Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          w5CeAbk4kgcRoTNMyHF/HA8uPXQvCs1fdICmk+rJOu8=
Subject key identifier:   FE:9C:AD:66:B5:FD:BF:98:F5:E3:95:E4:16:86:75:A1:76:A9:8E:D6
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       02A9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          02A8
Signing time:             Fri 12 Jun 2026 04:25:25 +0000
Manifest this update:     Fri 12 Jun 2026 04:25:24 +0000
Manifest next update:     Sun 14 Jun 2026 04:25:24 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: mEfkCwDXfyuOh0hEPgjOrU0QdMWqdqpIP4DMiNHBMXg=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Jun 12 04:25:24 2026 GMT
            Not After : Jun 14 04:25:24 2026 GMT
        Subject: CN=6a2b8a35-704c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:35:f1:b6:58:bc:25:1a:65:6a:fc:84:04:
                    1f:ee:e3:2e:15:30:e4:4c:51:d7:71:09:62:10:58:
                    bc:4b:25:60:e6:6c:b7:b6:b6:dc:4a:c3:d5:8d:5f:
                    ff:90:19:db:23:0e:3b:be:37:3b:43:b9:5a:8f:69:
                    aa:64:e8:f6:c1:20:45:2e:2f:a6:48:d4:90:df:e1:
                    47:2a:ce:a0:76:c3:21:bf:03:09:3a:e0:83:13:0d:
                    18:ef:38:b8:8f:90:4a:71:19:b0:d0:9f:aa:38:18:
                    f6:d3:b4:07:06:b4:76:da:e2:38:86:66:e5:51:44:
                    eb:d6:e0:e2:a4:4f:f7:25:e5:b6:43:40:10:f1:e6:
                    93:8d:d9:e7:7d:08:63:1c:46:67:8c:66:6e:17:f7:
                    7d:0e:ef:f1:d6:51:cb:e5:79:58:e6:a4:5c:e2:d6:
                    46:3b:b4:35:90:56:32:e8:16:ce:ad:cf:12:ae:15:
                    8b:d8:4e:0f:28:ea:49:8b:48:55:c2:40:bc:c9:3b:
                    1a:9b:1f:c2:90:e0:10:16:3b:ae:fd:ae:d9:50:67:
                    61:9c:ed:4f:f9:db:7d:3f:f4:04:af:94:16:c0:be:
                    d1:bd:fe:24:c2:33:7f:89:b9:1c:71:5f:48:8b:bb:
                    4b:39:1b:3d:d6:89:cb:1e:74:20:a9:4e:47:b6:c3:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9C:AD:66:B5:FD:BF:98:F5:E3:95:E4:16:86:75:A1:76:A9:8E:D6
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bb:ea:c1:b6:83:59:f8:b1:a8:76:77:14:50:bc:8f:82:c6:
         fb:4e:d8:1c:d1:eb:02:f2:f4:3e:e0:49:13:4c:7b:52:9c:32:
         f4:08:ef:e4:29:d5:42:c6:c6:21:38:fe:a7:40:9f:c7:84:c4:
         7e:4e:9a:f7:18:27:c9:b7:fc:1b:a0:67:6a:8d:c3:b3:06:bf:
         f3:1c:08:51:f7:2c:6e:c6:32:d2:73:8b:a3:73:c3:c8:00:a5:
         a8:6f:6f:0d:17:2e:ca:e2:ce:69:a7:b7:39:58:98:31:be:6e:
         c8:f1:69:2a:5b:4b:46:8f:68:dd:8e:56:9a:28:20:d7:a7:52:
         a1:df:19:d2:90:aa:e6:57:16:89:5a:29:01:6d:2a:f0:9a:55:
         6b:68:9d:61:ea:90:57:5b:31:ee:77:d7:52:5d:ff:a8:b7:cc:
         0c:3c:36:35:29:76:2c:f6:f1:2a:d1:99:dd:ff:79:d8:b0:a0:
         3f:02:7e:77:40:9c:85:78:64:fc:9a:bc:c1:a4:4c:38:3c:be:
         81:1d:7f:7b:a2:8f:b3:33:5e:74:68:74:a0:55:10:e9:99:2a:
         95:e2:30:2e:a8:8e:44:86:24:1a:f9:0a:3b:1f:8a:7c:ee:a7:
         cf:d2:06:bc:04:53:28:5d:df:5a:d1:39:e6:73:cf:a2:32:0a:
         5c:97:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:46:31 2026 by rpki-client