Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File:                     At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier:          YYxHLu8ShzljcxGemt1IzY7WCWtV12SqAXoInojEKxs=
Subject key identifier:   C4:B9:DA:82:14:22:56:A8:5A:F2:7B:07:5C:A2:F2:19:E9:66:C7:65
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer:       /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial:       098A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number:          0988
Signing time:             Mon 02 Mar 2026 01:17:10 +0000
Manifest this update:     Mon 02 Mar 2026 01:17:09 +0000
Manifest next update:     Wed 04 Mar 2026 01:17:09 +0000
Files and hashes:         1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: 7QBXlz4nJyV/53pIlkCduZ7QEtMLih0hRth8nCMJ7mI=)
                          2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                          rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
        Validity
            Not Before: Mar  2 01:17:09 2026 GMT
            Not After : Mar  4 01:17:09 2026 GMT
        Subject: CN=69a4e516-839c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:e8:24:11:ee:bb:b7:1f:90:96:77:8c:fd:
                    95:fc:4a:eb:d6:a7:19:8d:3f:c6:2b:27:2d:f6:da:
                    ee:80:a5:60:81:c1:52:10:a2:26:91:8a:d9:76:c1:
                    24:f1:58:1c:e6:14:40:e9:b6:74:57:53:67:00:51:
                    5d:34:2e:36:18:32:a5:55:49:21:dc:79:3d:41:26:
                    63:db:99:ba:15:d1:51:50:68:fb:1d:71:7c:eb:bf:
                    ce:af:8e:05:52:a0:cf:3c:70:b2:2f:ec:9a:87:54:
                    98:ce:86:f8:ad:80:0e:2d:f9:5e:21:5b:c3:5c:a3:
                    65:d2:cb:2d:00:38:59:57:2b:7b:17:db:37:2b:f4:
                    e2:f9:d3:a5:ac:8d:4a:13:e7:cd:68:30:6d:56:e8:
                    ff:5f:11:ef:cf:0f:04:99:f1:39:e9:f7:d9:ae:92:
                    0d:36:61:b5:d2:92:39:5b:88:b7:24:67:7b:60:b5:
                    60:9a:0b:45:84:4a:d1:54:a1:3d:99:b6:8d:05:b8:
                    ac:bd:c1:03:a9:19:14:74:f5:bd:ce:e7:6b:e5:b6:
                    d0:53:94:da:3f:60:e4:93:86:b5:e5:fa:14:48:40:
                    1e:57:44:dc:4c:b9:2a:c9:2a:e2:6d:64:a4:47:98:
                    37:86:50:6c:c7:7d:f0:71:7a:de:a5:ee:25:4c:77:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B9:DA:82:14:22:56:A8:5A:F2:7B:07:5C:A2:F2:19:E9:66:C7:65
            X509v3 Authority Key Identifier:
                keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:26:83:24:8c:c9:28:63:f8:72:5c:24:f5:58:48:40:d7:7e:
         df:c8:15:35:1a:0c:9e:c6:5c:f6:20:1f:cb:38:57:a6:51:02:
         35:10:b1:8e:b8:3f:78:19:d8:a8:8f:41:d1:c4:52:2b:f0:76:
         a7:0a:c6:04:70:d9:e9:9e:bc:50:d6:54:df:b3:99:db:54:2f:
         a8:11:fd:17:49:66:dc:89:d8:eb:d3:a7:aa:23:d4:ac:dc:aa:
         ca:65:7c:59:90:7d:5f:73:de:0b:ca:5e:70:47:07:00:5f:6c:
         19:fa:53:32:84:69:cf:41:cc:87:3f:65:da:02:cd:dd:6b:bd:
         23:fb:99:e2:16:b9:c9:3a:c4:48:9b:8b:94:38:9b:fd:e8:67:
         0f:32:64:a8:79:44:a6:6b:4f:39:7e:e4:52:07:2b:f9:56:c3:
         87:84:89:05:dc:f0:26:17:30:7c:2e:80:19:9f:6a:d2:9a:fc:
         e3:3c:66:d0:8d:b6:df:de:16:a6:2c:7d:74:80:14:9a:a7:c7:
         ac:c5:e2:df:43:fe:7c:3b:d9:f7:fa:81:6a:b4:70:b8:cf:73:
         a1:78:fa:f1:09:ed:f5:ca:ba:84:bf:30:90:23:52:82:41:d8:
         a7:92:0f:36:14:a0:d5:51:4e:62:ad:f7:76:8b:a3:9d:39:69:
         5f:90:b1:bf
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCYowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUxRjhBUjExMC8GA1UEBRMoMDJEREMwQkYwRjc0Rjk2NEE4REIyMjZDQkUzM0Y3
RDM0RURCMDA1MzAeFw0yNjAzMDIwMTE3MDlaFw0yNjAzMDQwMTE3MDlaMBgxFjAU
BgNVBAMTDTY5YTRlNTE2LTgzOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjIOgkEe67tx+QlneM/ZX8SuvWpxmNP8YrJy322u6ApWCBwVIQoiaRitl2
wSTxWBzmFEDptnRXU2cAUV00LjYYMqVVSSHceT1BJmPbmboV0VFQaPsdcXzrv86v
jgVSoM88cLIv7JqHVJjOhvitgA4t+V4hW8Nco2XSyy0AOFlXK3sX2zcr9OL506Ws
jUoT581oMG1W6P9fEe/PDwSZ8Tnp99mukg02YbXSkjlbiLckZ3tgtWCaC0WEStFU
oT2Zto0FuKy9wQOpGRR09b3O52vlttBTlNo/YOSThrXl+hRIQB5XRNxMuSrJKuJt
ZKRHmDeGUGzHffBxet6l7iVMd3SJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUxLna
ghQiVqha8nsHXKLyGelmx2UwHwYDVR0jBBgwFoAUAt3Avw90+WSo2yJsvjP3007b
AFMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MUY4L0Q0QjA4NUNBQ0EzMzExRTk5NDVGOUI2QkY4QUVBMjI4L0F0M0F2
dzkwLVdTbzJ5SnN2alAzMDA3YkFGTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0F0M0F2dzkwLVdTbzJ5SnN2alAzMDA3YkFGTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjUxRjgvRDRCMDg1Q0FDQTMzMTFFOTk0NUY5QjZCRjhBRUEy
MjgvQXQzQXZ3OTAtV1NvMnlKc3ZqUDMwMDdiQUZNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTJoMkjMkoY/hyXCT1WEhA137fyBU1Ggye
xlz2IB/LOFemUQI1ELGOuD94Gdioj0HRxFIr8HanCsYEcNnpnrxQ1lTfs5nbVC+o
Ef0XSWbcidjr06eqI9Ss3KrKZXxZkH1fc94Lyl5wRwcAX2wZ+lMyhGnPQcyHP2Xa
As3da70j+5niFrnJOsRIm4uUOJv96GcPMmSoeUSma085fuRSByv5VsOHhIkF3PAm
FzB8LoAZn2rSmvzjPGbQjbbf3hamLH10gBSap8esxeLfQ/58O9n3+oFqtHC4z3Oh
ePrxCe31yrqEvzCQI1KCQdinkg82FKDVUU5irfd2i6OdOWlfkLG/
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:43 2026 by rpki-client