Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
File:                     5PfkpBui3-Gkmtw2NMzweTXpIRg.mft (raw, json)
Hash identifier:          7BeQ0Ft14B9KLBgp3cc//G58trhe035sw0PYowWBj/Q=
Subject key identifier:   98:1D:85:32:0A:4E:4B:0F:AE:04:A2:1C:76:51:E5:DF:E3:A5:34:52
Authority key identifier: E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
Certificate issuer:       /CN=F368356FAR/serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
Certificate serial:       E7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
Manifest number:          E5
Signing time:             Sun 01 Mar 2026 03:26:05 +0000
Manifest this update:     Sun 01 Mar 2026 03:26:05 +0000
Manifest next update:     Tue 03 Mar 2026 03:26:05 +0000
Files and hashes:         1: 5PfkpBui3-Gkmtw2NMzweTXpIRg.crl (hash: iDGMxqbDICVzRz3cbSh8d0odlncTEnosObfTg2jAnVI=)
                          2: 5BCF46A8923911F0BEE309F5DAE4EC9C.roa (hash: ncq+Mwbrx6oQKK1sHldvuf8E9iLus0kj4fB63aqtMb4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                          rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 03:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAR, serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
        Validity
            Not Before: Mar  1 03:26:05 2026 GMT
            Not After : Mar  3 03:26:05 2026 GMT
        Subject: CN=69a3b1cd-ad8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:31:2f:ef:5c:41:31:65:34:88:e6:37:ee:6b:
                    54:ff:54:a7:aa:14:50:d3:84:e3:3d:59:02:ab:a1:
                    0b:97:0e:e0:92:15:0d:f6:c3:74:ef:ed:4a:56:b3:
                    d5:97:f8:e1:53:17:1b:cd:2b:e6:1f:d3:67:2b:6f:
                    7a:27:ae:e0:ca:86:9a:5a:4e:2d:b6:76:ed:62:ad:
                    56:00:c4:26:ae:1e:42:6d:0e:be:dd:12:97:f8:38:
                    33:34:13:b0:cb:a8:1c:cd:eb:5d:0b:ea:b7:d3:d8:
                    29:59:d8:4f:97:7b:92:6a:ac:d9:fe:5a:72:49:a6:
                    6f:d2:76:34:b1:2f:1c:98:22:40:bc:c3:fc:e3:f0:
                    da:bd:2d:3a:8c:be:0f:c4:68:77:5a:38:f9:7b:f9:
                    9b:d6:c6:91:61:ef:f8:43:e7:27:cd:fa:ff:7d:b8:
                    4d:96:b6:d4:1e:ed:ea:8e:1e:3d:9a:01:ae:11:10:
                    92:cd:be:14:70:fc:a0:5f:35:22:f9:fe:bb:71:38:
                    e5:da:86:c3:a2:b6:92:a1:55:76:8b:9c:88:7e:e9:
                    c8:ab:cd:93:59:d5:51:f7:24:db:3c:56:a1:a7:f4:
                    e7:d0:b6:f7:6e:00:e9:e4:6d:55:46:6c:83:d8:2f:
                    ae:b1:f2:9a:2f:18:f1:79:b5:01:ed:6e:d2:f6:8e:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1D:85:32:0A:4E:4B:0F:AE:04:A2:1C:76:51:E5:DF:E3:A5:34:52
            X509v3 Authority Key Identifier:
                keyid:E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:e4:e7:8c:73:7f:3c:da:48:ea:2b:e2:42:7d:aa:55:84:
         3f:98:e7:12:18:32:83:5c:b9:52:e9:18:69:7a:06:0c:38:33:
         d1:55:6d:04:d0:40:b5:52:9b:8f:64:b8:11:a8:e7:01:95:ea:
         4b:aa:02:e2:79:24:a2:0d:0e:83:7b:9c:eb:a5:57:c0:66:05:
         f8:5c:fa:c1:ed:e8:dc:b8:c6:59:11:40:38:67:60:4c:92:9b:
         3e:56:88:dc:01:d7:ac:02:c3:84:16:a5:bc:cf:ca:56:42:4c:
         f7:d9:33:98:33:93:24:c3:e0:12:56:c3:98:93:2d:76:3b:5a:
         d4:ce:65:0b:10:c7:40:56:d7:27:13:9e:e9:49:c9:0c:e8:12:
         e4:dd:f4:29:47:a7:34:40:8e:18:0e:36:b4:bf:7b:cb:65:ce:
         6a:0e:34:83:c3:ae:1f:9b:0c:c8:af:16:9a:48:c0:e1:f3:aa:
         63:62:e1:40:6b:de:2a:be:4c:73:a6:ce:a6:5e:5f:00:17:91:
         05:a4:b8:e1:1f:26:97:cb:da:5e:8b:86:8a:87:23:6f:fb:13:
         0a:10:9a:ea:ae:fc:c0:4e:fc:f3:73:fa:3a:76:74:67:8d:c9:
         6c:f2:13:ce:dc:fb:6b:ae:85:ac:c7:d9:0a:23:95:a0:49:2e:
         75:f8:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:36 2026 by rpki-client