Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          GyizwE4Yy8GOWWg9oi5GiCrA0b91RE286SB9VxOhSks=
Subject key identifier:   FA:C5:2A:EE:5C:35:1B:3D:0D:86:06:19:CD:99:D0:AD:EF:46:5E:A6
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       02EA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          02EA
Signing time:             Sat 27 Jun 2026 04:15:52 +0000
Manifest this update:     Sat 27 Jun 2026 04:15:51 +0000
Manifest next update:     Mon 29 Jun 2026 04:15:51 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: HruZviLxSyJeiJ2Jh+rvpJmNW9Dn4ZXdfzFvJoeMWgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Jun 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746 (0x2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: Jun 27 04:15:51 2026 GMT
            Not After : Jun 29 04:15:51 2026 GMT
        Subject: CN=6a3f4e78-78a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:1d:cc:28:e3:21:d8:3e:c0:ef:bc:f0:4a:
                    eb:40:ee:0d:d8:54:81:9b:29:f2:54:9d:28:82:6b:
                    6d:f2:81:e7:a1:97:1e:22:8a:6e:94:b5:aa:38:d8:
                    b9:6c:b8:33:48:04:7c:4d:7e:1a:3f:96:ac:4b:96:
                    ea:01:88:f4:88:07:32:e8:38:33:6e:c2:85:0f:e5:
                    29:42:80:e8:6c:38:3f:0e:4d:db:90:39:9c:4c:e6:
                    2f:a4:0b:2e:dc:45:ff:9b:0c:79:8a:91:c0:f7:ed:
                    31:f8:ff:5d:31:46:d7:24:50:04:c7:3f:c0:8d:82:
                    cb:62:5c:54:51:96:6a:f3:fc:bd:6b:02:2d:17:6e:
                    38:aa:ce:d2:03:47:73:dc:77:55:d0:fb:dd:8a:02:
                    5b:44:3a:b6:5c:ae:7d:b4:da:42:4f:aa:c0:0c:6f:
                    e2:10:59:a9:67:7a:1e:27:f5:aa:bf:b1:27:37:ff:
                    dc:d5:6a:c6:9d:d4:ee:61:3f:4f:fd:5d:99:d6:2a:
                    40:92:ac:6c:21:b6:c7:4a:2a:07:44:2f:f0:95:9b:
                    27:2e:f0:5b:4d:21:68:7f:23:a8:58:89:c2:a1:52:
                    a6:60:33:e1:65:9a:1b:77:ae:c5:90:1b:b3:54:8d:
                    6a:00:30:9f:b6:d7:15:19:81:a0:b6:91:c9:33:51:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C5:2A:EE:5C:35:1B:3D:0D:86:06:19:CD:99:D0:AD:EF:46:5E:A6
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:76:03:fd:4c:41:e2:97:06:50:12:77:a5:48:57:2d:86:0b:
         47:90:52:6f:e5:96:ef:5f:80:fb:4f:04:df:f1:71:51:d4:59:
         3c:63:bd:8e:6f:e5:9e:53:ae:db:c4:31:b3:39:fc:98:6a:de:
         aa:31:f6:a1:9d:8d:e9:c3:91:4f:d3:87:91:65:10:8d:c0:71:
         39:2d:68:06:c4:97:34:c8:50:30:60:9d:d4:5d:24:7f:7e:a9:
         09:4b:3b:98:97:05:09:31:5c:2d:a0:ab:ef:27:b2:c9:44:43:
         cf:dc:9b:2f:ff:55:ab:26:15:4c:b0:3b:77:4f:1c:2a:51:e6:
         ff:ad:7e:9b:1f:23:5c:83:2e:8a:e1:76:a5:fd:5b:d8:be:2e:
         03:00:a9:74:e0:d2:84:28:ac:d2:ad:cb:fb:c9:14:b3:8e:1f:
         73:21:cb:f1:5a:52:b3:38:d2:b0:88:a2:27:d1:dd:0a:06:cf:
         3e:ec:4b:fd:b1:0f:f0:5f:b7:05:44:60:06:d2:ef:f8:0f:86:
         1f:9f:03:27:15:6d:d3:66:2d:01:6a:51:b3:99:9d:3e:d9:77:
         d4:5a:d6:2e:ce:9a:23:32:b7:39:29:53:28:41:55:8a:b9:d4:
         36:7c:16:77:cf:df:6d:64:5d:20:fd:f1:a4:de:27:cd:a2:60:
         51:2f:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:21:22 2026 by rpki-client