Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          QGPAf9ch/U5KiIoEBzKpDKV5TZvk7vgoN9nPF55sf/I=
Subject key identifier:   A6:BC:6E:F5:ED:DE:33:F7:4E:0C:DB:58:14:8D:28:5A:2F:EF:2B:60
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       032A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          0328
Signing time:             Tue 11 Aug 2026 04:14:36 +0000
Manifest this update:     Tue 11 Aug 2026 04:14:35 +0000
Manifest next update:     Thu 13 Aug 2026 04:14:35 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: dAGbXMdJePBpWV0uB9poXxD7isbn19zIifAjEuVUEdM=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
                          3: D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa (hash: 1WlQj4309rmMEuDFbG4TCzXscQ6wxxa2/yO0H6jLRvo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 13 Aug 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Aug 11 04:14:35 2026 GMT
            Not After : Aug 13 04:14:35 2026 GMT
        Subject: CN=6a7aa1ac-310a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:42:c1:59:e1:3c:6b:d6:b6:b2:fe:2a:1e:
                    fa:65:b3:91:5a:07:47:0b:06:5b:42:95:ec:35:44:
                    7f:89:ce:7b:0e:76:aa:a1:35:4e:b8:42:c9:ed:de:
                    fa:a8:ad:95:fb:b8:92:07:79:6f:71:66:2a:d3:c1:
                    e7:2f:0f:8a:63:fc:0c:c4:52:75:7e:6f:55:b6:c7:
                    6e:1e:fa:f9:35:b0:89:a9:f1:aa:7f:6a:79:b7:39:
                    29:02:aa:91:0a:6f:1a:fe:4f:93:51:eb:df:82:7b:
                    d4:d0:00:11:a3:2d:ba:9d:60:b0:e5:45:92:e1:03:
                    b1:3f:be:76:0b:c3:32:87:aa:72:bc:7b:cc:0a:3e:
                    70:28:b5:22:89:78:6a:f8:b9:96:ce:a9:cd:e7:99:
                    f5:c8:eb:55:10:74:31:ad:f7:12:55:b4:41:ac:15:
                    ce:02:d8:8d:76:56:e6:e3:2e:7b:d8:1d:c7:4f:2e:
                    0d:39:bb:25:66:da:1b:e3:e2:ac:50:27:54:60:cd:
                    f9:25:f9:07:d5:25:0e:98:d5:da:4e:1d:06:42:3b:
                    4a:c0:19:40:17:17:09:df:20:d6:db:52:91:aa:eb:
                    47:a3:00:91:3d:5b:ec:2d:84:71:45:7d:2a:3f:c4:
                    4f:c2:b0:27:61:30:f0:74:60:60:e6:1e:f3:f5:3f:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BC:6E:F5:ED:DE:33:F7:4E:0C:DB:58:14:8D:28:5A:2F:EF:2B:60
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:80:f4:77:3b:ab:8f:fd:03:f4:9c:53:f8:3a:26:07:55:86:
         b8:57:b7:b3:99:15:eb:41:37:4f:ba:48:1b:64:c3:32:12:05:
         ff:5c:96:9e:c7:cc:c4:ad:62:c4:94:c5:0c:66:b6:31:ce:17:
         d5:6e:d7:4b:b5:3f:ee:44:0d:44:c0:d5:24:cb:88:16:95:8e:
         a2:ec:eb:90:b1:3f:ce:d8:7c:2d:4c:9c:7f:d9:35:db:8b:2f:
         b2:8b:4e:86:1b:31:e2:04:a4:52:aa:c4:36:b2:36:43:89:e6:
         a9:c2:77:8d:aa:63:9d:0d:7f:5a:2f:17:6a:24:0b:7d:ab:00:
         a4:ed:43:e2:cb:a7:42:44:15:0f:bf:29:7d:94:a4:9f:c0:fc:
         f5:d2:cb:ee:6c:0d:e3:f9:6e:47:2e:a2:71:b9:af:2a:4a:69:
         77:25:30:50:e1:c9:52:08:1e:4c:47:95:44:95:06:b8:d1:11:
         92:24:ad:5a:e8:5e:5a:e5:1e:a9:17:09:34:10:08:ab:33:1a:
         c9:f5:0d:30:0c:e0:b0:55:c2:44:39:9d:68:38:28:95:39:0f:
         04:5d:f3:30:4c:28:4c:9c:1d:6a:54:4d:c5:01:a5:7f:52:2a:
         e1:8e:4f:c9:fd:46:32:aa:cb:22:dd:b3:b5:5c:04:14:42:1a:
         a5:ad:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 20:34:30 2026 by rpki-client