Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          DMjNJfLpmRfZe3S0SJ6BgEIE5LSwWFE9Hm5wApCSIuw=
Subject key identifier:   FB:D6:3E:A9:1E:9D:1B:8A:85:0D:FC:A8:36:C3:23:15:AF:38:45:04
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       06F5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          06F3
Signing time:             Mon 02 Mar 2026 01:41:38 +0000
Manifest this update:     Mon 02 Mar 2026 01:41:38 +0000
Manifest next update:     Wed 04 Mar 2026 01:41:38 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: lGFHT5zUGoNI3RwbV68BRo1u3rlZN/KUbj5b889WhdA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Mar  2 01:41:38 2026 GMT
            Not After : Mar  4 01:41:38 2026 GMT
        Subject: CN=69a4ead2-2b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:e5:b3:b0:9f:0a:e9:b4:aa:9a:21:26:3f:
                    2d:a2:c7:db:83:ab:f1:09:9a:53:d4:57:30:d7:dd:
                    ab:40:19:1c:c3:a6:8f:da:0d:c2:ea:0e:5d:bf:01:
                    d3:fd:f0:49:a0:7b:30:c9:fb:fb:bf:1c:0e:ba:55:
                    8d:5d:0c:b7:58:ab:4a:94:4c:8c:4a:24:c4:b8:b9:
                    f1:ef:1a:1b:38:c4:ba:2c:f0:d3:b3:67:15:aa:e1:
                    b6:71:f5:e3:a0:35:18:ef:9b:f9:2a:02:01:93:f4:
                    72:fb:f7:30:f1:9d:63:41:24:1d:da:d6:e7:85:be:
                    3f:c9:db:c1:c4:ee:bd:e2:cb:5d:a7:d6:66:5a:5d:
                    38:85:dd:8f:fa:94:2f:c0:76:26:ff:db:41:dc:b3:
                    c0:d3:ba:86:10:d8:e1:a8:db:ae:fe:c2:4d:20:b9:
                    ca:53:f1:60:3a:fa:ed:22:20:73:74:f0:6c:f7:2b:
                    c0:4a:86:91:f5:38:27:b2:23:ba:13:f4:01:f8:19:
                    cf:b3:f7:01:e1:1a:78:ff:38:a6:00:c7:5d:79:3f:
                    94:bc:18:c3:95:33:b0:2a:e2:c8:44:c4:b4:ea:74:
                    a1:cd:a6:57:47:a6:ae:22:e1:8e:6a:22:57:ff:9f:
                    75:5b:19:cc:21:b9:ac:40:c1:c1:83:f1:f6:93:9c:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D6:3E:A9:1E:9D:1B:8A:85:0D:FC:A8:36:C3:23:15:AF:38:45:04
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2c:6f:50:3e:95:17:9a:d0:fc:1f:dd:f3:14:28:f1:67:2f:
         10:16:a1:af:d4:8c:46:c9:30:0c:ea:9f:a6:92:33:4b:90:37:
         04:53:14:eb:21:db:d8:91:f7:52:be:c5:6a:a4:da:ee:f7:e4:
         f6:3a:a9:f5:76:37:49:74:2a:0c:cd:41:8c:a5:db:82:c2:ca:
         f9:e0:48:86:12:78:fa:df:4d:ca:c5:40:0f:cd:08:ed:45:35:
         b4:bd:84:dc:8b:b7:d9:15:66:d1:b5:0a:05:ba:d6:6c:ab:f7:
         d2:92:1f:5b:b1:86:6b:98:1e:b4:50:63:92:ab:a3:0b:34:08:
         c3:f3:c3:62:ed:51:b7:d0:cd:5d:0e:06:4a:db:d4:08:11:d9:
         1a:db:c5:6a:7e:0b:ff:05:30:3b:e0:c2:3d:ab:1c:6c:b3:e6:
         6c:88:57:5e:8e:68:ea:cf:7d:f9:79:8c:95:11:f9:d6:29:9c:
         09:da:e4:a5:18:8f:3b:fd:37:6a:a2:c4:3c:e8:e5:3f:41:8a:
         95:31:84:be:ff:c5:ad:76:2e:ac:16:67:56:16:dc:ba:b1:7f:
         66:e7:10:52:07:db:38:b2:d5:8c:ba:32:c0:db:a7:1c:99:b2:
         69:f5:59:7a:68:61:cc:b3:1f:38:34:4b:5c:80:c9:1c:aa:fa:
         4d:27:2b:48
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBUjExMC8GA1UEBRMoOTc2MUEyRDI4MURCOTQ3RUZFODdFNUJBOTE1MDI3
OERCQjk4OTZFRjAeFw0yNjAzMDIwMTQxMzhaFw0yNjAzMDQwMTQxMzhaMBgxFjAU
BgNVBAMTDTY5YTRlYWQyLTJiMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8SuWzsJ8K6bSqmiEmPy2ix9uDq/EJmlPUVzDX3atAGRzDpo/aDcLqDl2/
AdP98EmgezDJ+/u/HA66VY1dDLdYq0qUTIxKJMS4ufHvGhs4xLos8NOzZxWq4bZx
9eOgNRjvm/kqAgGT9HL79zDxnWNBJB3a1ueFvj/J28HE7r3iy12n1mZaXTiF3Y/6
lC/Adib/20Hcs8DTuoYQ2OGo267+wk0gucpT8WA6+u0iIHN08Gz3K8BKhpH1OCey
I7oT9AH4Gc+z9wHhGnj/OKYAx115P5S8GMOVM7Aq4shExLTqdKHNpldHpq4i4Y5q
Ilf/n3VbGcwhuaxAwcGD8faTnGoXAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU+9Y+
qR6dG4qFDfyoNsMjFa84RQQwHwYDVR0jBBgwFoAUl2Gi0oHblH7+h+W6kVAnjbuY
lu8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0I2NjdCODI4QzdDNDExRUI5NzM2Qzc2OEY4QUVBMjI4L2wyR2kw
b0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2wyR2kwb0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODgyQTEvQjY2N0I4MjhDN0M0MTFFQjk3MzZDNzY4RjhBRUEy
MjgvbDJHaTBvSGJsSDctaC1XNmtWQW5qYnVZbHU4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVLG9QPpUXmtD8H93zFCjxZy8QFqGv1IxG
yTAM6p+mkjNLkDcEUxTrIdvYkfdSvsVqpNru9+T2Oqn1djdJdCoMzUGMpduCwsr5
4EiGEnj6303KxUAPzQjtRTW0vYTci7fZFWbRtQoFutZsq/fSkh9bsYZrmB60UGOS
q6MLNAjD88Ni7VG30M1dDgZK29QIEdka28Vqfgv/BTA74MI9qxxss+ZsiFdejmjq
z335eYyVEfnWKZwJ2uSlGI87/TdqosQ86OU/QYqVMYS+/8Wtdi6sFmdWFty6sX9m
5xBSB9s4stWMujLA26ccmbJp9Vl6aGHMsx84NEtcgMkcqvpNJytI
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:26 2026 by rpki-client