Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          KbUfwC8vx/7N5Xh3ARdzwD+xqEysm7HA3kDklirqatA=
Subject key identifier:   47:74:0D:FB:36:F2:0E:CF:D0:AD:06:08:B1:CC:51:44:7D:06:83:C0
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       0427
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          0426
Signing time:             Fri 12 Jun 2026 03:37:54 +0000
Manifest this update:     Fri 12 Jun 2026 03:37:53 +0000
Manifest next update:     Sun 14 Jun 2026 03:37:53 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: B3Xi9rpSqmDe9dcqSckh3TlWsJNdomztokytIYcxOiY=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Jun 12 03:37:53 2026 GMT
            Not After : Jun 14 03:37:53 2026 GMT
        Subject: CN=6a2b7f12-310f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:db:81:b9:b9:00:e1:28:f0:00:96:cc:da:
                    3b:d8:59:86:e4:ff:30:69:80:0a:bb:62:ac:0f:83:
                    2f:e9:9b:aa:46:58:d1:90:b4:10:6e:76:32:5d:c3:
                    69:1c:99:27:5a:bc:11:bd:47:13:ae:1b:7f:a0:96:
                    ec:b3:02:37:7f:f6:d8:52:be:ef:00:52:47:58:b1:
                    48:fe:49:33:39:87:af:65:7e:20:2a:5d:d5:83:c4:
                    b7:ed:d6:0e:92:5d:d6:09:99:92:aa:b3:93:e6:3d:
                    68:2c:3a:7c:f0:15:c2:bc:26:6c:92:73:b4:5c:01:
                    c4:00:a9:a5:12:c0:a0:6f:0f:05:5f:23:f9:c3:ae:
                    38:e0:1c:88:a4:43:d8:8d:fc:8f:98:49:fc:f9:6c:
                    51:2f:dd:fc:9f:5d:b7:17:b4:fe:28:84:51:a1:93:
                    45:7a:9c:15:35:a4:80:66:bf:b2:9a:93:e3:19:4d:
                    70:fd:05:47:fb:f3:80:f5:9b:2b:f4:78:6d:39:5c:
                    c9:0d:ee:a3:e9:4a:06:51:e7:e5:10:e2:ee:db:20:
                    60:ec:a2:a0:8d:fe:89:82:22:7d:75:68:25:29:66:
                    34:89:d4:46:4e:d6:31:11:28:6e:20:3f:7b:e0:01:
                    91:57:19:05:2a:a6:ea:3c:00:bc:34:30:a2:c0:ad:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:0D:FB:36:F2:0E:CF:D0:AD:06:08:B1:CC:51:44:7D:06:83:C0
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:72:35:e2:03:d6:51:5d:96:2d:d2:dd:fa:a7:ff:5f:c9:
         a2:bb:e0:5b:bd:7c:ca:ae:ea:f6:a3:37:f1:10:e6:85:bc:5b:
         bd:90:56:86:c8:62:23:5a:f3:fb:16:f2:ee:50:20:2c:75:50:
         7f:a8:9d:25:02:b9:fa:de:76:48:58:2c:29:c6:fb:1b:d9:fc:
         41:b2:13:0e:33:e7:31:07:82:3a:0a:ae:f6:2c:eb:ae:09:fc:
         39:6c:9f:bc:80:42:74:2e:84:6e:dc:53:a4:2d:93:ab:93:8c:
         c5:72:19:a3:1a:f8:c1:49:ff:05:f2:70:5c:6b:d1:87:c9:20:
         2e:01:ee:fc:1a:96:6b:18:c3:1a:94:ea:5d:9f:48:39:1c:23:
         c6:7c:4b:30:3a:97:0c:b9:5a:cc:5d:50:14:62:55:66:e5:5a:
         75:a3:85:24:47:5e:fe:0a:f5:80:f7:68:80:58:2b:94:68:b7:
         f0:37:8b:19:fb:bc:ca:00:21:42:29:37:89:da:a6:90:42:b7:
         ea:16:09:50:71:86:08:f3:af:49:52:72:6e:d4:10:bb:75:28:
         87:92:d7:5e:a9:c7:db:de:35:cf:b6:56:09:2c:cc:5e:cc:9f:
         67:d4:8f:33:c3:42:b4:02:2b:5a:00:3d:9a:dc:9f:b9:b0:8c:
         35:67:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:59:28 2026 by rpki-client