Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          UNC/xKYYq7dokZ+0UrjtMmp857nDUbYSQruMGfLjkJ4=
Subject key identifier:   DF:56:E5:43:39:AB:F1:17:71:4A:D1:66:8B:A0:78:70:8B:E5:EF:EA
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       0499
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          0498
Signing time:             Mon 02 Mar 2026 02:17:17 +0000
Manifest this update:     Mon 02 Mar 2026 02:17:16 +0000
Manifest next update:     Wed 04 Mar 2026 02:17:16 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: KBMY0ygmyLTlfiChwfnsX+BLFM55R74y/OA+URAqiFM=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Mar  2 02:17:16 2026 GMT
            Not After : Mar  4 02:17:16 2026 GMT
        Subject: CN=69a4f32d-2dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:51:34:2b:a1:f3:55:81:78:65:68:c4:35:
                    23:ae:7d:5d:dc:08:04:1f:dd:01:e6:0e:86:67:44:
                    58:ae:22:5d:db:25:77:6a:c6:36:ba:e2:7f:f2:1a:
                    76:8e:21:b9:a8:f8:5c:14:fa:d7:44:5a:b0:30:17:
                    2d:d6:f8:0d:b0:2b:65:d8:5e:24:17:18:60:40:20:
                    98:e3:dd:ad:45:27:a2:bf:94:33:20:0e:33:9d:8f:
                    e3:9e:cb:9d:d8:b0:83:3e:b8:63:3d:87:81:f1:d2:
                    d0:17:72:a4:c3:0d:9a:b2:6c:30:2f:62:0b:48:49:
                    2c:5b:f8:ff:2f:db:d3:3a:32:db:9c:84:c5:9a:76:
                    39:29:ff:7e:60:7a:f5:9a:5f:eb:b2:9f:14:ba:da:
                    30:97:3c:d1:6f:d1:a5:43:85:e7:da:96:ce:89:69:
                    ee:51:25:2e:78:17:f2:7c:8a:bb:d5:47:47:1a:d1:
                    c4:78:5c:ef:63:16:c3:41:16:b9:52:9f:41:4e:d5:
                    fb:bb:01:56:1e:b0:f6:b2:1e:8b:7b:03:94:6c:fe:
                    6f:47:6c:d0:80:a3:57:90:6a:1b:8a:bb:cb:60:42:
                    57:ae:d3:94:46:c7:c0:dc:43:d3:90:32:20:99:e0:
                    e4:b3:aa:96:c5:da:f6:e8:df:b8:53:8b:5a:23:0f:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:56:E5:43:39:AB:F1:17:71:4A:D1:66:8B:A0:78:70:8B:E5:EF:EA
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9f:0e:5a:21:3e:aa:8e:fc:89:42:8b:be:39:ad:3b:49:b7:
         f2:0f:61:0b:56:24:a0:40:22:21:68:bc:f8:d6:9a:18:0e:28:
         77:fc:53:f2:10:27:4f:61:e2:93:04:e3:ba:4f:39:26:77:75:
         b7:a3:47:2e:b3:fb:43:22:e5:18:d2:28:c8:0d:64:87:93:b5:
         fc:6d:f4:23:66:59:11:5a:3d:49:d0:76:7b:30:e4:4f:52:24:
         1e:ee:06:75:14:3a:6b:4c:62:b1:3d:f5:4a:78:f5:ae:cf:69:
         1e:f1:e9:b0:7f:f6:75:5d:eb:db:3d:8e:01:00:1d:16:90:23:
         cc:96:49:ce:ba:29:22:04:77:de:de:f9:69:9e:37:d9:81:73:
         95:0c:87:e4:39:df:0d:b3:22:d8:7d:31:7c:b0:14:7c:47:9e:
         c8:12:3e:28:a6:8b:dd:82:a5:98:5b:a9:5c:c3:d8:1a:80:47:
         84:96:43:ba:23:b2:ba:93:e8:06:c1:db:db:bf:26:69:64:ae:
         25:84:6e:a7:97:f8:bf:94:70:dd:fb:57:52:c9:49:71:4f:92:
         97:88:81:36:93:f9:bb:78:c1:20:a4:0d:2d:00:da:cd:77:97:
         a9:cf:d5:74:66:83:57:ff:5e:53:61:a5:25:ab:88:44:61:2f:
         dd:18:24:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:01 2026 by rpki-client