Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
File:                     0sTzVYe07S0EZPKfkswmt10TiZE.mft (raw, json)
Hash identifier:          FINGSYXy3djZcSRTdPmxlCC6P/mNBPJmrA1SAOksY2Q=
Subject key identifier:   86:A3:99:76:8F:8A:F5:84:37:9B:2D:4E:73:D3:9D:A6:77:79:6A:68
Authority key identifier: D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91
Certificate issuer:       /CN=F369859BAR/serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
Certificate serial:       02B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
Manifest number:          02B5
Signing time:             Fri 17 Apr 2026 04:12:30 +0000
Manifest this update:     Fri 17 Apr 2026 04:12:30 +0000
Manifest next update:     Sun 19 Apr 2026 04:12:30 +0000
Files and hashes:         1: 0sTzVYe07S0EZPKfkswmt10TiZE.crl (hash: GdfmBU55rXeXAr5+Gn2eomCPt6cn3tGIaDcoI5FCUtM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                          rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAR, serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
        Validity
            Not Before: Apr 17 04:12:30 2026 GMT
            Not After : Apr 19 04:12:30 2026 GMT
        Subject: CN=69e1b32e-84ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:28:bc:f3:8c:25:7e:18:77:4f:ce:dc:3f:
                    19:6d:6b:5c:df:24:28:06:e2:fb:20:9f:e9:c8:ae:
                    ef:3e:fd:03:c1:56:42:f6:1e:ba:b0:c5:1e:d8:cd:
                    9a:83:66:4f:82:4d:39:97:5c:92:2f:b6:e4:34:a5:
                    8c:3f:14:f1:cd:43:d3:c4:95:76:f6:af:13:9d:fb:
                    8d:27:c5:d2:e3:44:5b:70:c4:78:b0:51:5e:d8:a9:
                    f1:d4:3b:23:95:3c:c0:2b:63:7f:b4:80:d6:85:1f:
                    9a:b3:41:73:5d:14:37:bf:ec:71:ad:63:ee:18:19:
                    49:66:bb:30:cb:b1:90:49:cb:a6:87:33:df:e8:cd:
                    3a:fa:96:bd:c2:8a:17:76:6b:97:6c:97:d0:76:0b:
                    51:14:99:e2:df:13:b4:58:9e:d0:a0:0e:88:e8:57:
                    d4:bc:09:d4:11:50:d7:26:cf:4c:eb:30:cb:a1:19:
                    4a:e4:b8:eb:b4:37:55:9a:ca:aa:ed:ba:72:8e:72:
                    26:29:da:ba:cb:a5:bc:c7:0e:d1:41:42:a6:bb:74:
                    f0:8a:f9:09:1d:88:dd:e5:7b:0d:38:68:fe:d2:f7:
                    3a:ed:73:e7:f8:c2:77:ce:34:3c:55:19:f4:15:d4:
                    e7:18:43:f7:3a:4d:e5:b7:bc:5b:12:8c:ec:35:10:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A3:99:76:8F:8A:F5:84:37:9B:2D:4E:73:D3:9D:A6:77:79:6A:68
            X509v3 Authority Key Identifier:
                keyid:D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:38:d7:ac:3d:53:bf:a2:d0:66:11:56:e5:4a:43:bd:f0:
         90:bb:cd:58:09:39:6f:be:61:7a:4b:dc:5b:53:87:f0:cf:ed:
         bd:2e:bc:6e:e4:a8:c8:da:c6:98:f3:f4:05:70:ba:5e:07:2f:
         b3:57:48:e9:4b:f6:25:58:46:3e:aa:a0:af:7e:27:a3:e4:43:
         04:1d:b0:c2:b3:74:e1:6b:31:83:a1:84:6a:e2:15:aa:9c:29:
         e6:77:cd:ca:41:91:e3:08:df:00:85:7d:3b:37:d4:24:9d:e1:
         a4:6f:2b:77:e6:17:52:86:90:af:03:7e:63:c2:dc:d8:26:eb:
         70:57:b5:33:20:4c:ed:2d:e1:58:fe:4b:05:86:7d:f6:b0:79:
         c7:39:42:26:3e:76:c6:05:fc:cc:a3:6c:9a:5a:f0:d4:79:9e:
         01:7d:18:6b:16:55:aa:ae:9a:f9:0c:68:81:ad:c1:b2:94:1b:
         75:c4:5f:dc:97:48:d9:54:1b:5b:a5:06:f1:39:9c:04:3f:99:
         68:4b:de:49:db:fe:44:b7:66:24:96:a4:e1:9d:a3:58:7b:15:
         a1:47:f5:76:ae:a5:28:cf:43:60:2f:02:3f:7d:89:35:9f:7b:
         75:6c:53:18:53:05:a9:82:bd:de:8b:75:32:e9:21:e2:77:f6:
         af:db:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:57 2026 by rpki-client