Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          3ftBK1GwlJHbuJtRdit/ZNNPZ3BKk7fOeqigTYGSqN0=
Subject key identifier:   D9:DA:D1:61:BF:08:A8:24:DB:F4:55:8E:38:EE:33:34:A7:6A:6A:CB
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0DFB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0DF7
Signing time:             Mon 02 Mar 2026 00:57:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:57:42 +0000
Manifest next update:     Wed 04 Mar 2026 00:57:42 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: 2CB11UC014rm1KsR6E+QM8Lf242pxLZPD9633i/XPZU=)
                          2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
                          3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3579 (0xdfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Mar  2 00:57:42 2026 GMT
            Not After : Mar  4 00:57:42 2026 GMT
        Subject: CN=69a4e087-10d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:38:7b:da:74:1c:7b:5b:e0:04:51:96:04:
                    3b:57:2b:04:ef:b1:bb:cd:cb:3b:dc:7d:d2:f3:d7:
                    f0:60:d5:0b:d4:35:5f:d2:99:8c:c7:9d:7a:fd:6a:
                    56:2f:8f:3e:be:9d:12:ad:bd:79:47:22:06:89:d5:
                    33:d0:fa:7b:6a:3f:14:5b:c9:6c:09:f6:c9:1c:c7:
                    29:0f:d0:1b:9b:b8:1a:1c:fd:87:80:e0:f5:62:ce:
                    8d:a9:c9:23:6b:96:ae:a8:fe:e0:a0:3a:0a:08:df:
                    d7:69:be:41:9a:1c:d5:a2:da:40:59:c6:e7:ca:74:
                    dd:7f:5f:46:c7:52:1a:e6:a3:51:7d:e6:47:d8:2b:
                    0d:2a:b7:c1:c2:c4:fb:5e:63:6f:c2:94:ca:58:f1:
                    78:4d:85:0c:1a:76:7a:08:e9:ce:ae:56:33:2c:e3:
                    b1:5e:48:1c:a5:58:ab:1c:ff:62:eb:14:23:8d:31:
                    e2:d0:65:bc:02:85:1b:66:d6:2c:99:a1:eb:e7:b8:
                    e2:f6:48:b1:1c:4c:fe:4e:cd:34:5e:2c:6c:ff:ee:
                    36:02:fb:34:f1:e0:54:90:9b:99:a0:c5:b6:72:67:
                    51:a5:f4:2f:95:c9:93:cd:e3:55:db:19:52:bc:f4:
                    22:b8:bf:6c:92:57:bd:22:9f:7f:c0:71:4a:36:0b:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DA:D1:61:BF:08:A8:24:DB:F4:55:8E:38:EE:33:34:A7:6A:6A:CB
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:90:29:6d:dd:b2:9a:67:d6:17:60:8b:25:32:22:31:61:
         f5:c1:a7:b8:d1:cd:4b:9b:2e:9f:09:6c:21:f5:14:c5:3d:09:
         a1:3f:7c:c6:26:0a:11:d3:fb:68:ac:87:81:6b:10:22:dc:8b:
         1e:f8:8e:f7:7f:aa:b5:bb:8d:e1:e9:6c:a1:fe:c2:bb:2a:1c:
         14:89:da:dd:fe:a1:f7:8a:ab:c9:92:cc:31:4e:7c:f2:9f:5d:
         e1:eb:88:bb:ad:e9:43:fa:e7:2b:9c:8d:ff:02:f7:11:2a:43:
         8b:7d:a5:b6:4b:c7:c6:a6:3c:1a:ac:a1:b4:e5:ec:3e:42:14:
         44:64:5a:53:a6:7b:dc:32:ac:0a:cb:8e:ca:1b:82:db:a7:0d:
         ac:11:a4:01:1c:a8:20:7d:56:34:2c:e7:de:db:45:70:5d:f0:
         16:7d:9c:ae:6c:ca:22:7f:ed:44:4f:b1:c0:06:64:11:9e:a4:
         43:30:48:11:d8:4f:62:fe:85:bc:32:ac:85:b6:44:98:9b:ad:
         64:e1:e0:34:9d:21:de:08:36:91:d9:f6:36:d6:a4:66:b1:77:
         cf:db:6e:e7:4e:1b:15:5b:a3:f5:1a:13:07:9c:50:bf:c5:b4:
         96:cb:3c:6c:cb:8e:fd:0c:e7:ff:e7:98:ef:51:7a:c5:ea:0c:
         c0:48:51:95
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDfswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODBDMTRBUjExMC8GA1UEBRMoMjY1N0MwREFBNDQ0Q0NCOUJFRjhDMkE4NTg2QTBF
NzQ5Q0VBOUI1MjAeFw0yNjAzMDIwMDU3NDJaFw0yNjAzMDQwMDU3NDJaMBgxFjAU
BgNVBAMTDTY5YTRlMDg3LTEwZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsMjh72nQce1vgBFGWBDtXKwTvsbvNyzvcfdLz1/Bg1QvUNV/SmYzHnXr9
alYvjz6+nRKtvXlHIgaJ1TPQ+ntqPxRbyWwJ9skcxykP0BubuBoc/YeA4PVizo2p
ySNrlq6o/uCgOgoI39dpvkGaHNWi2kBZxufKdN1/X0bHUhrmo1F95kfYKw0qt8HC
xPteY2/ClMpY8XhNhQwadnoI6c6uVjMs47FeSBylWKsc/2LrFCONMeLQZbwChRtm
1iyZoevnuOL2SLEcTP5OzTReLGz/7jYC+zTx4FSQm5mgxbZyZ1Gl9C+VyZPN41Xb
GVK89CK4v2ySV70in3/AcUo2C1s5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2drR
Yb8IqCTb9FWOOO4zNKdqasswHwYDVR0jBBgwFoAUJlfA2qREzLm++MKoWGoOdJzq
m1IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgwQzE0Lzc3MDdGQUQ2NUFFMDExRTY5RkFFNUUzMkY4QUVBMjI4L0psZkEy
cVJFekxtLS1NS29XR29PZEp6cW0xSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0psZkEycVJFekxtLS1NS29XR29PZEp6cW0xSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODBDMTQvNzcwN0ZBRDY1QUUwMTFFNjlGQUU1RTMyRjhBRUEy
MjgvSmxmQTJxUkV6TG0tLU1Lb1dHb09kSnpxbTFJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLmZApbd2ymmfWF2CLJTIiMWH1wae40c1L
my6fCWwh9RTFPQmhP3zGJgoR0/torIeBaxAi3Ise+I73f6q1u43h6Wyh/sK7KhwU
idrd/qH3iqvJkswxTnzyn13h64i7relD+ucrnI3/AvcRKkOLfaW2S8fGpjwarKG0
5ew+QhREZFpTpnvcMqwKy47KG4Lbpw2sEaQBHKggfVY0LOfe20VwXfAWfZyubMoi
f+1ET7HABmQRnqRDMEgR2E9i/oW8MqyFtkSYm61k4eA0nSHeCDaR2fY21qRmsXfP
227nThsVW6P1GhMHnFC/xbSWyzxsy479DOf/55jvUXrF6gzASFGV
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:46 2026 by rpki-client