Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          Z5XKY5IY+ZRWtqoRbBYe2NllU1o69B2F1Tv30tYc5f8=
Subject key identifier:   90:69:0E:10:B5:A6:3F:4E:17:BF:3C:2C:06:F6:63:91:D1:F4:36:40
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       0308
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          0307
Signing time:             Tue 05 May 2026 04:07:07 +0000
Manifest this update:     Tue 05 May 2026 04:07:06 +0000
Manifest next update:     Thu 07 May 2026 04:07:06 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: HFLw5pvagSWIoV36ddV8kXRKuQrXF9yL4D69BeLdF0M=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: May  5 04:07:06 2026 GMT
            Not After : May  7 04:07:06 2026 GMT
        Subject: CN=69f96cea-b542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:51:28:c4:4d:9e:49:20:f3:65:00:ba:01:
                    7b:47:37:90:e4:0b:7e:e6:90:93:27:81:72:7e:ee:
                    49:de:af:c0:35:33:bb:66:c0:bb:6f:0d:eb:26:ff:
                    5e:13:aa:98:d5:fe:ba:2f:8d:24:e2:0c:e5:97:a9:
                    ab:d4:45:0f:98:4d:7d:b4:36:6f:a0:1d:55:e5:fb:
                    4d:bc:77:cd:44:54:88:42:de:16:4d:68:62:77:b7:
                    72:ed:06:c1:cb:6e:4e:a2:96:99:d1:dc:a2:74:38:
                    03:a2:00:04:e6:51:2d:80:98:a1:e5:92:48:e0:16:
                    d7:24:fa:44:4f:22:0c:38:82:55:eb:63:c3:ce:01:
                    c3:8e:99:81:0b:dc:90:b5:b4:4d:68:b2:d6:fb:08:
                    ed:ed:ea:a0:df:ef:86:1c:f9:9f:cc:3e:46:da:dc:
                    fe:f4:4c:b1:33:43:25:ac:df:0d:ed:97:3e:38:09:
                    8c:62:c3:c0:65:6f:4e:af:c8:82:28:8e:e9:5f:74:
                    f6:63:db:cf:8e:ce:d6:c0:fd:36:2c:bc:47:55:75:
                    e9:20:54:97:2c:2b:05:a7:12:da:d0:fe:0b:1a:c5:
                    fe:af:c1:ad:46:cf:4f:3d:cf:6f:25:f8:36:3e:42:
                    ff:b7:a2:d8:e0:3a:9c:96:15:55:c8:97:2a:ce:39:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:69:0E:10:B5:A6:3F:4E:17:BF:3C:2C:06:F6:63:91:D1:F4:36:40
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a0:ef:0e:b2:f0:d9:ad:ae:97:78:78:a1:f4:6d:a4:f9:d2:
         43:b0:30:d6:f7:6a:87:33:02:28:22:28:52:4e:87:4e:5f:1d:
         50:15:a2:fa:1f:3c:5f:43:1b:e0:a1:c6:77:de:a6:1e:a7:7a:
         04:71:49:ac:28:b5:ad:54:e0:fb:dd:c9:7f:42:fb:c9:e6:5b:
         89:81:0f:15:e2:ce:ef:aa:7e:2a:ad:91:57:94:30:cb:ec:58:
         dc:2f:3d:f0:35:17:70:6e:b9:5b:07:c7:09:dc:1e:57:6e:90:
         a8:c7:9b:00:0e:8f:41:7a:01:de:38:4a:7d:66:7c:bc:41:fd:
         3c:19:e6:fc:d6:85:86:3a:fa:a5:e0:c2:8f:c6:27:ba:ed:74:
         53:56:3b:50:c2:d8:a3:80:d6:f9:ff:d8:de:a6:74:c2:6f:3a:
         16:59:53:53:1b:a4:4b:c1:62:2e:c8:af:36:c3:99:3d:51:1f:
         f1:44:12:39:2d:11:d5:f7:41:8c:31:b9:14:72:43:23:15:61:
         d1:1e:46:57:10:67:19:ba:02:83:1f:1e:d7:31:62:b7:f0:1d:
         42:e2:5d:83:70:00:f2:34:17:f8:f8:c9:f2:b8:c8:d2:76:f3:
         c2:56:75:e0:ae:9d:ad:ad:c8:f3:23:97:28:a2:23:57:f6:ec:
         52:85:0f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:13:14 2026 by rpki-client