Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
File:                     4xEv77cGGMJWaxygluyNG7Xzucs.mft (raw, json)
Hash identifier:          uJ+kCqfLuB13EKuQ5cRjKEP9zzPq9rYGFJkDtipkciY=
Subject key identifier:   93:79:BE:9A:28:3C:28:1C:86:BD:B1:D9:45:23:C7:19:45:5C:C2:39
Authority key identifier: E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB
Certificate issuer:       /CN=F367FC4FAR/serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
Certificate serial:       0DF3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
Manifest number:          0DF2
Signing time:             Fri 17 Apr 2026 01:05:02 +0000
Manifest this update:     Fri 17 Apr 2026 01:05:02 +0000
Manifest next update:     Sun 19 Apr 2026 01:05:02 +0000
Files and hashes:         1: 4xEv77cGGMJWaxygluyNG7Xzucs.crl (hash: pLH1RdXipmv2SMmSu0fJ6nR8HSzreREp4mlQPynHb/8=)
                          2: CF0B622680CF11E6B85F0616F8AEA228.roa (hash: 1lI0Ic1CEtnqLpkbf3wsFe/5DRUyxbUGqpE48sR72kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                          rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3571 (0xdf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAR, serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
        Validity
            Not Before: Apr 17 01:05:02 2026 GMT
            Not After : Apr 19 01:05:02 2026 GMT
        Subject: CN=69e1873e-7195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:97:f2:fd:06:83:9d:49:ca:eb:85:2d:dc:
                    2f:b1:a5:c4:50:2e:c2:84:f7:68:69:de:66:83:20:
                    9d:44:b0:69:a0:ef:89:d2:42:4a:c6:81:07:dd:78:
                    06:9a:f8:1d:30:21:83:94:5e:91:32:ae:b5:94:98:
                    5a:8e:22:fa:30:bf:46:0a:7a:0e:fa:cb:ff:4e:c1:
                    d5:b6:c8:85:c9:48:02:cc:ae:5a:0b:31:d0:cd:96:
                    c0:0b:d7:da:3e:80:20:93:5b:1b:47:f1:be:32:e0:
                    f6:d3:6a:a1:22:72:0a:3a:e0:6d:12:3b:c7:3e:e6:
                    2d:22:3c:03:e0:9a:a6:38:88:33:ad:40:40:1e:7c:
                    b9:a8:4c:50:6e:27:b9:51:2a:64:97:71:91:a8:e9:
                    b3:d7:d6:36:81:93:16:dd:64:c8:ad:31:5b:0d:a5:
                    32:32:1a:52:88:67:4b:bc:01:82:76:5b:0a:c4:91:
                    4d:fb:60:44:b1:af:1b:06:8c:25:e6:45:fb:25:89:
                    f0:1c:5a:e7:8b:92:b1:bb:f3:38:63:5b:93:f4:f0:
                    55:be:dd:be:5a:1d:87:cc:fb:24:bc:4b:d3:6e:8e:
                    a4:fd:cc:42:fc:00:fa:b4:73:c7:e3:8c:0b:61:41:
                    c0:c3:0a:a9:c0:09:cd:aa:56:db:1e:93:f2:7c:3e:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:79:BE:9A:28:3C:28:1C:86:BD:B1:D9:45:23:C7:19:45:5C:C2:39
            X509v3 Authority Key Identifier:
                keyid:E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e3:78:be:16:ac:8c:b3:d5:26:4c:37:66:f9:91:57:2e:58:
         e7:6d:01:e9:be:41:4f:43:c0:b9:05:94:70:4b:c4:e9:c5:eb:
         05:5e:5b:15:71:6b:d7:8b:4c:09:6d:bc:94:ec:17:ab:7f:54:
         e6:d9:90:48:92:90:cc:6d:9a:1d:f1:81:48:b0:8a:68:fe:b3:
         14:40:d7:b0:f2:5c:48:fe:a4:f4:49:06:98:d2:12:6c:a0:7e:
         b5:3d:f0:f2:9a:7c:39:39:2c:6a:f8:e5:3f:11:b9:d9:5d:78:
         c4:0a:76:89:91:89:54:0f:06:76:b6:d6:cb:35:47:82:f0:bf:
         fa:66:f9:7b:2c:0a:4b:e3:ed:32:ef:6c:5d:69:fd:13:12:e7:
         45:62:cc:36:25:f8:01:8a:f3:0a:7b:51:7e:c4:30:d8:d5:9d:
         41:91:c5:51:8e:f3:25:56:a8:8b:1e:be:96:d4:fe:3a:71:ca:
         c2:a5:32:4c:c2:7c:a8:4a:80:d8:f7:a7:e6:82:03:1c:76:ae:
         6f:00:9b:ac:13:b5:b2:dc:1d:8a:72:94:5d:1b:dd:21:4a:1f:
         35:47:4c:f2:a0:1b:31:8f:a8:bd:8d:92:8c:9e:33:97:9f:7d:
         10:2d:28:3c:e3:0a:e9:30:2e:e1:49:bb:83:93:5c:8f:63:8e:
         8d:e2:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:57 2026 by rpki-client