Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
File:                     Abb7gSoUrvQLoDsWWv79W3SkZpY.mft (raw, json)
Hash identifier:          6Y0Buo2PUll24TXw6BTYDpcAU+x4+9PZhgRwajunJsU=
Subject key identifier:   C0:2D:8C:E7:4F:2D:EE:D5:09:13:5A:ED:1D:65:55:C3:B0:C4:46:A7
Authority key identifier: 01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
Certificate issuer:       /CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
Certificate serial:       03DD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
Manifest number:          03DC
Signing time:             Fri 17 Apr 2026 03:40:59 +0000
Manifest this update:     Fri 17 Apr 2026 03:40:58 +0000
Manifest next update:     Sun 19 Apr 2026 03:40:58 +0000
Files and hashes:         1: Abb7gSoUrvQLoDsWWv79W3SkZpY.crl (hash: OrV7Wrvx6YRv7MIzkQdDULQTk5GYEEPMB8or60U/eRQ=)
                          2: 61E8A95475A111EFAC7BA279762E951A.roa (hash: iAiWDX2k6dKqGfuzfdFuo/QfCsfKMTY5hEty8a1QfDk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                          rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674008AR, serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
        Validity
            Not Before: Apr 17 03:40:58 2026 GMT
            Not After : Apr 19 03:40:58 2026 GMT
        Subject: CN=69e1abcb-166f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:e3:32:c9:6f:5f:aa:64:18:83:40:51:95:
                    3e:7a:ef:ba:d3:c3:36:4a:61:11:48:b8:f9:4c:84:
                    eb:eb:b1:c9:9d:83:fd:ee:85:36:16:53:f9:ce:5f:
                    fe:e0:47:e0:85:4d:fc:a1:db:e4:e1:d4:7e:08:5e:
                    29:50:a9:02:49:0c:fb:5d:99:a0:ed:fd:65:87:89:
                    31:b5:84:02:52:44:5b:4f:46:d7:31:f0:e5:e8:dc:
                    48:0d:c7:51:2d:c4:d5:99:9f:a6:d9:55:cf:b0:62:
                    cc:20:32:84:d3:52:83:a5:fc:a0:53:9d:0d:85:e6:
                    81:36:21:eb:20:eb:94:0b:32:27:b5:f4:c6:50:fd:
                    b7:16:ab:67:18:e8:48:2e:5b:82:33:9c:d2:6b:51:
                    ac:f9:e6:41:4c:09:6f:fd:87:54:63:05:86:ec:bc:
                    d3:a2:d9:ba:c5:98:74:76:1c:65:94:50:2a:48:9a:
                    8f:42:51:36:16:b5:02:b0:6f:e7:e6:a2:d1:93:80:
                    87:02:84:c3:18:44:cf:2a:b2:6b:aa:47:d7:14:c3:
                    e7:2f:e4:80:35:80:8b:5e:1f:58:17:b0:a7:5f:33:
                    bd:23:c7:46:8f:a1:60:5a:21:06:4a:5c:36:b7:52:
                    5e:a8:5b:ff:9f:3d:29:f7:56:4c:d7:04:67:c8:35:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:8C:E7:4F:2D:EE:D5:09:13:5A:ED:1D:65:55:C3:B0:C4:46:A7
            X509v3 Authority Key Identifier:
                keyid:01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:75:27:3b:1b:e3:e5:f3:3d:f6:9c:f6:e2:cf:3a:1b:41:
         9d:b5:f2:11:8d:a4:91:cd:0e:08:b8:22:66:e1:fe:d8:7c:5e:
         e6:4e:9b:ae:b8:0f:e8:ad:5e:9e:df:bc:b4:ae:01:2b:fa:ea:
         3a:21:95:35:7e:a9:e1:8e:66:f3:bf:44:3e:dc:7a:73:79:64:
         37:16:45:bc:f4:f5:69:aa:0d:87:c1:4e:4e:ba:1a:52:1e:f8:
         52:32:43:bf:84:87:bd:10:40:48:1b:30:e6:e4:bb:ef:42:ba:
         fc:b4:48:1e:e8:b2:cc:71:93:e6:ad:17:65:b1:25:8b:f3:18:
         fc:43:66:d1:52:34:ec:31:68:0e:60:fb:84:ae:a3:b1:10:85:
         0b:26:a5:c9:a9:00:0a:7c:ae:90:33:33:2d:6f:d8:19:30:ab:
         5f:ab:cd:f8:3a:c5:de:86:c4:43:0a:f4:51:13:53:46:54:81:
         de:0b:45:99:63:da:bd:d4:69:66:93:be:24:5e:e7:0e:ea:95:
         0d:c7:c1:98:23:7c:ef:d1:74:64:3c:a0:08:15:fa:e3:37:10:
         0e:c4:b6:7d:a4:ba:d1:7e:87:03:65:55:6c:e6:8d:ed:a6:69:
         92:66:54:1f:d8:9d:8b:eb:96:37:93:80:20:67:d5:79:74:80:
         f1:38:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:31 2026 by rpki-client