Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
File:                     iNIzyaKwFij9KfyxIJhpkPWebZs.mft (raw, json)
Hash identifier:          67hp5tadMOcWxPCSRZZpqTJLxmQqG69o+GmPe3PmZKU=
Subject key identifier:   2B:B8:DD:BE:EE:E5:78:FC:82:8A:5A:1F:48:D2:DE:84:01:CA:9D:07
Authority key identifier: 88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B
Certificate issuer:       /CN=F3636791AR/serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
Manifest number:          1C
Signing time:             Tue 05 May 2026 05:33:49 +0000
Manifest this update:     Tue 05 May 2026 05:33:49 +0000
Manifest next update:     Thu 07 May 2026 05:33:49 +0000
Files and hashes:         1: iNIzyaKwFij9KfyxIJhpkPWebZs.crl (hash: nL/bX1eQ88a6F/Is/QnduNHSxIthKcjgcLC+8bHWDL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                          rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AR, serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
        Validity
            Not Before: May  5 05:33:49 2026 GMT
            Not After : May  7 05:33:49 2026 GMT
        Subject: CN=69f9813d-de35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:ab:df:4c:fc:68:af:f4:97:a1:35:76:3e:
                    bd:65:07:b0:be:5e:78:17:64:cb:7e:e4:ce:84:6d:
                    7d:2a:eb:4e:39:f0:1b:f6:59:7f:87:7e:b8:3d:bf:
                    8f:9f:0e:fe:e8:30:9f:8d:82:70:f5:32:83:d0:d5:
                    89:d9:21:f2:ce:9c:3e:5b:5a:5e:09:34:3c:13:a7:
                    5a:9f:3b:7d:fe:64:d2:0f:54:69:9a:44:7e:a8:ec:
                    e4:94:80:00:54:d4:48:cf:d7:ea:96:91:9d:02:78:
                    c8:f9:ed:81:a0:aa:33:de:29:b5:b6:39:5c:0a:ef:
                    8d:08:c7:0b:09:4f:f3:47:98:c9:35:f9:54:bc:38:
                    54:00:79:b6:ea:a6:c5:9b:d6:88:ef:d8:39:e9:f3:
                    cd:17:19:90:19:c8:be:61:8c:06:6a:92:fd:01:a4:
                    d4:fe:44:43:77:66:df:aa:3c:c2:ac:34:ff:6f:6d:
                    22:ad:1f:ab:ef:7d:f6:06:e1:62:60:29:95:e3:86:
                    b8:23:19:38:bd:06:8d:9a:b7:1a:d1:83:db:67:9a:
                    08:f8:89:72:e4:47:92:c1:54:4d:11:24:50:75:bd:
                    89:3e:7f:08:ef:69:96:aa:3b:a1:0f:f7:2c:d4:aa:
                    22:62:0c:a2:2f:ea:0d:09:03:84:1c:49:70:4b:03:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:DD:BE:EE:E5:78:FC:82:8A:5A:1F:48:D2:DE:84:01:CA:9D:07
            X509v3 Authority Key Identifier:
                keyid:88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:65:21:77:57:0b:d6:1b:99:20:ba:65:fb:bf:3e:f7:e9:
         a8:58:30:19:21:fa:e9:df:e2:73:d2:33:65:6d:49:7e:d2:fa:
         8b:18:0c:b9:8e:59:b6:55:44:d3:93:0e:a8:63:06:5e:ff:02:
         30:5e:27:a5:16:04:94:27:88:5e:6d:a6:c1:b8:a8:0d:08:19:
         e9:85:7f:38:aa:d5:a9:66:72:c8:25:1f:e9:d7:71:44:cd:f5:
         8c:d1:98:0c:52:6c:97:83:2b:5f:3c:33:eb:c8:24:b0:17:e3:
         0f:44:c3:b6:41:e8:a7:fe:25:04:af:d6:3d:7a:c1:39:57:b4:
         5b:18:7c:3a:a4:32:6f:63:67:ef:97:8c:8e:af:c1:ee:61:96:
         06:2e:82:ff:0f:7c:30:c1:8d:a4:ac:10:3b:77:ee:f5:46:f3:
         ce:98:9e:5f:5c:a6:70:9c:58:98:6a:85:7a:6b:c9:6c:b1:56:
         0b:3c:5d:ce:62:c6:fb:7e:14:1a:88:37:8b:6d:fc:a5:9c:7f:
         78:87:ff:b7:e0:0c:54:80:59:bf:bd:d1:24:c9:93:53:94:52:
         94:07:78:e0:20:4b:b1:76:84:f2:c9:ef:28:ab:bf:49:62:b9:
         a4:49:64:da:35:f2:da:c2:3d:2f:fb:21:31:96:e9:eb:d1:d2:
         f5:bd:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:09:22 2026 by rpki-client