Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier:          QAdLNGgZrCassKcZ+nSUyNljuy3cUpoFom8NxrVsEuo=
Subject key identifier:   40:B3:02:A3:48:9C:A6:26:6D:CE:42:0E:79:B6:40:B4:14:EC:54:1F
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer:       /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial:       03FB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number:          03FA
Signing time:             Sun 01 Mar 2026 02:28:55 +0000
Manifest this update:     Sun 01 Mar 2026 02:28:54 +0000
Manifest next update:     Tue 03 Mar 2026 02:28:54 +0000
Files and hashes:         1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: e5WzVWR+0A+ecfZ3oZdw0qSNWDAdm/2M36Djst3459Q=)
                          2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                          rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Validity
            Not Before: Mar  1 02:28:54 2026 GMT
            Not After : Mar  3 02:28:54 2026 GMT
        Subject: CN=69a3a466-c7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:d3:60:86:1f:b5:bb:63:9c:c0:0a:ec:2f:
                    b1:4e:a9:c1:b0:54:e2:15:3b:49:2d:e0:a3:81:ad:
                    84:05:40:e9:6f:a5:13:d2:c4:f8:e0:91:61:30:10:
                    2c:fc:49:3b:13:43:7e:73:f1:b4:be:e0:6f:04:c7:
                    42:1b:cc:f4:10:4e:9c:69:61:b1:1e:80:96:75:a5:
                    b3:e5:42:45:49:32:8f:61:58:1e:5f:c5:fa:1a:ed:
                    49:16:87:21:fc:79:18:79:99:26:d6:db:ed:9f:b2:
                    6d:91:5d:00:b1:fd:b5:f3:8f:65:1e:40:e1:9e:3b:
                    45:db:73:ce:03:08:1b:89:b5:d7:16:ff:9b:5c:e6:
                    91:71:43:a5:48:a1:f5:2a:e6:dc:c3:c9:e6:9c:f4:
                    56:87:1b:38:07:f7:60:f5:1a:36:c5:70:31:30:57:
                    43:be:f7:29:05:e9:3b:13:d0:16:f6:c8:c9:dc:e5:
                    c3:b8:ba:32:cb:dc:ec:44:08:6d:55:b1:f9:b1:ea:
                    c1:cc:e3:a5:19:2e:f1:ac:4e:1a:92:a9:9c:1f:3e:
                    d7:28:95:44:5b:55:60:00:89:78:45:1c:b1:98:9c:
                    42:90:b7:df:f6:2e:1c:3e:f9:27:a9:30:c4:43:ea:
                    d4:72:df:47:e3:d8:60:e0:08:13:fc:c1:14:a1:e5:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B3:02:A3:48:9C:A6:26:6D:CE:42:0E:79:B6:40:B4:14:EC:54:1F
            X509v3 Authority Key Identifier:
                keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9a:2c:b0:e2:c2:aa:1f:6b:18:0f:a0:bb:44:bb:e1:51:a0:
         b7:06:89:f2:db:f1:69:9f:04:21:16:6b:2e:19:c3:4a:25:14:
         bf:e0:60:4c:f4:e1:1d:8d:12:21:d3:ab:17:22:c1:68:9e:53:
         da:2b:ac:73:35:b2:f1:ac:0a:c9:26:15:90:24:d1:36:02:d1:
         de:0b:5c:e4:db:ff:8b:84:e5:ea:8f:7c:1d:13:d4:73:29:9c:
         b3:0d:85:8a:4f:f8:e0:67:fa:0c:d8:e9:69:f8:0f:8e:7d:30:
         c7:9b:de:5f:2d:a3:37:61:d4:07:f1:46:20:ea:e9:97:0e:4e:
         60:7d:a7:6e:58:5d:fe:b3:93:52:7d:14:3a:69:a2:ff:a8:db:
         5c:1f:a1:bc:ca:75:b0:fb:8e:b4:ff:f8:9c:26:d5:34:d1:14:
         95:d5:14:13:7e:23:f2:33:7e:cf:eb:3a:c7:7b:65:1c:be:38:
         51:bc:8c:c8:64:35:ab:b7:0f:15:88:c2:95:c1:b7:22:37:ea:
         38:4d:f5:6a:f0:ee:5f:ff:7d:61:7e:1c:b1:1b:e6:a3:df:7f:
         b4:02:94:5d:83:e8:5f:b1:3d:c7:ae:32:89:9a:fe:25:d4:73:
         2e:73:37:8f:ce:6d:3d:ac:7b:30:6f:d5:c4:28:b7:5c:a2:1d:
         9f:d7:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:17 2026 by rpki-client