Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          vaF1WLxTFIatDdEinrWIx+becaeh5NI6te61cFt+utM=
Subject key identifier:   DB:87:E7:5A:25:03:AA:9F:5B:CA:A3:4C:70:EB:76:D9:6D:D1:4F:31
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       0231
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          0230
Signing time:             Tue 03 Mar 2026 03:04:16 +0000
Manifest this update:     Tue 03 Mar 2026 03:04:15 +0000
Manifest next update:     Thu 05 Mar 2026 03:04:15 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: VwyQVgo1SS+ouv4yKl/dmTf5neMSNRPZWrNQHRt+soU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Mar 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Mar  3 03:04:15 2026 GMT
            Not After : Mar  5 03:04:15 2026 GMT
        Subject: CN=69a64faf-b6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:a7:21:09:58:eb:13:0c:03:d6:32:9d:57:
                    7e:13:63:42:a3:63:39:16:67:aa:56:a1:c5:d9:b1:
                    82:06:f4:a9:a4:74:76:8b:0d:ff:de:28:dd:e8:cd:
                    81:43:30:da:00:e1:69:fc:10:62:7e:42:ae:21:2e:
                    45:ab:c8:e5:bb:65:93:c6:f1:11:84:99:2f:2c:82:
                    ad:d3:62:29:09:c9:b4:ba:46:89:48:ea:6f:e0:5f:
                    72:1c:6f:18:90:1c:3f:12:10:58:69:cd:66:db:20:
                    f3:a0:9e:ff:09:b4:53:85:54:1d:1c:80:12:91:bc:
                    02:38:be:fc:57:10:8a:0a:12:cb:90:a9:a1:7a:a5:
                    a1:49:fd:b4:53:4c:21:5f:1b:7b:cb:24:c7:39:e9:
                    97:2d:ce:e8:59:1c:f1:21:a7:60:86:7b:c0:94:e4:
                    99:ce:ce:59:16:1a:69:ea:27:0c:72:9a:ec:0f:09:
                    fc:d9:ac:47:be:43:11:d8:36:40:d2:18:a0:6c:88:
                    f0:6d:60:94:70:72:25:40:e1:16:26:61:fa:50:d5:
                    64:2f:f1:e4:9f:31:61:57:ea:00:0f:c8:d1:0b:68:
                    67:cd:38:56:47:26:46:86:97:53:3c:98:f2:78:86:
                    90:84:c8:25:92:dd:2e:fd:cf:63:3b:6f:f6:7d:4b:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:87:E7:5A:25:03:AA:9F:5B:CA:A3:4C:70:EB:76:D9:6D:D1:4F:31
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:67:a3:40:ba:3a:c7:4f:1b:72:7c:97:fb:4f:ed:5e:3f:84:
         23:a4:6e:a1:47:63:4c:ec:b9:af:97:4c:3a:5e:0a:54:4a:4a:
         e2:9f:a5:46:73:6e:2b:f5:9a:6c:40:e3:9c:e2:99:71:e3:de:
         54:bb:50:fe:ab:e6:52:69:89:a0:b9:f3:53:54:b5:f4:8b:fb:
         c4:3f:03:6d:99:6e:22:49:69:65:29:49:bb:80:ee:57:3b:3a:
         8e:b7:20:8c:00:0a:69:13:a2:de:43:b8:3e:5c:12:f7:67:a8:
         ab:a0:c9:31:e5:52:7d:72:89:67:a6:7d:49:80:13:a2:1d:bb:
         a4:57:c1:55:03:bf:20:7c:e9:19:c4:68:97:3a:e6:4b:21:2b:
         5a:49:9e:bd:d6:e3:92:4c:1e:45:b6:d6:71:14:05:e6:f9:28:
         b1:56:43:7a:8b:21:65:3f:f0:9b:15:bf:c5:ac:5f:57:f1:c2:
         5a:8e:bd:1f:61:5b:6c:eb:60:81:c0:01:b4:88:04:a6:80:88:
         ac:ee:80:d0:76:a0:82:87:30:00:20:da:d9:d4:7d:5e:40:7c:
         52:79:04:91:ff:3e:a1:5a:50:24:fc:3d:e6:2e:15:34:3d:dd:
         a0:58:18:12:dc:c5:18:40:ed:3c:a4:32:b5:23:2c:8b:4c:d9:
         f4:85:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:31:10 2026 by rpki-client