Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          i9j8al3ZCl/G2NByHzwXPO4vYwF3g+jvAjYFkbNvE28=
Subject key identifier:   67:B0:60:AA:E3:1B:20:B8:CD:75:54:16:9C:27:6D:B2:CD:1C:84:8D
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       08C1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          08BD
Signing time:             Tue 05 May 2026 01:49:08 +0000
Manifest this update:     Tue 05 May 2026 01:49:07 +0000
Manifest next update:     Thu 07 May 2026 01:49:07 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: 38nNZozbjJhYLJz4rr3Ayd5pU3cMIym/630SUQS34R8=)
                          2: AC4E8162494411EC8CA9436BD8A014CE.roa (hash: b3n4slgOS/MlasvqZ+C1CqSsBm6+jMSAotZwP76nH4w=)
                          3: 73CF35D0B0D611ECA0847BBD5A40D577.roa (hash: 5YOdoaN/nTrUVBHfwF7bO4BngZbRv1YMgLNCZWSSDi0=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: May  5 01:49:07 2026 GMT
            Not After : May  7 01:49:07 2026 GMT
        Subject: CN=69f94c94-da5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:83:6e:0f:06:d8:bd:90:d1:f5:5f:6c:96:
                    77:8b:4e:56:bb:f2:a5:d8:8a:31:6e:ff:9b:72:11:
                    df:0a:ee:cc:fe:da:a1:ae:ba:4f:8c:5a:c2:1a:7d:
                    17:7a:74:68:e8:e7:2a:94:86:8b:57:27:ed:03:dd:
                    0e:30:ba:ca:b1:d7:17:ad:13:91:57:93:28:fb:df:
                    1f:cb:e4:62:36:ce:77:2e:1b:61:00:42:2a:0a:7b:
                    71:df:65:4c:ed:a1:ae:1e:d9:cd:87:0f:34:c4:a2:
                    82:5d:fd:39:a2:fa:fa:f0:ee:0a:e6:95:7b:21:ea:
                    19:e7:8d:3f:70:cf:70:9f:6c:ce:74:2c:61:02:41:
                    d8:c6:84:b0:0d:cc:d9:40:19:16:4f:e3:0a:bc:fb:
                    7b:fe:29:61:0e:79:ee:a0:3a:d4:e6:77:af:da:80:
                    52:55:8f:5e:c7:14:66:89:ac:6d:e9:a0:2f:21:65:
                    d3:e3:cd:2c:cf:67:eb:75:97:2e:7d:80:5d:d2:83:
                    3c:24:5a:5f:fa:76:8b:21:d2:40:75:14:7c:4b:9e:
                    d1:7e:a6:2c:ff:f7:ba:84:9c:33:7c:20:55:fa:48:
                    71:20:bb:13:7f:7d:93:22:d0:89:fa:02:26:57:70:
                    5e:61:5c:b9:66:b4:7d:0f:49:17:38:93:84:37:4e:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B0:60:AA:E3:1B:20:B8:CD:75:54:16:9C:27:6D:B2:CD:1C:84:8D
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ec:a4:b1:80:95:2e:ce:e6:f5:ae:a6:11:c1:c9:33:06:43:
         e3:75:21:ce:75:bd:ac:5d:ca:5b:05:c7:d0:2e:49:74:cf:df:
         08:2f:9e:b4:cd:41:38:57:d1:43:54:ea:88:5d:23:81:b0:ea:
         73:3c:d1:be:25:2b:e0:ba:26:49:c2:31:3b:65:1a:1a:3f:ac:
         43:b6:4a:b0:5d:35:23:45:d4:61:12:4e:a9:6e:dd:1f:cf:3c:
         f5:4b:f3:75:13:41:ad:d0:23:ce:5a:90:1b:bb:7e:3a:ff:53:
         10:60:e1:c9:3a:72:d5:b0:58:58:63:ef:2a:6d:f9:20:3d:0e:
         3c:d7:9f:58:5a:c8:6c:c7:da:8e:62:11:80:23:8a:94:d3:51:
         40:37:14:da:7a:9a:9e:25:d6:ad:07:dd:e3:87:59:fd:4c:ed:
         47:82:a9:95:15:67:9f:b3:4e:0e:42:00:50:9b:40:99:47:1e:
         a3:60:80:65:a5:53:8e:1c:c0:da:97:a2:b9:db:7f:72:46:74:
         27:30:ca:0c:72:37:21:86:3f:7d:cd:c4:f8:59:a1:7e:13:40:
         c0:41:11:b1:1c:74:f6:cc:2c:ab:19:3e:90:20:47:6d:13:95:
         9e:09:16:0e:c1:6f:08:a4:3d:68:e0:76:70:b3:21:2a:d1:b9:
         32:d6:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:11:18 2026 by rpki-client