Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.mft (raw, json)
Hash identifier:          YVi+AIvuAYFgfWd4cauJmT3qRkwae9sg2uJ16WPTv+k=
Subject key identifier:   6F:59:20:E3:0F:AF:AE:63:DD:C9:20:B1:2D:73:EA:DA:40:82:27:D0
Authority key identifier: 98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Certificate issuer:       /CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Certificate serial:       0A70
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
Manifest number:          0A6D
Signing time:             Tue 28 Jul 2026 01:29:37 +0000
Manifest this update:     Tue 28 Jul 2026 01:29:36 +0000
Manifest next update:     Thu 30 Jul 2026 01:29:36 +0000
Files and hashes:         1: mDG4OL4rkAR85SvUJaCCldQ2HvI.crl (hash: nQas0qxy6HLFNKMtwJ7g8LauGPuw2HLNFOlyMg3l3lg=)
                          2: 2B42CBB2841C11EA8535FD14F8AEA228.roa (hash: dahsJO63bmsOpbiHiBcDrrEKjGQByqLKcepUunArLEQ=)
                          3: 58068464849811EAA9BC2712F8AEA228.roa (hash: NPwlzjfWgkGmqApnLab/DQv5DjJ9aHzrshBcmsHKY5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                          rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672 (0xa70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAR, serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Validity
            Not Before: Jul 28 01:29:36 2026 GMT
            Not After : Jul 30 01:29:36 2026 GMT
        Subject: CN=6a680600-f620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:15:58:70:79:83:8f:09:be:f8:bf:49:18:
                    b4:8c:1f:84:c6:ef:1d:b8:fe:d6:2c:69:5f:c5:67:
                    11:ec:1f:22:12:30:98:08:77:bd:b1:82:66:14:9b:
                    5c:85:6c:87:35:3f:7c:d7:57:ad:82:c2:5a:f0:0c:
                    f4:6b:7d:6e:d9:a4:63:19:7f:34:f1:c4:bb:99:ab:
                    20:04:ec:e1:f5:cd:69:4c:50:50:d6:e6:ab:93:3e:
                    d0:c2:d8:53:36:7f:6e:09:0a:fc:5f:7e:f8:12:94:
                    f3:c5:2e:bb:b6:1f:bb:49:53:f5:cc:18:bd:27:ad:
                    e1:5b:2b:e7:50:89:72:c5:56:43:59:c5:c0:c8:5c:
                    52:52:e8:78:ba:fd:83:01:e1:85:37:d8:eb:34:18:
                    a7:8b:3a:ed:7e:21:ca:05:45:1b:8f:9d:f2:15:e5:
                    79:bc:18:47:aa:42:a4:28:87:9e:06:08:e8:79:44:
                    68:3a:13:4d:b0:11:92:74:10:15:21:d4:e1:5d:1a:
                    d8:ac:ed:0b:d6:14:81:f9:27:81:73:b7:68:e2:39:
                    2f:f2:c3:ef:89:9b:16:92:c2:a4:ad:7f:6f:dd:70:
                    61:96:38:78:30:78:25:12:2a:20:ca:b5:1d:a2:b9:
                    a1:42:4c:40:28:6b:d2:44:d0:16:f6:c5:f1:e2:9a:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:59:20:E3:0F:AF:AE:63:DD:C9:20:B1:2D:73:EA:DA:40:82:27:D0
            X509v3 Authority Key Identifier:
                keyid:98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:99:96:ae:8d:24:a9:06:7b:b4:48:1b:d0:74:41:97:d0:
         fe:a9:bf:fb:7e:42:d5:71:db:fb:58:35:80:db:44:b8:93:8a:
         76:4d:1a:b2:62:40:cb:5b:23:9c:7e:cb:c6:cd:98:c7:03:f2:
         d2:3e:ae:b0:2d:3d:50:b0:07:31:77:59:03:68:1d:9b:65:8b:
         a9:91:91:db:f6:65:76:12:88:25:0c:c4:29:6b:9a:08:e6:ba:
         9f:b6:9c:dd:0a:96:e0:d8:48:9a:82:85:3a:4c:f8:a5:e1:8c:
         30:47:34:5a:dc:9e:ef:d3:ff:66:51:fe:59:ee:48:8c:1f:c2:
         50:c2:9e:0d:4f:28:9a:1e:04:e7:8d:0d:ed:64:90:3e:8b:45:
         91:5d:7b:a4:9b:ec:22:24:9e:4d:d9:2d:8d:62:0a:25:73:4f:
         4a:90:0d:3c:2c:d0:c5:4d:96:77:7c:9b:11:03:34:84:fc:62:
         f5:40:d2:75:b3:8c:63:3b:2a:ad:e5:2c:bb:bc:a3:7b:90:1f:
         c2:9b:0e:37:9c:9f:bd:dd:f8:63:fa:04:c5:7e:55:cf:5a:d9:
         62:29:d8:d5:15:b0:3b:cf:bb:e6:f2:b4:f8:52:01:f5:4f:84:
         d6:ca:b2:4a:97:3e:91:25:1c:b6:f6:58:c4:3c:b5:3e:24:98:
         e2:fe:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:33 2026 by rpki-client