Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          62GnTLFzVxxOOuBC2egLQZvAnFmCwhracc0VepVKxXE=
Subject key identifier:   3D:88:E0:77:78:D5:54:08:5C:58:5D:6C:F3:4B:B7:88:7E:F4:32:67
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       013A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          0138
Signing time:             Fri 17 Apr 2026 04:54:45 +0000
Manifest this update:     Fri 17 Apr 2026 04:54:44 +0000
Manifest next update:     Sun 19 Apr 2026 04:54:44 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: WyfXzlhwng7ov4DsU3ibOnKLvhZ9u79xUV9h+ZgO+OY=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Apr 17 04:54:44 2026 GMT
            Not After : Apr 19 04:54:44 2026 GMT
        Subject: CN=69e1bd15-839b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:3d:d5:39:91:48:e8:91:29:8d:38:77:f4:
                    3f:ea:57:a8:2b:38:ba:9d:27:33:e3:f3:25:8b:9e:
                    31:8b:32:a0:02:d5:47:c3:7a:a5:03:32:03:1c:0e:
                    cd:87:4f:c8:4e:31:bf:f6:d8:b4:ca:3c:88:40:ad:
                    90:13:aa:f6:75:18:6d:5a:52:61:c1:8c:d4:0f:80:
                    0f:6c:f9:63:28:36:4f:1f:66:77:18:ed:80:df:b9:
                    17:5a:14:07:87:0c:e6:b2:a9:ba:d9:4e:31:42:55:
                    21:88:fa:05:f2:99:05:f2:94:59:18:e7:67:f3:57:
                    b6:7d:ce:86:41:42:d1:b4:57:d1:43:11:67:1a:46:
                    3d:94:78:f5:b9:8e:8c:f3:82:f2:59:0d:c6:96:dc:
                    da:73:91:d7:78:8c:05:fd:4b:1e:43:50:ca:e1:69:
                    48:b5:aa:9f:02:f5:ed:ee:33:3e:0b:64:75:66:3b:
                    0d:78:19:44:90:2f:6b:c1:25:50:2a:0a:59:0c:3a:
                    9b:dd:83:c1:d9:cb:d4:f5:12:cc:45:5f:58:da:14:
                    be:5e:52:0f:35:c0:df:6b:27:9f:de:a0:d6:b1:b1:
                    42:f4:99:35:ca:09:a0:b1:ae:5d:06:1c:1a:43:ad:
                    3b:2e:43:d6:47:7f:c3:e6:45:ef:5e:0d:e0:ae:26:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:E0:77:78:D5:54:08:5C:58:5D:6C:F3:4B:B7:88:7E:F4:32:67
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:1f:cd:72:8d:13:05:02:25:f2:64:66:34:73:d4:a0:8a:69:
         4e:b2:2e:e8:b0:02:6a:ea:6b:09:24:d5:79:40:44:ae:1e:db:
         0e:54:e3:08:80:7f:b5:a2:25:12:25:a0:3a:83:aa:fb:5c:53:
         48:44:83:40:ab:cc:00:e1:05:78:32:f5:7d:ea:d6:cb:c8:fe:
         c2:13:1d:46:17:39:57:36:e9:a0:68:ce:98:3e:e7:03:49:65:
         70:6a:46:f8:b0:e6:14:c6:11:31:98:37:24:81:df:88:c2:62:
         4e:bb:47:69:10:5f:fd:66:4b:9f:eb:85:d8:70:ab:0c:84:2e:
         75:a6:12:19:ca:40:b8:4a:4b:5c:1b:87:64:53:60:1d:95:36:
         fa:ed:cc:ae:99:b6:9d:68:d6:93:e1:ad:a3:17:e8:f6:7f:f5:
         3a:ce:fb:75:8a:b2:e9:26:bd:f5:3d:a4:cf:e6:d6:1d:c7:33:
         44:17:8e:31:41:01:c3:a2:71:82:a6:64:35:26:9a:1b:2c:20:
         ff:f6:dd:64:f8:11:62:9b:0b:df:6d:7f:c1:2c:c2:31:23:54:
         80:ce:81:39:52:9b:9e:dd:7b:04:c8:6f:61:bd:da:81:bd:58:
         a7:35:5f:1d:6b:22:34:69:3f:7f:1e:8d:4f:cd:80:93:f8:c3:
         c2:f9:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:49 2026 by rpki-client