Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          4dgRkBvpaHy6Vq0yYgVQq7JuOSiasGe3fdvHFebIMwg=
Subject key identifier:   82:34:39:9F:68:B5:29:6B:57:7B:D1:85:1F:3F:AC:63:7F:2F:0E:B4
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       09CF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          09CE
Signing time:             Mon 02 Mar 2026 01:15:04 +0000
Manifest this update:     Mon 02 Mar 2026 01:15:04 +0000
Manifest next update:     Wed 04 Mar 2026 01:15:04 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: 9h9KR8KGxQPNx6Rn0iZCsgh64tEYnGSoPu6Rp+q2dQk=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Mar  2 01:15:04 2026 GMT
            Not After : Mar  4 01:15:04 2026 GMT
        Subject: CN=69a4e498-170f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:c9:d3:2f:a6:b9:a4:17:0d:41:e0:a0:0e:
                    0f:57:ef:0e:78:4b:98:e9:4e:c5:78:df:e7:d7:7b:
                    ba:46:6a:d0:c3:0c:77:87:8a:be:bb:80:79:bf:9e:
                    a4:fa:d3:56:28:60:7e:16:6e:20:77:75:39:3f:84:
                    86:2b:67:97:9b:07:cd:b4:4e:c7:6a:e3:17:5a:43:
                    e4:3d:fc:70:20:1c:62:20:aa:75:ac:e2:39:3d:d6:
                    87:6f:6d:4b:a1:79:85:50:89:63:61:04:ee:8c:51:
                    f0:79:c7:e4:00:20:99:0b:2a:86:59:05:ea:90:9b:
                    9a:10:cd:ad:81:51:13:b7:f9:5c:30:fb:9e:3e:89:
                    17:91:af:93:47:d0:ca:79:51:60:fa:62:81:2c:a0:
                    a7:fe:1c:1f:f4:c4:4d:54:49:67:1d:79:fc:80:4c:
                    fc:fc:e8:8d:82:a5:3c:c1:57:f7:71:7e:04:62:ee:
                    3c:cf:f1:d6:fe:28:2b:fe:1d:73:39:5f:08:04:a3:
                    8a:91:a2:04:7e:33:03:42:70:1f:25:72:fc:05:de:
                    a7:f9:41:d1:01:e3:b7:1d:79:b0:75:b2:a4:e2:73:
                    b9:c0:e4:4e:2f:d0:53:07:a5:95:64:14:4e:9e:3b:
                    be:22:c2:b2:64:41:a0:d0:36:fe:b2:4e:09:17:07:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:34:39:9F:68:B5:29:6B:57:7B:D1:85:1F:3F:AC:63:7F:2F:0E:B4
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:4d:de:78:c8:0c:d2:05:24:34:87:66:ef:dd:98:23:2e:
         c4:b9:e3:9c:db:e6:7f:6c:65:87:d8:a7:ac:5f:ab:34:b3:ab:
         6a:e5:16:bc:ad:9a:48:ef:e8:6d:7f:17:11:58:91:d2:44:7b:
         95:39:77:00:72:c9:52:c4:42:0e:5e:b7:6d:b1:df:fa:99:78:
         b5:f7:bd:2a:26:03:e0:72:69:9f:66:00:17:25:37:73:4b:88:
         ba:c9:90:3e:bf:c2:bf:0b:56:96:e1:36:1d:6a:27:52:c6:d5:
         55:6c:44:04:a8:a8:16:af:6f:93:00:8f:8b:9d:d0:c8:f9:d8:
         ad:7d:73:10:ca:0b:66:bb:a9:05:9e:dc:20:d9:03:8b:75:8c:
         6d:f3:95:d9:68:42:29:f1:cb:33:e7:81:11:4d:e3:61:1a:26:
         6b:9b:a8:72:c9:ac:d5:1a:58:05:a0:f9:4a:0c:42:6c:01:39:
         c9:e9:1f:3f:d5:8d:e7:e9:f3:9e:6c:f2:40:7a:39:8f:b8:df:
         31:77:c4:c2:f5:8f:9e:d0:33:7c:64:74:c1:c0:4f:cc:e1:e5:
         52:6c:08:44:f6:fd:39:16:46:0d:57:ed:68:e8:3f:cb:e9:af:
         c0:66:21:70:90:b4:2e:14:e1:48:69:f1:a4:09:83:e3:59:ae:
         24:45:b2:32
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBUjExMC8GA1UEBRMoNUREMTlDNjdGMTNFNjNEN0FEQTFBRUFDOEI3N0FD
QzA2M0U5RTUxNDAeFw0yNjAzMDIwMTE1MDRaFw0yNjAzMDQwMTE1MDRaMBgxFjAU
BgNVBAMTDTY5YTRlNDk4LTE3MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8i8nTL6a5pBcNQeCgDg9X7w54S5jpTsV43+fXe7pGatDDDHeHir67gHm/
nqT601YoYH4WbiB3dTk/hIYrZ5ebB820Tsdq4xdaQ+Q9/HAgHGIgqnWs4jk91odv
bUuheYVQiWNhBO6MUfB5x+QAIJkLKoZZBeqQm5oQza2BURO3+Vww+54+iReRr5NH
0Mp5UWD6YoEsoKf+HB/0xE1USWcdefyATPz86I2CpTzBV/dxfgRi7jzP8db+KCv+
HXM5XwgEo4qRogR+MwNCcB8lcvwF3qf5QdEB47cdebB1sqTic7nA5E4v0FMHpZVk
FE6eO74iwrJkQaDQNv6yTgkXB8cdAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUgjQ5
n2i1KWtXe9GFHz+sY38vDrQwHwYDVR0jBBgwFoAUXdGcZ/E+Y9etoa6si3eswGPp
5RQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0U4NDcwM0JDOTFFRDExRTlCMDlFNzQ3REY4QUVBMjI4L1hkR2Na
X0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hkR2NaX0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzk1QzQvRTg0NzAzQkM5MUVEMTFFOUIwOUU3NDdERjhBRUEy
MjgvWGRHY1pfRS1ZOWV0b2E2c2kzZXN3R1BwNVJRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjHk3eeMgM0gUkNIdm792YIy7EueOc2+Z/
bGWH2KesX6s0s6tq5Ra8rZpI7+htfxcRWJHSRHuVOXcAcslSxEIOXrdtsd/6mXi1
970qJgPgcmmfZgAXJTdzS4i6yZA+v8K/C1aW4TYdaidSxtVVbEQEqKgWr2+TAI+L
ndDI+ditfXMQygtmu6kFntwg2QOLdYxt85XZaEIp8csz54ERTeNhGiZrm6hyyazV
GlgFoPlKDEJsATnJ6R8/1Y3n6fOebPJAejmPuN8xd8TC9Y+e0DN8ZHTBwE/M4eVS
bAhE9v05FkYNV+1o6D/L6a/AZiFwkLQuFOFIafGkCYPjWa4kRbIy
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:25 2026 by rpki-client