Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          XFNz3m2zRxN0DLyniBoisz2GlBaeSEJBcPwWKP8kZa0=
Subject key identifier:   29:57:B3:08:5B:2D:06:34:81:2C:6E:2E:43:B1:5D:A3:D5:50:37:4F
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       068B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          068A
Signing time:             Mon 02 Mar 2026 01:47:29 +0000
Manifest this update:     Mon 02 Mar 2026 01:47:29 +0000
Manifest next update:     Wed 04 Mar 2026 01:47:29 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: vJAnftt8O7vCXXx42Q1YMdoglXoU6TMXcSHsfeD4lCA=)
                          2: C93FE84E002211F184675EEADAE4EC9C.roa (hash: TnE7/LRtwIE2mvtxTz48ANwLuGsO5DbiYWo+sAJoECs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Mar  2 01:47:29 2026 GMT
            Not After : Mar  4 01:47:29 2026 GMT
        Subject: CN=69a4ec31-ac22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:c9:70:26:dc:eb:53:91:8a:7e:cc:14:93:
                    82:ba:70:fd:34:25:97:18:7a:f4:a7:5a:96:01:be:
                    7f:b0:0f:b1:5d:ed:70:74:aa:a8:34:d4:7d:12:3a:
                    ad:8a:4d:fc:78:6a:50:d6:95:73:26:95:11:f9:db:
                    08:ac:1a:7b:d5:e6:c6:3f:99:dd:e1:0c:6d:fc:a6:
                    b4:b9:9a:74:70:2b:50:e6:eb:4a:97:b4:01:29:31:
                    97:ae:be:56:0c:bc:7c:03:10:32:ed:f8:90:04:ed:
                    4a:83:84:3d:37:81:70:fb:5a:ca:87:c4:81:15:96:
                    66:c5:47:55:5e:3f:0e:6c:66:bd:33:95:9c:07:3a:
                    a0:f7:e7:ee:da:db:66:4f:bd:4a:7f:a8:e6:59:7a:
                    c1:aa:be:54:4b:83:f7:d5:72:58:f5:a0:4b:7b:fb:
                    4d:9f:40:2d:5b:de:7e:7f:65:db:cf:1a:7e:90:3b:
                    5d:f9:47:ce:2f:10:89:f5:31:8d:1d:04:49:73:5b:
                    dc:57:3e:75:80:a6:2f:86:6d:59:44:b5:89:15:aa:
                    29:87:c5:50:72:76:34:0a:7f:8f:55:44:57:5c:90:
                    f6:99:ca:18:e7:7b:d2:82:ab:ab:74:a1:c6:04:37:
                    78:f6:09:d2:98:08:c9:74:bc:13:a2:84:1c:c2:fa:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:57:B3:08:5B:2D:06:34:81:2C:6E:2E:43:B1:5D:A3:D5:50:37:4F
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:83:47:c9:53:d9:27:fe:3d:57:99:97:6c:90:e7:dc:86:d5:
         70:c4:d4:3f:52:27:3d:67:1b:53:0c:f0:43:ca:83:42:23:c8:
         b8:a7:2d:9f:08:1d:e5:3f:93:0f:74:69:cd:0e:da:95:33:8f:
         bb:ed:f3:ff:e3:e7:00:34:09:c3:fc:1a:03:29:56:fb:8b:ea:
         b3:f6:39:50:8e:72:0d:77:7d:ab:9e:79:de:28:31:ec:bb:35:
         15:57:8e:6b:b9:53:20:57:e8:e4:b3:6e:4e:20:d4:97:1c:d9:
         21:27:f1:95:dd:54:14:22:c8:49:7c:f4:a8:9a:53:2c:fc:08:
         93:80:b9:8d:a5:51:89:39:5e:ab:a6:46:8f:a1:df:77:f7:48:
         78:0e:44:71:42:41:4b:6f:ef:dd:ea:52:f3:64:ce:4b:da:19:
         b4:8e:55:57:89:d6:e5:a3:8d:07:3c:bb:7c:79:7d:cb:9b:a6:
         fc:72:54:0e:03:2c:e8:6e:9e:a1:be:cb:ed:43:be:9d:65:87:
         40:21:20:36:d1:43:d1:96:9a:d6:2d:f8:84:dd:58:13:86:91:
         55:86:c1:40:cc:c0:58:19:cb:7f:f8:6f:62:de:31:91:c0:cd:
         4d:15:87:dc:32:a0:d0:3b:1e:6c:53:b3:12:52:1f:13:dc:45:
         fc:7d:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:12 2026 by rpki-client