Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          F7Y6SuVuxL/1pdOEwuZC7ByuAOSXffWmg+LOIP9+Zjk=
Subject key identifier:   99:92:BC:B2:B0:06:BB:46:BE:2F:BB:EC:3A:27:F6:58:D0:CC:9C:AF
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       0A70
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          0A6F
Signing time:             Sun 29 Mar 2026 01:16:38 +0000
Manifest this update:     Sun 29 Mar 2026 01:16:38 +0000
Manifest next update:     Tue 31 Mar 2026 01:16:38 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: 2Xr4NUTKiUDzdIRPFB8yJ5G6eAJhHnBAjWLku8GqBCA=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672 (0xa70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Mar 29 01:16:38 2026 GMT
            Not After : Mar 31 01:16:38 2026 GMT
        Subject: CN=69c87d76-c4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:02:09:c7:d3:6c:d0:35:4b:8f:75:5a:7e:
                    b5:f8:da:b9:00:08:de:c2:eb:f7:51:63:c2:12:a3:
                    d6:47:7c:c0:fd:e7:92:68:bd:a8:b1:a0:74:64:08:
                    3a:f4:ad:ff:40:bc:9a:2e:0a:dd:60:b5:ea:3d:92:
                    81:f1:ec:8a:3a:3c:bb:3c:dc:b1:8e:f2:5e:d4:82:
                    b4:ec:69:9f:02:5e:e3:e4:9d:0b:69:39:39:4f:2d:
                    dc:09:22:ea:df:2b:07:d9:1c:ae:d2:2e:74:69:5e:
                    a6:d7:c4:79:7f:9c:a0:4d:04:da:3a:66:f5:ff:1c:
                    c8:6c:b1:1d:f8:6c:1a:dd:09:0f:39:b4:de:0d:e3:
                    24:a1:65:5f:35:50:28:6c:94:6b:e0:4b:83:b6:7c:
                    63:d8:4f:ff:d3:fc:0e:f9:1e:e8:ee:82:0d:f3:26:
                    fd:8d:fb:2e:36:45:cf:07:4d:fd:38:75:86:7b:e8:
                    78:48:c5:82:40:32:3c:44:30:d2:73:37:13:a9:94:
                    fa:67:b6:30:0d:09:5b:b4:dc:1e:54:0d:6f:75:f7:
                    d3:3d:ae:7d:06:c7:a3:2b:04:8f:f1:8b:75:a4:81:
                    f9:f7:54:63:e2:31:a5:68:d8:e1:20:a7:86:fb:6a:
                    bc:0b:a1:d8:f4:74:7b:59:b6:de:c5:89:79:0b:44:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:BC:B2:B0:06:BB:46:BE:2F:BB:EC:3A:27:F6:58:D0:CC:9C:AF
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:32:f9:d0:52:b3:07:43:c8:a4:54:dc:e7:2e:45:3c:9a:10:
         a0:bb:20:ee:2a:56:f4:27:ce:7a:1a:28:f0:d5:c2:b3:ec:b8:
         fe:29:5f:72:86:4f:46:70:1c:a1:38:5d:6f:b3:5a:7d:15:36:
         a8:05:7d:16:6d:2e:26:02:8d:0a:d6:25:93:88:b8:d5:4c:b5:
         8d:10:a9:07:86:9a:e0:05:28:ef:89:ac:40:eb:ec:33:ec:39:
         3e:40:c8:83:39:0d:b2:88:ea:06:e6:1b:0f:f5:85:04:fc:99:
         8f:90:c3:a6:b2:37:1e:93:dd:85:33:af:e2:ff:27:f9:b5:f2:
         69:7d:c4:ac:7a:29:e1:2b:a9:50:b1:61:44:c5:88:df:dc:26:
         d2:59:b6:6a:be:dd:a7:d3:58:0f:e6:49:50:0d:25:81:7e:5b:
         12:95:a5:fd:9b:cd:0b:da:6d:6c:ff:2d:c3:fe:f6:79:62:58:
         40:4b:6c:58:33:93:84:e1:7d:b6:5d:20:99:2d:01:dd:c6:51:
         88:a4:48:91:b3:5a:eb:8a:5b:a6:b0:b4:7a:8f:4b:84:b1:20:
         b0:55:9d:64:c7:25:e8:cd:4f:97:13:34:39:b9:bf:82:bc:23:
         65:92:83:04:b9:c8:37:75:32:43:79:5e:2e:47:ac:41:fc:35:
         93:6e:30:a9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEU2N0NBUjExMC8GA1UEBRMoNzEyRUU0NkNDRjEzMjgwODdGMkUzRjI4NjU3NjEx
OEMxMDY5Qjk3RDAeFw0yNjAzMjkwMTE2MzhaFw0yNjAzMzEwMTE2MzhaMBgxFjAU
BgNVBAMTDTY5Yzg3ZDc2LWM0YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFXgIJx9Ns0DVLj3VafrX42rkACN7C6/dRY8ISo9ZHfMD955JovaixoHRk
CDr0rf9AvJouCt1gteo9koHx7Io6PLs83LGO8l7UgrTsaZ8CXuPknQtpOTlPLdwJ
IurfKwfZHK7SLnRpXqbXxHl/nKBNBNo6ZvX/HMhssR34bBrdCQ85tN4N4yShZV81
UChslGvgS4O2fGPYT//T/A75Hujugg3zJv2N+y42Rc8HTf04dYZ76HhIxYJAMjxE
MNJzNxOplPpntjANCVu03B5UDW9199M9rn0Gx6MrBI/xi3Wkgfn3VGPiMaVo2OEg
p4b7arwLodj0dHtZtt7FiXkLRNIjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUmZK8
srAGu0a+L7vsOif2WNDMnK8wHwYDVR0jBBgwFoAUcS7kbM8TKAh/Lj8oZXYRjBBp
uX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRFNjdDLzgyMjBCRTZBMjkxNjExRTk5NEExRTM2NUY4QUVBMjI4L2NTN2ti
TThUS0FoX0xqOG9aWFlSakJCcHVYMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2NTN2tiTThUS0FoX0xqOG9aWFlSakJCcHVYMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NEU2N0MvODIyMEJFNkEyOTE2MTFFOTk0QTFFMzY1RjhBRUEy
MjgvY1M3a2JNOFRLQWhfTGo4b1pYWVJqQkJwdVgwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRMvnQUrMHQ8ikVNznLkU8mhCguyDuKlb0
J856Gijw1cKz7Lj+KV9yhk9GcByhOF1vs1p9FTaoBX0WbS4mAo0K1iWTiLjVTLWN
EKkHhprgBSjviaxA6+wz7Dk+QMiDOQ2yiOoG5hsP9YUE/JmPkMOmsjcek92FM6/i
/yf5tfJpfcSseinhK6lQsWFExYjf3CbSWbZqvt2n01gP5klQDSWBflsSlaX9m80L
2m1s/y3D/vZ5YlhAS2xYM5OE4X22XSCZLQHdxlGIpEiRs1rrilumsLR6j0uEsSCw
VZ1kxyXozU+XEzQ5ub+CvCNlkoMEucg3dTJDeV4uR6xB/DWTbjCp
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:15 2026 by rpki-client