Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          MXVM9P7+1rQ4isBGv0tigDYL4Azjavnp6qi7kBX3D80=
Subject key identifier:   E8:E9:67:EC:3F:73:38:6C:8B:95:71:E9:94:19:49:4D:79:55:82:46
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       0A0D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          0A0C
Signing time:             Fri 17 Apr 2026 01:26:01 +0000
Manifest this update:     Fri 17 Apr 2026 01:26:00 +0000
Manifest next update:     Sun 19 Apr 2026 01:26:00 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: 5nAhlozCcNQlIdJX1sdSp+TOPJKHDVig2nyiYxstDhU=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2573 (0xa0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Apr 17 01:26:00 2026 GMT
            Not After : Apr 19 01:26:00 2026 GMT
        Subject: CN=69e18c29-cb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:94:2e:ba:25:46:01:3a:83:a4:83:40:bc:38:
                    20:2d:3a:cb:94:16:93:91:05:7d:1c:1b:3d:23:c3:
                    fb:2d:c4:9f:06:9e:9b:33:86:b8:97:07:ca:90:9b:
                    3d:fd:f3:d6:b5:f2:fb:da:92:6e:3b:22:f9:1c:e7:
                    42:85:32:18:f0:ac:59:aa:af:cb:e1:cd:a8:de:87:
                    1c:a3:18:1d:af:c4:50:73:89:25:d6:09:f9:72:75:
                    d5:8e:58:aa:67:f0:b0:c3:72:d8:ca:3f:22:91:a9:
                    37:24:77:f0:ed:de:9f:55:da:95:b8:ee:1f:9c:b5:
                    79:0f:32:88:ef:a3:8e:d0:9e:f4:eb:bd:92:69:a8:
                    3c:9b:74:18:ae:2f:6b:fc:b1:bf:e2:2e:4f:d1:e5:
                    f1:7b:5b:34:5e:4b:87:65:66:c7:71:d6:dc:38:1f:
                    49:d9:d1:b8:87:3c:d5:07:88:7a:28:c9:87:50:b8:
                    9f:73:ef:1b:0f:2e:75:9d:e7:b5:03:db:f4:03:ee:
                    45:dc:52:c5:3b:07:f2:81:3b:44:c7:af:7c:e4:87:
                    7b:32:9f:3d:29:d8:74:7b:69:03:af:de:8a:05:68:
                    fb:38:14:85:79:63:da:aa:d0:3a:59:8f:12:b1:9c:
                    96:69:cf:30:6e:a3:c5:4a:4d:2a:62:1c:23:e7:ed:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E9:67:EC:3F:73:38:6C:8B:95:71:E9:94:19:49:4D:79:55:82:46
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c3:c6:da:b6:95:6c:7b:ea:66:b5:07:da:20:e2:ae:8c:21:
         c4:32:29:8b:da:da:34:1c:98:6f:d3:59:c8:10:57:89:c4:85:
         a8:a5:c3:94:2f:d5:55:d1:ad:cb:01:7c:a5:88:f4:f5:01:4a:
         d8:6a:f7:04:d4:48:08:16:1b:27:fb:06:84:a2:f5:54:14:3c:
         7f:8d:d1:67:b5:88:cd:51:2f:d4:fa:0e:67:a0:02:a0:af:44:
         ac:f2:83:6c:14:45:34:77:c7:6d:c9:ac:23:44:63:07:18:ec:
         a4:e5:75:22:ba:6b:55:f8:6c:96:c1:02:a9:d1:df:53:f3:e9:
         43:31:39:a0:d7:96:86:d1:7f:95:39:ef:ff:b8:fa:d5:91:1c:
         66:31:65:bc:93:9a:39:11:c9:d7:05:bf:d9:7f:80:9f:bc:e7:
         51:c7:2b:0d:10:99:b4:64:c3:ca:ff:5c:4e:47:75:cc:2c:06:
         91:2c:a0:34:a7:5e:24:7c:06:88:13:18:29:68:3f:81:79:a1:
         30:a2:52:4a:bf:7f:11:de:ac:c0:79:cf:74:da:86:df:f8:08:
         8b:86:96:5e:2e:5d:6a:df:af:b6:65:a6:2b:47:2d:e9:c8:a5:
         c4:1e:fb:17:89:6c:c4:a8:e6:e9:b4:2b:30:4a:65:fe:ae:e7:
         c5:44:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:41:55 2026 by rpki-client