Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          bxzv4lmi5c/8v5nZQ7bN+AeKOK89oRzJQRuxoDjKzMw=
Subject key identifier:   30:45:AC:A0:9A:E5:5E:01:46:7E:C3:FC:35:57:C6:B3:53:87:B3:7E
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0F3D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0F3D
Signing time:             Mon 02 Mar 2026 00:54:08 +0000
Manifest this update:     Mon 02 Mar 2026 00:54:07 +0000
Manifest next update:     Wed 04 Mar 2026 00:54:07 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: ryQfn8Igpyu7RWSGJcCcrIFEPLX2Q5mDylO4cV/tauU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3901 (0xf3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Mar  2 00:54:07 2026 GMT
            Not After : Mar  4 00:54:07 2026 GMT
        Subject: CN=69a4dfaf-db15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:4c:1b:1d:ec:03:30:09:ee:4c:f3:b6:e9:
                    3d:32:f7:2e:a6:29:20:26:90:9a:44:24:16:4f:59:
                    28:3e:f8:f6:37:23:bd:c0:be:da:e4:57:a1:60:7a:
                    89:63:fc:04:e4:89:ff:80:19:66:30:96:2d:31:a3:
                    7b:e0:b7:f2:61:6e:2a:3a:36:7d:9b:dc:03:c5:43:
                    e0:05:56:8b:87:5f:08:d7:00:a8:6d:86:0e:85:94:
                    c7:6d:ff:5f:3e:f1:cc:a6:f0:65:40:49:31:42:5c:
                    0f:c3:15:af:41:08:60:8f:53:2e:99:58:d1:b8:84:
                    ea:1b:70:16:d3:58:51:e2:52:47:b7:a7:fb:25:00:
                    97:0c:f3:b2:51:11:5e:1d:06:57:55:98:69:ca:e7:
                    4f:96:3c:fe:a3:46:eb:2c:eb:6f:fd:45:90:05:b4:
                    01:de:e5:c0:b2:49:fa:f5:e8:c4:7e:33:84:34:66:
                    15:ac:29:39:8b:5b:54:1d:ed:ee:7a:25:b5:13:39:
                    6d:17:96:4f:05:1d:66:88:39:6c:bd:21:12:35:64:
                    42:14:ee:4b:bd:37:28:f5:49:31:52:d5:58:33:08:
                    95:0a:49:03:6d:ad:34:d4:27:9f:74:9e:4d:ee:6a:
                    eb:78:e0:dc:b5:92:f4:fa:c2:7e:d0:28:a5:fa:b6:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:45:AC:A0:9A:E5:5E:01:46:7E:C3:FC:35:57:C6:B3:53:87:B3:7E
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:f1:56:f7:71:f5:67:17:7e:7e:47:6a:59:98:b7:a2:42:f2:
         3c:d2:3f:58:9d:a0:71:01:ff:36:7b:23:eb:d2:66:60:9f:52:
         fb:86:cc:79:ae:ab:b7:59:63:bc:7b:00:a8:6d:01:50:e0:d8:
         cf:fe:81:89:81:ab:ae:39:26:7d:5c:79:45:dd:b6:04:e4:12:
         30:b4:79:32:78:dd:74:ac:dc:8c:a0:0d:83:55:38:cf:12:2b:
         22:61:5b:f8:ee:2c:90:02:46:32:33:9f:e3:e9:fd:86:b4:16:
         12:3a:4e:33:28:52:11:96:18:33:2e:52:72:d1:eb:48:46:f8:
         ae:dd:e7:9a:db:00:05:86:30:1e:4b:ac:44:f7:94:05:b3:f3:
         44:54:4e:9d:aa:18:8a:b7:12:4f:36:1e:28:c1:fc:95:f0:ce:
         ad:49:c4:ea:c2:70:bc:d2:55:67:a7:4b:64:c7:8c:f5:5a:b3:
         52:39:a3:ec:b4:f2:08:9f:e9:08:df:63:75:2c:0e:48:1e:2f:
         20:d0:0a:c5:80:03:07:07:18:e0:5e:ee:db:f5:3f:ed:f6:cd:
         1b:5d:13:71:03:d8:99:a2:7a:5e:5b:a0:34:9d:7b:a7:5e:54:
         4f:df:9e:08:2a:c8:55:15:df:ae:6c:eb:c3:66:73:6b:06:68:
         de:4c:ea:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:13 2026 by rpki-client