Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          OExSv4BsUs4Y5M1zYTHVNzgvpOUfe4mWA+UMxIluCjY=
Subject key identifier:   39:BC:F1:D9:20:FC:C7:9D:7D:AC:0C:D4:20:5D:5E:71:48:35:8D:53
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       0321
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          031C
Signing time:             Fri 17 Apr 2026 04:03:16 +0000
Manifest this update:     Fri 17 Apr 2026 04:03:15 +0000
Manifest next update:     Sun 19 Apr 2026 04:03:15 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: 6091WsCm8hIVXHc3JZcB7Di0PT9bqg64Y3E7jKqfVmg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Apr 17 04:03:15 2026 GMT
            Not After : Apr 19 04:03:15 2026 GMT
        Subject: CN=69e1b103-2540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:d0:b5:75:1f:6c:b4:da:ba:09:52:89:63:
                    19:75:fa:82:d7:0c:4d:74:fc:e9:68:85:2c:57:46:
                    84:14:c4:32:b5:c6:08:4e:aa:0d:da:52:c7:42:88:
                    40:4c:a0:94:4f:1d:9d:05:7a:ac:93:4b:75:73:65:
                    8c:ea:6b:1b:ba:f4:ae:bf:95:5c:27:12:fc:e1:dc:
                    2d:61:6e:f5:fd:3a:de:34:f1:ce:de:4f:aa:c0:b4:
                    b1:e6:e2:04:04:b4:19:59:5f:76:04:a7:17:5d:b0:
                    9e:07:15:d1:3c:92:ac:34:52:f5:18:0e:26:02:e1:
                    a6:98:cf:47:f5:e1:b6:0f:d0:ac:e6:b5:0c:9f:ba:
                    3e:2f:b2:fe:26:2a:e4:4a:c7:04:e2:10:71:41:84:
                    37:65:24:45:a1:34:f8:fb:aa:c6:ee:7d:18:fc:58:
                    53:bb:9d:5c:e7:fb:47:7a:fd:42:d7:d5:ab:7e:64:
                    64:fb:05:73:71:3e:a2:87:d1:17:77:88:dc:31:06:
                    89:bc:a7:f4:bb:38:00:19:bd:0e:e3:bf:38:bc:7a:
                    58:e1:e0:65:81:78:00:c6:19:d6:c5:f9:47:81:b5:
                    34:26:53:98:11:b8:50:31:37:0f:ea:b5:47:1c:db:
                    a7:31:c1:da:3b:10:73:67:43:a4:a1:57:ae:a6:8c:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BC:F1:D9:20:FC:C7:9D:7D:AC:0C:D4:20:5D:5E:71:48:35:8D:53
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:05:33:45:52:fb:04:5e:03:88:3b:bb:3d:e9:20:cc:cb:ce:
         00:63:41:80:5d:a9:5a:75:c3:44:85:66:bd:c8:14:90:76:66:
         c2:a9:14:bd:26:d3:59:0a:c3:c6:30:a1:80:62:a9:a5:68:ab:
         f8:a9:83:f9:4a:78:c0:af:8a:ed:f7:5e:31:f1:c9:86:7b:0a:
         57:ce:6c:d0:6a:a9:24:bd:ef:c7:54:06:10:d9:c5:15:02:27:
         b8:79:a5:b9:32:e7:59:03:6b:a6:5f:1b:5c:4b:68:f7:14:e1:
         11:77:b3:77:a6:02:2c:09:7e:60:bb:e8:0c:c7:16:dd:81:02:
         8f:68:6b:42:85:fd:88:91:db:c2:2f:89:8e:97:29:e7:7a:d5:
         ba:de:a4:fe:e5:eb:fd:0d:7b:87:c2:c8:38:d0:e4:89:cd:50:
         5a:3f:9a:c5:52:28:b7:7f:ba:f9:3f:13:d3:12:cb:a8:c0:4a:
         9b:9a:41:fb:fc:58:d1:03:89:9f:ae:5d:a5:52:7b:72:12:cb:
         d8:36:5c:04:d3:12:41:58:d5:45:ad:11:af:ec:bc:14:75:a0:
         39:96:dc:bc:0e:e1:65:f0:80:49:34:c3:da:9c:31:92:a9:b6:
         3a:e5:c2:06:b8:0f:da:ad:9c:c7:c8:1b:b3:cd:84:0e:bb:ac:
         03:a5:d1:d9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM0RTRBUjExMC8GA1UEBRMoMkM2NzFGNDI1OTcwNzAyNzIzNzU0MEJGNjIyNjVB
MkQ5N0VCOTVDQjAeFw0yNjA0MTcwNDAzMTVaFw0yNjA0MTkwNDAzMTVaMBgxFjAU
BgNVBAMTDTY5ZTFiMTAzLTI1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsqdC1dR9stNq6CVKJYxl1+oLXDE10/OlohSxXRoQUxDK1xghOqg3aUsdC
iEBMoJRPHZ0FeqyTS3VzZYzqaxu69K6/lVwnEvzh3C1hbvX9Ot408c7eT6rAtLHm
4gQEtBlZX3YEpxddsJ4HFdE8kqw0UvUYDiYC4aaYz0f14bYP0KzmtQyfuj4vsv4m
KuRKxwTiEHFBhDdlJEWhNPj7qsbufRj8WFO7nVzn+0d6/ULX1at+ZGT7BXNxPqKH
0Rd3iNwxBom8p/S7OAAZvQ7jvzi8eljh4GWBeADGGdbF+UeBtTQmU5gRuFAxNw/q
tUcc26cxwdo7EHNnQ6ShV66mjAYJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUObzx
2SD8x519rAzUIF1ecUg1jVMwHwYDVR0jBBgwFoAULGcfQllwcCcjdUC/YiZaLZfr
lcswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNEU0L0NDOEZDMzZDREEzMDExRUU5RTZDOThBQTc3NTQxMkU2L0xHY2ZR
bGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0xHY2ZRbGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTM0RTQvQ0M4RkMzNkNEQTMwMTFFRTlFNkM5OEFBNzc1NDEy
RTYvTEdjZlFsbHdjQ2NqZFVDX1lpWmFMWmZybGNzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYBTNFUvsEXgOIO7s96SDMy84AY0GAXala
dcNEhWa9yBSQdmbCqRS9JtNZCsPGMKGAYqmlaKv4qYP5SnjAr4rt914x8cmGewpX
zmzQaqkkve/HVAYQ2cUVAie4eaW5MudZA2umXxtcS2j3FOERd7N3pgIsCX5gu+gM
xxbdgQKPaGtChf2IkdvCL4mOlynnetW63qT+5ev9DXuHwsg40OSJzVBaP5rFUii3
f7r5PxPTEsuowEqbmkH7/FjRA4mfrl2lUntyEsvYNlwE0xJBWNVFrRGv7LwUdaA5
lty8DuFl8IBJNMPanDGSqbY65cIGuA/arZzHyBuzzYQOu6wDpdHZ
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:40 2026 by rpki-client