Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          tu3ZKQzYMBI5J55lFrNz03uDLSMS1tDP8/UdXcPv/8g=
Subject key identifier:   D2:69:EE:54:22:3D:4B:CD:1B:DC:AE:B6:96:EA:D4:16:71:D9:BC:A0
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       75
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          71
Signing time:             Tue 05 May 2026 05:24:45 +0000
Manifest this update:     Tue 05 May 2026 05:24:44 +0000
Manifest next update:     Thu 07 May 2026 05:24:44 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: 0Wm9Lz0Xd3I0je/L560jsw57oBS4J5l+rFAm2feNGkg=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: May  5 05:24:44 2026 GMT
            Not After : May  7 05:24:44 2026 GMT
        Subject: CN=69f97f1d-cb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:2c:30:57:e6:5f:81:db:e8:f8:bb:d6:9c:
                    0c:2f:50:fa:08:e1:96:3d:b2:3b:73:3d:36:d5:f1:
                    07:0c:bf:ef:89:c8:30:1a:6e:17:d0:76:1e:6b:a2:
                    7d:f7:1b:df:e4:98:23:61:26:38:1b:64:15:6c:14:
                    9b:38:c5:dc:68:4a:95:3c:3e:ee:08:20:a0:90:14:
                    15:cc:73:df:45:c8:99:d4:2f:77:c3:b9:89:e1:d9:
                    c6:9c:b9:94:0b:dc:ab:70:76:7e:39:e3:1b:73:34:
                    24:12:ce:6a:7f:46:7f:e6:76:90:a9:f7:10:3a:ae:
                    8c:13:0f:61:f3:b9:41:7a:cc:03:82:5c:6b:ce:f1:
                    ad:01:0a:b6:f2:28:a2:79:20:b9:52:49:fc:ab:62:
                    17:25:98:4e:ce:02:88:ea:fe:0c:3d:48:13:ab:6f:
                    5a:0d:86:8b:2d:0b:11:5b:91:74:b2:3c:29:70:9d:
                    a2:67:3e:92:6e:f4:3a:c9:f4:c1:8b:b3:09:0a:11:
                    72:68:ca:ea:d2:cf:12:5e:6a:ce:27:66:c1:d2:68:
                    40:b7:c8:4b:21:fa:73:eb:53:20:ce:13:f2:e4:e4:
                    ad:c4:49:ef:bb:21:2e:20:58:5b:b1:88:51:36:52:
                    23:22:5d:65:0a:9f:c8:f5:69:8b:e9:4e:f2:5e:38:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:EE:54:22:3D:4B:CD:1B:DC:AE:B6:96:EA:D4:16:71:D9:BC:A0
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f0:b1:41:e0:61:e2:a0:da:93:44:6f:1a:27:ff:bb:43:9f:
         58:af:37:69:7c:1b:36:07:be:c6:bf:15:3e:2f:87:ff:31:d2:
         65:8c:6c:23:70:68:e2:8f:4d:a3:57:29:99:84:4c:c9:11:5b:
         d7:72:f0:15:69:3b:5d:ca:76:cd:b1:a5:15:45:51:00:60:eb:
         dc:76:ef:8b:5a:7e:93:78:a6:1f:4f:1b:4c:9d:15:0c:32:0d:
         d0:cb:9c:55:e8:fa:1f:4e:d0:0b:52:39:02:dd:b2:a3:7a:3c:
         00:ab:73:69:85:c8:76:bb:89:47:f2:c0:c9:f7:6a:51:23:46:
         c3:2d:1f:f0:5b:61:7e:59:2b:f4:93:1b:79:f1:77:9e:1f:46:
         5d:91:56:ee:42:94:93:1d:48:3e:0f:28:62:cd:1d:61:7e:91:
         29:f8:bb:bb:a1:1c:01:a1:9e:3c:77:98:a9:a7:d6:95:c1:a6:
         10:a5:16:5f:10:a7:0f:f6:ec:69:80:82:25:30:c0:f6:0c:c7:
         85:2c:82:11:c3:a9:ff:77:90:e2:a3:e6:ba:44:df:39:3a:f3:
         31:27:d2:43:af:df:2f:04:34:18:bb:e3:67:ae:f7:9d:de:eb:
         5d:6f:02:48:95:56:46:8c:d2:4c:82:36:d9:15:27:00:63:83:
         e3:98:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:11:09 2026 by rpki-client