Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          VmHvm9zrKTJKOLP1J98Xap9z/kpcMxmT3wh75fFhWLQ=
Subject key identifier:   66:6B:B5:D8:02:55:3C:27:A1:23:B6:98:D7:C2:7C:4D:1E:A6:27:04
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       03FA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          03F9
Signing time:             Fri 17 Apr 2026 03:35:19 +0000
Manifest this update:     Fri 17 Apr 2026 03:35:19 +0000
Manifest next update:     Sun 19 Apr 2026 03:35:19 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: CRqtWOSN/5K0cSiwtORffZuCmtWXBfRgCsLQgvwHgCE=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: Apr 17 03:35:19 2026 GMT
            Not After : Apr 19 03:35:19 2026 GMT
        Subject: CN=69e1aa77-5137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:fe:15:d6:3f:e1:f7:eb:ae:cd:22:97:9b:
                    a4:41:a1:0d:28:b4:d6:76:a4:d6:a5:73:ba:b6:0c:
                    a2:83:f9:03:42:d5:bc:02:cc:cf:23:85:32:0e:ce:
                    6f:cd:c7:0b:51:90:78:79:61:1c:d0:ee:be:33:70:
                    48:df:ad:47:8c:3f:27:75:56:98:e6:ed:f2:c5:15:
                    2e:b4:9a:7e:69:3f:7a:3b:30:76:59:ee:92:f2:6a:
                    63:a4:39:9d:b4:07:d3:29:fd:89:24:64:4c:37:9d:
                    c3:d5:82:01:e0:fa:0d:26:05:63:0f:b1:5f:e0:43:
                    af:64:b2:60:55:a6:c6:27:b5:d9:f5:81:b0:c1:92:
                    5a:f2:34:3c:48:11:8f:ac:4e:86:fa:10:f1:ee:19:
                    24:9f:4b:80:0b:97:55:4e:29:2d:ec:11:23:93:7f:
                    d6:ba:53:6c:6c:d6:c1:e9:43:62:ba:83:93:04:fc:
                    98:5d:0d:01:0e:1d:89:57:c7:ac:6d:79:ea:c3:a0:
                    41:b5:9b:c6:ff:ae:16:d9:67:92:66:20:2c:ea:21:
                    05:aa:03:77:45:5c:fb:47:13:71:2f:e0:0e:d7:83:
                    e3:52:e3:83:19:bd:f8:b9:73:e8:9b:7f:02:47:c5:
                    07:73:c7:2c:dd:9a:93:71:2e:83:06:f7:c1:fb:b4:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:B5:D8:02:55:3C:27:A1:23:B6:98:D7:C2:7C:4D:1E:A6:27:04
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:34:8f:5a:71:1e:0b:42:32:ed:52:3d:71:79:57:f0:19:
         98:9f:ae:1e:dc:41:30:e5:f2:ae:b7:04:74:37:9a:89:7a:02:
         ab:8d:50:5e:e0:8f:68:4f:74:a6:84:a8:19:5e:88:e8:d0:b2:
         ed:d5:a9:fb:27:5b:2e:f5:a2:bb:7e:c9:9f:a9:96:31:2e:7f:
         65:ad:fe:31:bc:62:07:ba:db:26:45:6e:ff:9d:0b:4b:ae:59:
         e7:de:d7:71:68:3f:9e:c0:0a:ff:e2:f1:d5:88:df:dd:a2:16:
         50:0b:a2:30:51:0c:dc:90:c4:3e:42:41:1d:5e:b5:b4:0a:4b:
         97:d8:30:9e:08:3a:02:74:04:e1:d0:c6:de:0a:db:5e:0f:26:
         28:da:48:54:68:20:53:db:97:1b:9e:3d:fd:61:5d:92:e5:00:
         35:31:72:5c:74:67:3a:88:d7:e1:71:a9:24:31:d5:b4:2c:71:
         42:92:5a:ae:8b:45:fd:6a:c6:b8:b7:cf:dd:90:54:7b:cf:f5:
         4f:0d:ea:93:ac:57:79:83:33:91:a5:3b:9d:0d:b3:63:a9:3f:
         f6:a9:1f:0a:e8:92:1d:b4:ba:41:ea:25:6a:5c:bd:80:fe:46:
         1a:a5:44:a8:8f:77:07:f4:b3:db:3c:93:2b:2b:8a:8c:26:99:
         b9:93:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:51 2026 by rpki-client