Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          fzoUy4exKqnQUiI2QvpNOW44Ezkd52+1yUzI33byNS4=
Subject key identifier:   C7:AF:E9:C0:DC:5A:36:26:17:38:78:DF:74:2D:43:F1:F4:D6:8C:4C
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       060C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          0607
Signing time:             Mon 02 Mar 2026 01:55:52 +0000
Manifest this update:     Mon 02 Mar 2026 01:55:52 +0000
Manifest next update:     Wed 04 Mar 2026 01:55:52 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: Bqtl68QUZM4wKsWEsNW7PlYJ4JtaChwdRtE7ywExGD8=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Mar  2 01:55:52 2026 GMT
            Not After : Mar  4 01:55:52 2026 GMT
        Subject: CN=69a4ee28-3972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:c0:d1:1a:e2:19:cf:46:8f:72:de:e2:61:
                    23:ae:49:11:33:85:76:59:03:41:72:ff:72:b0:6f:
                    c5:54:e7:bb:79:d7:21:ca:06:0f:00:35:c3:26:4b:
                    6f:fe:a7:8f:80:5d:98:30:e7:68:4f:0d:67:de:94:
                    17:2a:39:86:e5:fa:30:8f:6d:f1:11:b2:fb:f2:59:
                    84:0b:ad:60:43:9f:59:77:6f:c2:15:d5:b2:1b:1a:
                    4e:dc:ff:cc:bc:99:47:6e:d8:b5:bf:17:73:75:02:
                    5b:0f:30:f6:8b:0a:3d:6d:cb:50:51:ab:8b:1c:6e:
                    f7:eb:05:5d:81:b9:f5:bc:67:ad:db:78:0d:99:d1:
                    89:5c:72:dd:04:10:79:35:31:c3:09:3c:f3:28:62:
                    c6:23:5d:4a:96:c8:c6:51:67:dd:e6:84:9d:f2:6c:
                    d2:b0:a0:84:62:d3:26:c5:22:78:0d:2b:3b:a8:21:
                    ba:dd:c1:bf:db:fd:5a:00:d5:07:14:02:f6:41:f7:
                    28:5d:29:3e:90:f1:06:b2:8d:43:7a:b4:3d:3c:49:
                    ca:1e:e7:98:14:01:c3:50:8d:f8:ee:99:61:d3:f6:
                    c4:60:7b:fe:77:f7:3a:04:21:5e:bd:4e:54:91:21:
                    2f:69:c9:aa:b4:c3:06:f6:c3:c0:9f:1c:b0:58:25:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AF:E9:C0:DC:5A:36:26:17:38:78:DF:74:2D:43:F1:F4:D6:8C:4C
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:fa:c3:a6:9f:18:12:c6:ec:0f:e7:87:8c:ec:90:9b:ae:
         13:e3:24:1e:7f:1b:7e:21:cb:7d:13:0a:a3:fb:80:31:09:9f:
         97:73:43:8c:e2:cd:07:b2:ec:a3:7f:29:f4:2b:d4:76:cd:88:
         5a:28:fa:72:b9:8a:8c:fe:e9:83:aa:c0:f6:fa:ee:3e:37:b4:
         fe:36:1d:1d:2f:66:74:b8:9d:b0:bc:36:38:49:63:46:3a:33:
         39:4a:5c:4f:85:66:55:c5:ee:67:a6:75:12:32:78:bf:76:93:
         5d:f9:86:34:73:50:cb:29:e8:9b:e1:23:be:c8:42:0c:c0:66:
         73:23:6e:68:10:a3:19:55:f3:0f:b0:c2:79:41:51:da:65:12:
         1f:2d:be:4b:ca:c8:6d:b7:15:6d:1a:d0:43:e4:34:bf:34:af:
         e8:56:3b:2f:ee:8f:83:29:73:f0:43:cc:03:a6:c5:77:6b:81:
         79:6d:86:e4:78:95:c3:7a:f0:e9:ca:c4:ea:e4:09:11:f1:4d:
         a9:14:c9:e0:dd:6c:53:49:aa:40:3c:df:a1:a6:d4:66:c9:0c:
         c5:c6:70:63:25:11:4d:3f:45:6b:14:5a:8e:fb:41:dc:ff:fb:
         12:1c:a1:45:e2:07:f3:5f:09:7a:cd:c3:2c:f3:34:0c:be:15:
         e5:ba:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:22 2026 by rpki-client