49:54:46:61:2a:1c:0e:8b:15:5f:03:
                    e7:c5:93:e8:49:71:91:72:b2:f8:ec:b6:79:b6:7a:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EC:FF:E9:AB:E1:54:DF:E0:2D:2F:EC:57:3A:1F:07:E0:BB:0C:32
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:55:9a:f7:8b:41:65:39:fd:3b:67:f7:79:89:15:d7:e9:
         9c:81:34:13:62:7b:11:13:d7:03:cf:56:93:d1:03:98:91:ec:
         6b:95:21:20:07:5e:8c:0a:c3:53:a6:aa:b8:0f:b8:48:6b:22:
         d9:cd:98:88:d2:8f:d5:66:f9:ba:cb:84:d2:7e:dc:40:99:52:
         2a:f7:cd:b3:c0:6a:3f:90:48:46:48:03:8a:b4:9d:c2:a4:91:
         3c:6b:3c:40:55:6b:73:67:24:55:d2:93:3a:3e:b5:74:ee:d4:
         20:bf:a9:2a:04:fc:7f:25:a6:47:e9:74:6a:de:3f:30:2a:66:
         8b:e2:a2:90:46:c6:4f:66:aa:95:c2:52:c4:10:dd:b3:d8:e1:
         cd:23:08:2c:2f:54:b8:cb:a2:e6:ea:a7:a1:31:8e:44:ca:65:
         32:7e:78:81:00:0a:71:36:b0:6e:07:8a:d4:2c:3a:ef:68:7f:
         c6:9f:09:6d:23:cd:5a:1d:39:c4:33:28:c1:fa:cf:fb:01:0b:
         d0:c1:3d:f6:ea:32:92:df:02:ee:2b:95:bf:13:52:82:b1:e2:
         b0:05:dc:80:c1:87:f6:bc:e4:89:7c:ad:2d:18:94:45:c4:40:
         11:06:a5:01:03:66:de:8e:cb:d4:05:6b:e3:75:d5:f2:da:cb:
         f9:db:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:02 2026 by rpki-client