Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          DliQKS0LqCZfkvnZVAUNHGZwTw3ZKF+WUaWw0Y6sJZM=
Subject key identifier:   13:24:04:5C:21:41:B4:6E:9F:29:1B:76:62:B1:78:AB:12:0F:A7:69
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       0548
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          0546
Signing time:             Mon 02 Mar 2026 02:06:08 +0000
Manifest this update:     Mon 02 Mar 2026 02:06:08 +0000
Manifest next update:     Wed 04 Mar 2026 02:06:08 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: lPlfZdMrS3fDoNCRjDR7QDzpipMovT2nOP2OwC2rwzE=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Mar  2 02:06:08 2026 GMT
            Not After : Mar  4 02:06:08 2026 GMT
        Subject: CN=69a4f090-8fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:54:a5:f1:52:e9:d1:f6:e6:98:64:86:cf:
                    bc:7a:4e:5d:ae:0d:2f:dc:5f:67:7c:8c:b4:89:4a:
                    0a:b2:ad:d2:6c:db:5d:ca:7d:c1:0b:c2:80:e5:b9:
                    66:63:fb:e2:ba:46:bb:83:07:ae:27:ba:2d:87:5f:
                    d4:ea:29:94:75:06:8f:7f:e2:e4:dd:d5:9d:bd:cb:
                    08:66:f8:b5:3a:27:0c:6a:58:f9:0e:93:a3:75:7a:
                    7a:f9:14:b7:57:8a:ea:8b:37:6c:30:fa:52:ab:ca:
                    dc:39:7b:ab:8a:91:23:61:50:d1:ae:cf:d9:b6:82:
                    d7:ff:3f:94:27:20:72:10:9e:d5:0f:65:34:ae:df:
                    b7:42:53:28:e3:6d:a9:43:96:02:7d:66:6f:1d:74:
                    a5:2d:36:52:59:c8:99:a7:9f:bf:1d:49:c2:cb:24:
                    ad:d0:ff:eb:e3:c5:04:7c:3b:28:e9:36:88:40:83:
                    b4:31:a4:eb:65:e5:d7:8f:4b:5b:b6:dc:ed:82:ad:
                    e4:58:e7:09:89:83:37:95:11:08:14:e9:7e:dd:4e:
                    d2:1c:3b:0c:9a:b1:e3:c8:fc:57:b4:4a:40:4c:2c:
                    d0:03:79:a7:d6:94:60:e0:ad:6f:7a:7c:ec:64:ec:
                    82:a2:82:f0:85:e8:e2:4f:44:01:fe:cc:57:49:3a:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:24:04:5C:21:41:B4:6E:9F:29:1B:76:62:B1:78:AB:12:0F:A7:69
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:f9:9a:4b:ee:6f:23:f4:c7:31:c2:b4:17:0e:a5:ec:52:
         8f:12:c7:75:12:ff:64:aa:fd:a1:bc:9f:29:5a:5a:41:18:7a:
         ff:af:8f:2f:6c:38:92:7b:be:72:fd:98:8a:1e:18:7a:91:b7:
         0a:24:b9:c9:80:e0:ee:73:67:a3:70:cb:89:bf:2e:86:21:1d:
         7c:24:7a:ca:b7:74:9d:2b:34:2f:28:1a:a6:2d:cb:c5:f5:e8:
         43:61:35:7a:38:cf:9c:18:81:31:55:e8:bb:8f:c2:f6:4c:76:
         fd:a5:1b:fd:9e:dd:d5:8b:e9:88:7a:4e:35:16:bc:1a:59:8e:
         65:24:df:ec:70:96:45:52:d9:e4:bf:b8:3f:5e:83:20:2c:7e:
         d9:dd:ae:c9:f3:b2:53:6d:5d:fd:0f:ac:2e:2c:74:79:7c:89:
         fd:95:80:48:ed:57:b0:d9:0a:6d:e9:8d:41:a9:a3:a5:15:1d:
         f9:9d:b5:13:09:33:8b:3b:4a:20:b2:8f:82:bd:16:be:a7:aa:
         82:3e:64:37:a7:6d:b4:f6:33:b9:fd:2a:d2:92:4f:b3:73:cd:
         7d:28:f9:53:f1:1c:08:5f:a6:cc:61:8d:8e:6d:e0:e6:a1:c9:
         07:07:ae:5a:e3:af:98:b5:07:63:ea:17:ac:ca:1b:79:29:ff:
         90:07:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:21 2026 by rpki-client