Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          avnUGQs5bDDIdF3su+K0VwfgEO8nixb3npS45DdRbfA=
Subject key identifier:   40:F0:16:AC:6B:78:A4:86:6A:21:99:70:6A:4B:7A:0C:C2:CE:77:D4
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       09E0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          09DF
Signing time:             Mon 02 Mar 2026 01:11:57 +0000
Manifest this update:     Mon 02 Mar 2026 01:11:57 +0000
Manifest next update:     Wed 04 Mar 2026 01:11:57 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: UU7yK4DMSkMNqeCt5pVHPcb9/gFbooZoqxh0b+J6wpU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2528 (0x9e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Mar  2 01:11:57 2026 GMT
            Not After : Mar  4 01:11:57 2026 GMT
        Subject: CN=69a4e3dd-464f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:bf:9e:48:a0:42:45:0c:54:3b:a1:0c:c5:
                    24:ed:18:80:67:75:cc:03:f7:49:4d:bb:f1:71:be:
                    c1:9f:11:37:28:90:3e:5f:4e:5d:f2:54:18:86:32:
                    c4:a1:46:03:38:35:3f:6a:8b:0d:33:b1:af:39:9d:
                    9f:b6:4c:49:64:e8:db:36:78:03:e6:8e:53:9a:54:
                    62:1a:1b:e5:0a:7d:4b:55:c8:b4:47:50:63:ee:30:
                    53:87:99:6d:3c:e8:2b:c3:a2:30:0a:00:89:f4:12:
                    cb:c9:48:f5:30:18:36:97:6a:7f:56:0e:f7:17:1d:
                    d7:5b:77:76:cd:8b:ac:13:a3:7c:03:df:46:a2:17:
                    d3:e9:d2:b2:54:95:78:81:47:bc:20:ef:ca:27:18:
                    89:32:8a:d1:a1:82:d6:87:e4:65:b8:7f:5c:aa:1c:
                    80:d7:3d:f2:4c:a1:1f:e2:aa:52:49:d1:a3:4b:5a:
                    7f:5f:93:f6:9f:83:94:71:71:5e:7d:e6:21:a1:20:
                    20:8f:f3:d8:94:33:bb:ef:da:e3:20:bd:25:8f:87:
                    32:05:11:93:17:b9:09:5a:d1:c8:0c:f0:6a:53:60:
                    92:2f:3f:60:5d:9a:20:9c:55:69:68:c6:4a:60:a6:
                    a4:c2:39:07:67:38:3a:c9:2a:f5:42:59:36:a8:8b:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F0:16:AC:6B:78:A4:86:6A:21:99:70:6A:4B:7A:0C:C2:CE:77:D4
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:29:34:d3:0a:9e:d5:b8:2b:87:dc:f7:9e:85:64:d9:3b:
         33:21:b3:58:5e:38:63:2d:25:83:1b:fd:f8:fb:87:af:47:ad:
         d8:0f:fd:72:ec:7f:ac:b1:66:09:26:0b:1a:bb:62:9b:3d:5f:
         23:9f:ba:5c:90:dd:70:53:ef:5e:d0:7d:1e:53:4e:79:b1:21:
         66:e6:ce:70:10:b7:d2:c9:24:cd:96:12:83:73:49:40:41:87:
         a6:d2:52:b9:04:7b:80:e1:16:d0:a5:31:e3:07:77:58:ba:b3:
         de:18:21:22:32:16:ec:52:98:08:26:05:d2:6f:b4:2a:af:28:
         e8:7b:7b:46:de:dd:13:60:94:1f:db:95:19:f9:9b:10:40:a6:
         6a:32:d1:77:4e:bb:c3:68:53:31:2d:9b:1d:30:7a:62:be:a8:
         3e:de:b9:28:d0:29:a6:f0:85:bd:0a:0c:c2:56:62:92:40:53:
         6e:64:2c:d0:31:69:a0:b4:b5:5e:42:0a:08:dd:63:fb:06:66:
         1f:61:a6:d9:af:78:72:38:d4:67:e2:60:66:77:28:09:ab:ed:
         a9:9b:98:f5:5a:d6:0d:e2:39:c2:45:ac:af:c4:65:16:a8:4d:
         fc:23:9d:b2:34:76:66:a8:19:e5:3c:d0:78:e3:07:d0:95:c1:
         af:98:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:02 2026 by rpki-client