Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
File:                     9ghiikaC9VOASvOrLlihnDCordI.mft (raw, json)
Hash identifier:          CbVDEC0gw6A3oCw+22s92Xd2EgjSu4KG8Qp1SMgWZJw=
Subject key identifier:   42:A7:FE:E4:B8:17:19:C7:4E:CB:2A:2B:DB:9A:69:6E:68:68:0A:CC
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       0257
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
Manifest number:          024A
Signing time:             Sat 21 Mar 2026 05:27:53 +0000
Manifest this update:     Sat 21 Mar 2026 05:27:52 +0000
Manifest next update:     Mon 23 Mar 2026 05:27:52 +0000
Files and hashes:         1: 9ghiikaC9VOASvOrLlihnDCordI.crl (hash: DYhRaICVVzFFiKD+DOAM28/dQJ46qho1auOXuVz/8xg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Mar 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR, serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Mar 21 05:27:52 2026 GMT
            Not After : Mar 23 05:27:52 2026 GMT
        Subject: CN=69be2c59-323e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:0a:43:2d:36:c4:44:e8:cf:a0:5c:be:c8:
                    49:13:f5:73:17:19:69:f1:b3:ea:dc:c8:19:b3:3a:
                    bc:2f:b5:43:8e:61:36:bf:38:1c:a2:01:f2:33:dc:
                    ac:13:06:a9:d8:8e:93:08:9f:dc:de:8e:29:f7:24:
                    5d:de:fa:a9:3e:00:39:d8:e4:ef:72:27:fc:dd:46:
                    ba:64:b4:7e:ae:5a:c1:b3:db:88:6e:34:c9:c5:83:
                    99:99:45:95:05:bb:7e:a7:39:d4:fc:b9:4e:5b:d1:
                    32:37:fe:fd:2b:f9:7c:7c:48:84:dd:81:3d:73:a2:
                    6e:77:96:2f:3b:07:b9:4b:5d:ec:5b:31:90:6d:83:
                    0d:08:ac:d5:bf:eb:73:32:18:d7:5b:81:e9:7c:f1:
                    1e:6a:ee:b7:d6:dc:bf:6c:02:3c:b2:bf:ac:9c:f2:
                    cf:9f:c8:74:ac:32:69:45:93:63:5e:c0:12:30:69:
                    b6:e8:86:ae:37:b2:fe:ef:50:91:19:cd:51:6d:3a:
                    1c:3e:85:d0:e7:c7:c6:e9:90:0d:6c:6e:04:05:09:
                    3f:1f:a0:eb:9d:68:37:be:6e:b9:3b:8c:af:26:b3:
                    05:98:d8:80:90:24:fb:94:06:e5:32:1d:5c:78:0c:
                    b9:a1:1d:63:78:c8:33:c3:30:c0:d6:52:7f:06:cd:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A7:FE:E4:B8:17:19:C7:4E:CB:2A:2B:DB:9A:69:6E:68:68:0A:CC
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:77:60:78:f0:71:e1:0d:10:7c:9e:99:79:44:2d:ca:bc:
         99:59:72:7f:f6:01:0c:31:61:db:9b:a8:d0:72:bb:11:46:39:
         36:2c:c7:cd:81:b2:b0:71:3b:9b:db:cd:5c:38:3b:d1:63:e7:
         bf:e8:a8:21:7b:bc:1d:f4:b5:4b:ff:e4:75:17:20:dc:0f:e4:
         95:bf:12:fb:e0:12:07:ce:0b:e8:95:25:a1:1b:1b:e7:7e:d4:
         34:d3:5b:c1:3e:e1:0f:1d:b4:ae:5e:ae:aa:70:cc:d3:8e:ca:
         3b:aa:84:23:a7:8b:28:e6:87:6a:a3:f4:5a:5f:55:36:a2:af:
         63:19:be:28:4e:82:55:ce:f4:f6:17:7b:05:b0:34:19:94:d4:
         41:e3:3c:f3:9f:a5:ab:c7:cd:2f:d2:33:69:48:73:75:a5:00:
         d5:53:2b:d9:b9:1d:6e:75:47:8c:c2:7c:cc:e8:c3:9c:f7:8c:
         65:90:f7:52:1d:03:3e:cb:68:75:a2:92:e1:82:35:4f:1c:20:
         da:41:cb:ae:8f:5a:4e:e6:0e:26:fe:fe:9a:83:16:1d:50:ef:
         c3:8e:60:db:e9:3c:a7:dd:c1:c5:31:9c:2b:f2:90:6b:29:d1:
         11:87:15:1f:20:22:8f:f4:1e:e7:49:ed:39:1c:ee:43:3b:6e:
         12:3d:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 16:45:26 2026 by rpki-client