Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          vee2YcM+cQmeqgKbZ99L3c2ZuYvlPmkl7GYJfCTvzB0=
Subject key identifier:   44:AF:27:E3:A6:60:94:E9:27:5B:29:CC:06:96:2B:DA:1C:33:B6:36
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       03CC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          03CB
Signing time:             Mon 02 Mar 2026 02:32:48 +0000
Manifest this update:     Mon 02 Mar 2026 02:32:48 +0000
Manifest next update:     Wed 04 Mar 2026 02:32:48 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: 8ylcWntJhMGIXlegSllzpSyCYySyyYeUFtCbLiHFkIg=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: Mar  2 02:32:48 2026 GMT
            Not After : Mar  4 02:32:48 2026 GMT
        Subject: CN=69a4f6d0-3098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:c4:98:2d:f9:dd:cd:43:82:29:94:58:b4:
                    46:99:56:77:7e:ca:a4:85:fc:64:a6:58:b9:fc:07:
                    28:2d:ca:a9:60:58:83:03:4a:9e:84:db:7d:95:e7:
                    05:a8:69:c4:e7:57:45:a5:80:29:78:e0:f7:4b:ff:
                    49:6c:c8:d0:ce:6a:8f:cf:8a:49:8d:41:e9:36:ef:
                    dd:9e:cc:f1:cf:c6:e1:01:ac:1a:ad:a9:5e:e7:42:
                    83:a1:ac:d2:c3:3f:fb:44:f6:43:1a:4b:4e:d3:69:
                    90:df:93:de:eb:03:b8:81:1f:af:96:99:66:34:4c:
                    6d:67:de:fc:15:a5:cb:c4:f0:55:4a:8a:d4:c6:dd:
                    d7:c7:cf:78:36:17:57:50:35:54:c2:49:e0:3b:18:
                    6b:b8:35:a7:8c:5c:6f:d1:21:6a:f8:bb:29:3f:cd:
                    c7:12:46:4f:d7:05:37:86:33:fa:9d:7c:40:ca:16:
                    4b:86:27:e7:b0:3b:27:bd:c0:1d:d6:66:74:4e:ea:
                    e2:7d:0f:16:84:c6:08:fe:b5:57:c2:c4:7e:ff:3d:
                    3f:bd:c6:96:8e:16:5b:84:3a:df:22:dd:10:02:3a:
                    9e:a5:bc:ce:c0:2a:e2:f0:f6:10:4b:db:9f:4f:da:
                    bd:78:36:77:82:1e:c5:70:80:f5:ef:17:46:cb:82:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AF:27:E3:A6:60:94:E9:27:5B:29:CC:06:96:2B:DA:1C:33:B6:36
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:58:e2:de:ad:fc:07:09:f4:e0:52:e9:32:e5:9a:b9:45:9e:
         41:02:2a:0d:46:3d:46:11:1f:69:20:b9:dd:50:8d:3b:f7:a4:
         42:bf:03:a3:2b:7a:c2:46:d7:c4:8a:68:6b:61:92:fb:9e:08:
         4a:da:a4:da:43:66:66:a8:25:27:99:1a:fc:d8:c4:58:d6:d0:
         cf:45:ea:6e:d3:bf:e1:fd:22:1b:fc:a0:3d:a4:52:ea:4c:3e:
         68:ff:c1:37:81:0f:c1:b0:55:17:09:bd:7d:b9:5c:bd:15:1a:
         3d:c1:32:16:ef:db:1a:7a:de:07:9b:01:3c:59:6b:b2:04:41:
         fb:49:a9:23:c5:f6:bf:b4:df:a6:9c:76:fb:71:76:21:97:de:
         d7:56:cb:ab:fe:cd:df:e2:53:8b:70:ef:b3:d9:da:63:32:9f:
         84:95:49:4b:7f:a9:24:ca:df:af:f2:78:86:d2:7e:5d:5f:86:
         6a:b8:34:f6:be:65:1a:47:f7:a2:52:d6:8b:0f:01:b3:8f:d2:
         0e:84:ff:b2:9a:58:2d:32:cd:31:4d:51:e0:da:19:a3:3e:24:
         fe:a8:5d:d0:a6:9e:79:ea:f3:d7:ac:e6:29:93:b5:2d:8d:1e:
         4b:d8:8a:3d:68:d9:8f:13:68:90:b3:9d:39:5b:7f:bc:ee:cc:
         7e:d7:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:37 2026 by rpki-client