Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          GueruUoWGs9miyVCn9H/Kh0zI90/++ap71JTJ859+QQ=
Subject key identifier:   3D:16:4B:3C:58:3C:37:DB:66:CE:D6:08:85:6D:8E:8F:62:1D:27:BD
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       01BC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          01B3
Signing time:             Mon 02 Mar 2026 03:14:44 +0000
Manifest this update:     Mon 02 Mar 2026 03:14:43 +0000
Manifest next update:     Wed 04 Mar 2026 03:14:43 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: hsefnFYpyxsRGJOZlm4351rM2wVHy5AfQC18xfmC7Ps=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Mar  2 03:14:43 2026 GMT
            Not After : Mar  4 03:14:43 2026 GMT
        Subject: CN=69a500a4-8dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:34:de:be:08:c3:6a:7c:b5:21:73:9f:71:95:
                    99:9b:ae:be:69:4b:c0:2e:c9:9a:79:b6:7a:8e:fe:
                    22:cc:40:bc:f4:3a:cb:f2:6b:b9:4c:e1:de:2a:c3:
                    2a:aa:9a:7b:e8:b2:12:e9:f5:cd:9b:6d:dc:aa:6b:
                    fe:6d:95:f4:2d:d0:04:00:74:86:11:68:c4:53:5d:
                    1b:b7:17:1b:e2:c7:e4:f8:7c:6c:df:d2:66:4a:73:
                    7d:52:27:d9:0e:88:52:4f:31:91:29:10:25:59:10:
                    ae:e0:66:48:c5:8a:81:b0:73:ad:f7:ff:ec:22:3f:
                    20:39:03:3d:b7:35:a4:df:e2:89:0f:4c:7e:f8:96:
                    37:17:f2:1b:38:9a:57:7d:1a:26:d5:c7:8f:e0:0a:
                    a0:60:52:bb:70:d9:01:8c:99:d4:9c:92:1e:f1:4d:
                    86:4c:03:9d:08:a2:96:b8:ad:8f:90:46:43:b3:cd:
                    3e:ee:c7:d9:95:1c:54:d6:48:7b:bc:55:3d:48:03:
                    4d:fa:df:c6:d2:59:ce:95:44:de:79:87:5b:ce:93:
                    c4:5c:87:10:14:4b:55:40:ef:6b:cb:75:0c:dd:0c:
                    64:c3:ec:82:18:2c:ef:f6:54:33:65:93:16:6f:5a:
                    66:a8:5e:c2:15:5d:88:a4:92:ed:1b:b6:0b:f4:e6:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:16:4B:3C:58:3C:37:DB:66:CE:D6:08:85:6D:8E:8F:62:1D:27:BD
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:96:d0:fe:de:2f:b6:fb:f3:d9:22:f4:73:6e:f2:78:48:57:
         81:6c:9a:32:9b:7e:16:4a:1d:56:6b:f7:55:5a:ab:7e:5e:12:
         1a:75:4c:a6:ce:f9:a1:98:e9:de:ca:49:7b:22:af:ba:5a:02:
         5a:2b:94:e5:d1:81:10:0b:6e:2b:4f:8e:7b:ad:0b:36:75:53:
         e8:cb:06:ec:66:27:96:bb:30:da:71:73:c9:30:40:ba:5d:7c:
         55:cd:3a:ac:1c:32:b4:cd:54:72:b5:31:71:2e:59:80:e7:59:
         9c:52:c2:69:14:6b:44:4f:59:ab:7b:6c:de:b4:6b:18:0e:78:
         85:68:b2:1a:8b:09:d8:18:95:1e:48:51:89:ea:29:dc:35:7c:
         08:f6:bd:ad:e5:c6:83:90:68:74:6f:7e:c9:ac:3d:17:42:2e:
         76:51:4c:07:f4:69:f3:94:d4:29:b3:a9:7c:84:51:37:f3:ad:
         07:98:ba:15:6a:93:0b:d4:bb:b0:2e:8e:1d:e3:bd:e6:34:9d:
         e8:30:3b:f7:72:94:15:57:da:6f:c8:53:24:62:05:f0:ce:79:
         6c:90:4c:a8:68:18:5c:d8:23:52:39:d6:2e:43:d8:41:68:6a:
         bf:8a:c6:c1:f5:20:a5:c7:fc:1a:0f:e6:a6:04:58:ee:1c:a9:
         c3:44:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:11 2026 by rpki-client