Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          KSf78IAliSDs95g2DNHNXxQbzyUA6N6diyMgjc0kh/E=
Subject key identifier:   02:AA:F6:14:16:69:16:AD:DD:40:C2:FA:95:41:04:32:DB:F3:DC:0C
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       0296
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          0295
Signing time:             Sun 01 Mar 2026 02:55:32 +0000
Manifest this update:     Sun 01 Mar 2026 02:55:32 +0000
Manifest next update:     Tue 03 Mar 2026 02:55:32 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: kYl7E/nfbie7oJIW8Z2wSgQJ4iICPJDUtA5VXzZgrJw=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 02:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Mar  1 02:55:32 2026 GMT
            Not After : Mar  3 02:55:32 2026 GMT
        Subject: CN=69a3aaa4-0c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:aa:ec:19:ce:ac:59:66:64:03:ac:3d:c2:
                    35:aa:79:49:48:35:61:0f:59:9d:4a:72:2a:88:97:
                    80:ab:21:17:11:90:15:9f:18:6b:5f:34:95:6d:69:
                    9e:4e:10:3a:12:c2:ca:d3:21:cd:74:64:f6:9d:16:
                    55:78:27:06:42:08:c9:33:7e:1c:a7:cc:0a:f3:39:
                    0f:b4:37:85:e8:f3:fd:c2:21:57:d4:8b:50:24:42:
                    89:ab:56:62:75:3c:d2:17:b0:7b:88:67:60:be:e7:
                    a5:3b:c3:6e:da:df:62:16:ac:98:72:c7:0b:62:27:
                    e9:4e:9e:9d:1f:47:77:4a:a0:75:a7:14:b4:ad:5b:
                    19:59:52:a8:fa:02:5f:5b:73:9c:39:4e:89:01:80:
                    94:4e:69:5c:fd:a3:e8:df:c1:04:13:7a:c2:13:7c:
                    d5:07:b7:1d:30:d3:2d:0a:57:7d:57:4f:1d:69:40:
                    2f:0b:49:49:a4:3d:47:16:6e:fe:d8:bf:72:6f:5a:
                    de:13:b3:05:f8:7e:67:06:7d:8d:73:c4:28:77:be:
                    57:f4:11:de:15:f1:11:bc:c1:70:b8:2a:8e:60:1a:
                    36:39:ec:9a:c8:fa:a5:78:91:53:05:5e:de:cf:b5:
                    3d:7d:75:38:e9:3e:d3:6f:09:84:8d:03:49:4d:ba:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AA:F6:14:16:69:16:AD:DD:40:C2:FA:95:41:04:32:DB:F3:DC:0C
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f7:a2:72:09:cd:81:2c:ad:bd:3c:0c:2c:52:51:d0:17:19:
         f2:b1:8c:39:e1:02:cd:49:66:ab:df:4d:74:dd:86:fb:96:be:
         f3:bb:74:b9:b8:1a:02:13:3b:31:27:59:c7:54:d2:cf:8f:1d:
         55:1e:2e:bf:ca:eb:e2:17:f7:99:8e:01:ca:40:02:40:2c:b7:
         4a:74:f3:0a:09:01:f6:3b:20:78:a2:59:98:d8:0f:16:e2:68:
         8e:8a:6f:9c:d9:2e:51:6d:ab:55:26:d4:af:22:0c:2a:a5:ab:
         16:56:2d:63:a7:7e:b9:41:b9:71:fc:65:3d:31:cd:7e:66:36:
         29:8c:0d:c0:12:89:e8:51:92:82:3d:d4:65:bc:51:a4:09:3e:
         68:87:fc:11:f1:d5:ff:50:a5:7d:50:d0:6f:72:da:66:fa:ff:
         dd:91:7e:c1:6a:ed:07:d1:bc:7f:3f:c4:2b:a0:ee:5d:fa:af:
         e5:3b:cf:b0:80:34:7d:ce:fe:e8:1f:6f:17:82:eb:70:20:1e:
         4f:39:da:4f:c3:28:8d:7c:bf:7d:aa:c5:95:04:4c:44:e1:9a:
         83:8e:4f:a7:a0:e5:44:a7:fb:bb:6a:32:7d:7b:f1:28:50:ff:
         ee:49:e1:36:82:42:8f:e5:21:2f:99:bc:b3:7b:93:e4:f8:17:
         74:73:f0:73
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICApYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzJCRjJBUjExMC8GA1UEBRMoMjIzNkZGQUI0Rjc4QTA3QTE5QjgyRThGREU2REMy
REIwNjRBREJCRjAeFw0yNjAzMDEwMjU1MzJaFw0yNjAzMDMwMjU1MzJaMBgxFjAU
BgNVBAMTDTY5YTNhYWE0LTBjMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD8arsGc6sWWZkA6w9wjWqeUlINWEPWZ1KciqIl4CrIRcRkBWfGGtfNJVt
aZ5OEDoSwsrTIc10ZPadFlV4JwZCCMkzfhynzArzOQ+0N4Xo8/3CIVfUi1AkQomr
VmJ1PNIXsHuIZ2C+56U7w27a32IWrJhyxwtiJ+lOnp0fR3dKoHWnFLStWxlZUqj6
Al9bc5w5TokBgJROaVz9o+jfwQQTesITfNUHtx0w0y0KV31XTx1pQC8LSUmkPUcW
bv7Yv3JvWt4TswX4fmcGfY1zxCh3vlf0Ed4V8RG8wXC4Ko5gGjY57JrI+qV4kVMF
Xt7PtT19dTjpPtNvCYSNA0lNuuNNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAqr2
FBZpFq3dQML6lUEEMtvz3AwwHwYDVR0jBBgwFoAUIjb/q094oHoZuC6P3m3C2wZK
278wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyQkYyL0YxN0E0OThBMTlFQzExRUY5QzAyODkyQzAxNzAwMUIxL0lqYl9x
MDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0lqYl9xMDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzJCRjIvRjE3QTQ5OEExOUVDMTFFRjlDMDI4OTJDMDE3MDAx
QjEvSWpiX3EwOTRvSG9adUM2UDNtM0Myd1pLMjc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCT96JyCc2BLK29PAwsUlHQFxnysYw54QLN
SWar30103Yb7lr7zu3S5uBoCEzsxJ1nHVNLPjx1VHi6/yuviF/eZjgHKQAJALLdK
dPMKCQH2OyB4olmY2A8W4miOim+c2S5RbatVJtSvIgwqpasWVi1jp365Qblx/GU9
Mc1+ZjYpjA3AEonoUZKCPdRlvFGkCT5oh/wR8dX/UKV9UNBvctpm+v/dkX7Bau0H
0bx/P8QroO5d+q/lO8+wgDR9zv7oH28XgutwIB5POdpPwyiNfL99qsWVBExE4ZqD
jk+noOVEp/u7ajJ9e/EoUP/uSeE2gkKP5SEvmbyze5Pk+Bd0c/Bz
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:59 2026 by rpki-client