Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          sw+SuFePrB2z4xbtyeAIVXcvDm4UTOthRwtg9ZZ9lYM=
Subject key identifier:   03:4F:1F:EB:4F:DC:08:0E:65:5E:ED:A4:98:04:A5:6C:7F:09:8A:93
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       0251
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          0248
Signing time:             Tue 28 Jul 2026 04:45:07 +0000
Manifest this update:     Tue 28 Jul 2026 04:45:06 +0000
Manifest next update:     Thu 30 Jul 2026 04:45:06 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: 5L7QeW6KpDjb5jKUJV+NWpDgpjoa7y7q4Son58QkBAI=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Jul 28 04:45:06 2026 GMT
            Not After : Jul 30 04:45:06 2026 GMT
        Subject: CN=6a6833d3-0a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:de:66:b5:41:30:cd:bb:28:66:39:06:ed:
                    c9:2e:c2:ef:99:de:d4:73:8f:04:ab:df:e1:7d:b0:
                    d6:b1:be:2b:51:b0:e8:a0:cd:52:e0:89:ad:d4:81:
                    3c:00:eb:af:93:27:b5:5e:c6:24:1d:ef:55:34:3d:
                    95:8d:d8:72:01:32:3e:85:2b:2a:67:15:3c:e0:6f:
                    aa:bb:3f:51:73:3f:c1:af:9b:d8:e7:2d:3c:cb:6b:
                    ad:61:03:e7:e6:8b:34:bc:16:57:7a:27:44:dd:01:
                    a6:c7:ff:5a:ac:95:a9:11:29:eb:b8:ca:af:b5:80:
                    1e:78:f8:e3:7b:07:bc:a9:9f:20:3c:6d:73:86:01:
                    3f:98:92:da:b5:d1:5c:e2:82:f8:e0:24:1a:92:41:
                    75:ef:bd:49:1e:e4:ba:84:ea:11:a7:43:4e:10:5a:
                    cf:8c:a1:b0:69:92:44:c4:6f:d9:e1:ac:55:d1:bf:
                    1f:40:8d:45:77:e7:cc:8c:74:49:b5:59:11:97:b0:
                    9a:eb:20:bf:74:42:bd:60:ef:43:b6:9b:6c:13:e7:
                    3e:37:01:c5:a0:f6:41:6d:0a:e5:d0:61:b5:48:fe:
                    37:70:95:34:5f:6b:97:9a:e3:52:f4:75:da:3e:43:
                    b5:84:5d:60:59:de:e7:1e:1d:ee:ff:af:c8:7c:2b:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:1F:EB:4F:DC:08:0E:65:5E:ED:A4:98:04:A5:6C:7F:09:8A:93
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1b:14:ce:d3:6f:88:cc:e3:69:5e:8f:44:7d:b3:c7:fd:5f:
         75:27:ea:db:37:89:25:33:2f:18:ec:3b:69:47:09:69:57:b5:
         12:0b:40:15:2c:dc:64:6c:1e:34:8d:a3:72:6f:d4:5f:48:97:
         81:94:09:cb:f6:19:42:b3:c6:6e:0f:6e:d3:29:2b:36:ea:3e:
         42:b4:a1:13:1b:7a:4d:87:ff:97:e2:3d:84:ee:4e:50:be:0d:
         37:c4:97:40:47:da:f7:93:b3:10:a9:c0:ac:d8:61:d4:87:15:
         e9:95:e2:8d:84:9d:ce:1d:56:c4:30:65:80:ec:c3:35:c0:35:
         ec:58:3a:5f:b1:6f:0b:04:b0:e2:76:17:55:51:2b:17:90:75:
         6e:41:8c:97:b3:8b:82:dd:3d:69:05:a3:c5:02:54:27:b0:00:
         1a:90:85:d7:0e:1f:63:6c:2e:e6:4c:1b:3a:27:a6:7a:57:17:
         05:58:a5:54:62:1f:3a:6f:15:7e:65:ad:81:3b:dc:c7:b4:c3:
         9a:9f:36:5a:92:b0:4e:52:2e:3a:44:bd:bd:23:11:2b:d7:fa:
         f3:92:6d:ea:e5:cb:26:e4:c0:7d:02:bf:c9:6d:53:df:88:4f:
         ad:0a:71:ab:48:af:a7:16:56:e9:15:3f:4a:a2:71:69:ff:57:
         7d:8e:53:56
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0ZCQjBBUjExMC8GA1UEBRMoQzVDMTQyMEY1MDcxNkE2QjE0NkY1REZBOEU4MkJG
RDFFNEREOTkxMDAeFw0yNjA3MjgwNDQ1MDZaFw0yNjA3MzAwNDQ1MDZaMBgxFjAU
BgNVBAMTDTZhNjgzM2QzLTBhNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCVt5mtUEwzbsoZjkG7ckuwu+Z3tRzjwSr3+F9sNaxvitRsOigzVLgia3U
gTwA66+TJ7VexiQd71U0PZWN2HIBMj6FKypnFTzgb6q7P1FzP8Gvm9jnLTzLa61h
A+fmizS8Fld6J0TdAabH/1qslakRKeu4yq+1gB54+ON7B7ypnyA8bXOGAT+Yktq1
0VzigvjgJBqSQXXvvUke5LqE6hGnQ04QWs+MobBpkkTEb9nhrFXRvx9AjUV358yM
dEm1WRGXsJrrIL90Qr1g70O2m2wT5z43AcWg9kFtCuXQYbVI/jdwlTRfa5ea41L0
ddo+Q7WEXWBZ3uceHe7/r8h8K10HAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUA08f
60/cCA5lXu2kmASlbH8JipMwHwYDVR0jBBgwFoAUxcFCD1BxamsUb136joK/0eTd
mRAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNGQkIwLzM1MDNEOUY4RDQ1MjExRUZCMjM4NDhCMTc2MkU5NTFBL3hjRkNE
MUJ4YW1zVWIxMzZqb0tfMGVUZG1SQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hjRkNEMUJ4YW1zVWIxMzZqb0tfMGVUZG1SQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Q0ZCQjAvMzUwM0Q5RjhENDUyMTFFRkIyMzg0OEIxNzYyRTk1
MUEveGNGQ0QxQnhhbXNVYjEzNmpvS18wZVRkbVJBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6GxTO02+IzONpXo9EfbPH/V91J+rbN4kl
My8Y7DtpRwlpV7USC0AVLNxkbB40jaNyb9RfSJeBlAnL9hlCs8ZuD27TKSs26j5C
tKETG3pNh/+X4j2E7k5Qvg03xJdAR9r3k7MQqcCs2GHUhxXpleKNhJ3OHVbEMGWA
7MM1wDXsWDpfsW8LBLDidhdVUSsXkHVuQYyXs4uC3T1pBaPFAlQnsAAakIXXDh9j
bC7mTBs6J6Z6VxcFWKVUYh86bxV+Za2BO9zHtMOanzZakrBOUi46RL29IxEr1/rz
km3q5csm5MB9Ar/JbVPfiE+tCnGrSK+nFlbpFT9KonFp/1d9jlNW
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:23 2026 by rpki-client