Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          K2sngHlLFB5F4WiB4nMQSsQ6R/rprf99SyqRiyT0w9U=
Subject key identifier:   19:D3:31:B1:E3:00:26:D7:BD:82:10:08:A0:1A:3A:0A:10:41:41:42
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       02C7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          02C6
Signing time:             Mon 02 Mar 2026 02:51:57 +0000
Manifest this update:     Mon 02 Mar 2026 02:51:57 +0000
Manifest next update:     Wed 04 Mar 2026 02:51:57 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: oOCZG4poe942YO9JpcfhBpo2aziPsD+h4ZFySg1goVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: Mar  2 02:51:57 2026 GMT
            Not After : Mar  4 02:51:57 2026 GMT
        Subject: CN=69a4fb4d-0880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:d3:c5:f3:05:48:63:4d:9e:2e:5b:64:ec:
                    53:4a:6e:56:d7:2a:ce:7f:01:27:64:3f:dc:f3:61:
                    a8:d5:c2:26:e8:8b:34:0f:54:11:b8:a1:d8:8c:3a:
                    f0:c9:2b:7b:b1:be:83:66:a4:1d:bb:44:9b:3c:ad:
                    23:33:df:4c:7b:e2:d5:63:6e:28:e5:83:3a:d5:ab:
                    9f:e7:58:9f:24:37:97:3d:8a:ea:23:e2:8b:98:5f:
                    9c:3d:52:ca:b8:ef:ca:84:66:45:24:bf:fc:aa:23:
                    52:27:de:6a:a2:68:97:cc:ee:db:12:4b:1d:df:ff:
                    78:d3:6b:1b:e8:30:81:3e:a4:ac:6f:65:6c:04:1a:
                    18:02:e9:4c:c3:55:bc:49:3a:16:a7:66:3a:fa:11:
                    98:13:77:54:c0:eb:1a:f2:a0:8b:1b:16:3d:81:d7:
                    ec:6d:99:80:0c:32:3b:40:39:f8:77:bf:15:93:ec:
                    0a:a4:b8:76:3d:9a:aa:39:94:6d:a0:79:24:9b:0f:
                    6c:b5:b9:c3:ae:9b:44:03:c7:72:a6:fa:eb:db:e3:
                    64:6a:b8:e2:44:06:eb:96:90:b3:2d:1b:3a:a5:d2:
                    ad:c2:3f:5c:3b:e0:6c:26:83:87:31:6c:35:9d:ea:
                    b3:33:40:b3:c6:be:67:12:ac:54:cb:53:88:03:e1:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:31:B1:E3:00:26:D7:BD:82:10:08:A0:1A:3A:0A:10:41:41:42
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:dc:c2:3d:38:08:41:c5:07:25:1d:d4:17:b8:a8:02:23:
         60:bd:b7:cb:a8:c9:6c:14:da:5b:29:91:64:0c:9c:44:bc:af:
         56:90:e7:4e:03:2f:da:61:eb:96:80:43:cd:1d:20:a2:17:06:
         2c:04:c2:17:fe:cb:2c:68:0b:29:8f:a4:17:93:ee:e3:c7:b7:
         db:7a:8b:8d:52:31:20:92:6a:69:f3:a8:4d:33:eb:3e:aa:a8:
         d9:7b:0f:9d:5d:46:fb:bf:c5:74:45:44:c8:47:ff:a6:20:71:
         39:91:93:43:c6:34:1e:28:96:74:3c:c3:cb:23:40:b0:b6:64:
         b8:68:ac:eb:2a:8c:18:72:e7:e6:f4:7b:f2:fc:a1:5c:5f:d1:
         a3:fc:21:b8:50:1c:86:72:b2:39:ab:08:d9:2a:e8:bd:ec:f8:
         7e:50:7e:0e:c6:ac:e0:e3:bb:60:0e:bd:e0:2b:b9:e0:bf:c8:
         b9:bd:43:9a:27:91:89:59:32:5b:e2:8b:f5:14:95:39:07:95:
         f9:40:10:ec:bc:47:13:09:bf:83:8f:37:c7:02:19:e4:e6:53:
         c7:2b:65:83:af:4d:88:7d:12:70:ca:64:65:40:ad:d1:cb:c9:
         4a:39:1f:2a:4a:d7:d3:ec:f1:0b:91:bf:fd:91:91:90:21:3d:
         c4:e9:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:04 2026 by rpki-client