Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
File:                     F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft (raw, json)
Hash identifier:          Hu9jqJ+qq03MlIp2l5YWCBUntgg0lEO5yy8U6Kvqehk=
Subject key identifier:   04:8F:E1:C3:C8:B9:0B:3A:6C:19:8B:62:D6:F0:3A:95:19:E8:41:1D
Authority key identifier: 17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Certificate issuer:       /CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
Certificate serial:       0605
Authority info access:    rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
Manifest number:          05FF
Signing time:             Mon 02 Mar 2026 01:56:22 +0000
Manifest this update:     Mon 02 Mar 2026 01:56:22 +0000
Manifest next update:     Wed 04 Mar 2026 01:56:22 +0000
Files and hashes:         1: F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl (hash: 4hVcxYvNh+PIFpWqgxiqxT2NMB945sIpSLP4u1rlQio=)
                          2: F54BCED8037411EEB65CC71D4AD9E6FC.roa (hash: y3ZcOlV2XAYu6FcG4OWjKOuralzgKPHqgta3o0WG3QI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
                          rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AR, serialNumber=17CB1843BCA4722435288056070A067156077FF8
        Validity
            Not Before: Mar  2 01:56:22 2026 GMT
            Not After : Mar  4 01:56:22 2026 GMT
        Subject: CN=69a4ee46-afa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:88:60:fc:b7:e8:bb:ef:cd:be:7a:3b:34:
                    8f:ff:96:9c:f0:d3:42:08:96:c7:11:79:08:70:f7:
                    5d:a0:fa:04:3c:da:13:57:c2:0d:3f:a4:9a:a6:37:
                    60:f5:01:9e:4c:7b:1f:60:4e:48:78:8f:49:dc:7d:
                    0f:96:59:ce:2c:bd:c6:61:9b:a1:d0:57:a5:82:55:
                    c6:e4:84:21:14:cd:52:01:f0:59:36:aa:7d:8e:c7:
                    ee:a7:e4:b7:42:94:92:15:3c:14:71:cb:20:1e:e2:
                    97:21:b7:4d:4b:63:5d:d3:c7:0c:5a:ec:2b:38:01:
                    92:dd:72:96:cd:4d:b9:22:87:f0:5b:62:fa:e6:dd:
                    62:e1:ce:09:f3:7c:65:4a:9f:77:f1:92:05:97:ad:
                    bc:00:1f:40:93:19:3a:16:b5:b6:dc:14:48:17:c2:
                    f2:c8:fd:93:c2:d4:73:61:1b:41:f7:71:02:4d:13:
                    03:6b:44:47:bc:6d:ae:70:0b:25:48:ef:3a:13:0b:
                    59:e7:d4:fc:44:cd:72:0e:99:18:c2:34:e5:6a:be:
                    14:27:05:4f:59:17:26:60:4d:9d:c5:9a:25:21:6f:
                    d1:f7:1e:71:f8:34:7b:81:d2:42:42:20:db:26:54:
                    a0:55:aa:fa:b2:f4:b0:3d:ad:5a:4d:c4:b5:cd:97:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:E1:C3:C8:B9:0B:3A:6C:19:8B:62:D6:F0:3A:95:19:E8:41:1D
            X509v3 Authority Key Identifier:
                keyid:17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8c:18:2b:24:e3:68:a1:8a:38:f8:4f:58:fc:df:20:81:82:
         8e:51:7a:1e:6f:23:00:a7:53:b1:9b:9e:1f:b6:6d:27:63:6a:
         cd:79:f4:a1:80:cc:ba:82:a1:34:47:6c:0b:f2:75:b4:e1:08:
         b9:36:b0:08:76:6a:a9:f8:84:a8:5b:1b:24:05:f0:e3:be:6c:
         3a:4e:90:56:60:fc:a8:b4:1b:e1:53:4d:b2:b6:42:6e:07:59:
         a4:f4:c2:be:73:17:66:9b:ea:c6:a0:6d:cb:ba:a5:30:af:3a:
         eb:2b:88:d7:06:83:66:56:b1:24:72:65:2a:5a:2f:23:fc:a2:
         b2:8a:be:2d:6f:6e:9a:c8:37:61:72:ff:f9:76:5b:37:21:82:
         a3:0e:5f:bb:f4:16:97:62:a0:38:1e:e9:f2:09:70:34:29:b2:
         5a:08:fe:5d:a6:f7:e2:92:06:7a:52:c8:77:7d:b1:c5:0f:5e:
         5b:12:e1:44:7f:1a:33:c9:47:64:a2:c1:a4:97:11:b1:a2:b3:
         06:3b:e9:bf:b5:d9:76:8a:c4:b6:63:3f:85:a0:2e:65:9d:1c:
         64:51:5d:84:42:fd:96:f9:04:2e:41:6c:e6:4d:16:cc:e2:9d:
         db:13:b9:5d:97:b7:fd:cd:df:d3:6b:d6:a7:fb:c5:b1:bc:ae:
         5c:01:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:13 2026 by rpki-client