Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          QKeM8djTWHm5gUuJxawYgtBK8cqd1CLU9hDER9som/M=
Subject key identifier:   13:77:BF:29:8B:89:46:92:18:22:92:12:5E:E5:8E:46:9A:20:D0:30
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       01EA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          01E1
Signing time:             Fri 17 Apr 2026 04:43:06 +0000
Manifest this update:     Fri 17 Apr 2026 04:43:05 +0000
Manifest next update:     Sun 19 Apr 2026 04:43:05 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: PM2xLfbWo8VYUwQzHvrU4j5DvSKMNow4IrVAKey4wlY=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Apr 17 04:43:05 2026 GMT
            Not After : Apr 19 04:43:05 2026 GMT
        Subject: CN=69e1ba5a-d904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:9e:8e:95:57:88:02:c0:c0:48:38:5d:b0:
                    c7:2b:c5:fb:64:8d:36:33:47:56:4a:fb:a6:a8:3a:
                    1b:9c:e5:51:08:db:a7:e3:b3:60:bd:6b:df:91:a9:
                    de:ac:e9:0b:8f:79:06:e9:7f:60:67:54:7a:3c:cf:
                    f7:19:91:08:1c:37:7d:17:4c:1d:ff:b9:45:c4:d6:
                    21:c5:4a:e5:39:a4:f3:20:76:fd:e9:56:36:6f:39:
                    20:3e:f5:64:fd:ca:d9:fe:d8:9c:f7:9b:14:04:33:
                    8f:7f:ea:be:38:7a:c1:ca:70:d1:0b:3d:97:ae:e4:
                    fc:f2:35:25:5c:b8:47:8e:8c:df:75:38:f6:a0:26:
                    98:f0:52:6e:c9:f1:1b:c8:15:79:05:83:6c:eb:9b:
                    b5:0f:5e:8b:fd:ff:e3:4c:e5:22:9d:67:cf:4b:89:
                    80:d1:f7:32:cd:ef:c6:ce:3f:63:ef:72:3d:7f:47:
                    39:93:36:79:b9:c2:1d:f4:1b:a6:d5:24:1e:dc:35:
                    6b:11:1e:a9:be:56:e2:68:62:14:12:74:70:78:e2:
                    41:57:a6:4f:53:ec:e6:a4:cd:f2:84:52:ac:21:21:
                    a1:2b:8c:fd:ee:55:34:b0:c6:02:33:07:15:ea:e8:
                    9d:31:63:e5:8d:31:91:d3:d2:a7:01:4b:da:4e:e4:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:BF:29:8B:89:46:92:18:22:92:12:5E:E5:8E:46:9A:20:D0:30
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:cd:93:66:7a:63:50:c5:cb:92:45:8e:46:1b:94:df:90:
         13:c7:5a:10:8c:08:91:70:b1:17:89:66:c1:f9:88:d4:50:7f:
         76:31:e9:ec:ee:20:77:29:d5:a6:83:49:f9:38:c4:a6:9f:a0:
         ac:3a:94:85:34:21:cb:be:4c:60:e4:89:0b:1d:dc:5d:06:0c:
         2f:b1:ed:ab:d1:11:60:d9:49:8d:a7:39:05:dc:2c:bb:b8:e1:
         90:42:06:9a:86:a9:86:96:2c:3a:39:c4:19:c1:c7:14:16:03:
         b3:dc:2e:8a:66:2e:36:33:92:0d:82:0e:cf:67:5e:fd:06:f8:
         49:7f:ee:27:b4:a3:45:c8:b9:b2:fa:9a:05:77:2b:a8:06:9f:
         5b:f6:e2:01:4b:2f:d9:4d:11:6b:70:a6:c4:5b:69:e9:76:7b:
         31:3d:74:70:57:b1:d2:28:f6:58:43:47:75:19:a6:30:e3:4e:
         22:84:4a:68:a8:d4:48:b3:ed:c5:45:5b:d2:1a:c2:91:ca:63:
         d3:ef:7b:74:dd:9b:53:42:99:f6:e6:71:ec:65:e5:01:80:ab:
         59:42:fc:78:01:b5:ab:00:4d:17:f6:e1:23:39:5d:bc:ec:13:
         07:56:8f:91:58:b1:91:ba:7d:4d:1e:af:3d:37:b6:66:a4:ea:
         47:52:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:15 2026 by rpki-client