Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          iYafsGXV6Rbq+3kOlcKaUsxYjmbsTuhFvjs2EozNqjw=
Subject key identifier:   CF:D9:E1:D1:C1:9E:5E:CC:33:B5:68:8D:C0:54:4E:CC:1D:E2:DD:C7
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       062A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          0625
Signing time:             Wed 01 Apr 2026 02:36:15 +0000
Manifest this update:     Wed 01 Apr 2026 02:36:14 +0000
Manifest next update:     Fri 03 Apr 2026 02:36:14 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: gUIWTobNnl6LUbrVendCjuUSTIyIOcTXbuUFDaELN1s=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 Apr 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Apr  1 02:36:14 2026 GMT
            Not After : Apr  3 02:36:14 2026 GMT
        Subject: CN=69cc849f-9f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:7f:74:28:17:dd:9f:6e:84:c8:af:b0:52:
                    54:2c:2b:c6:50:23:b0:58:1f:0c:65:6a:c2:18:50:
                    e8:2b:a6:f1:08:c1:ae:e0:f6:6b:3e:ed:0e:8e:97:
                    c6:b7:a4:51:5a:e5:25:7d:4f:8d:d8:25:a4:dd:cd:
                    94:6a:b8:bd:3f:d3:ca:35:51:71:44:e0:ed:98:81:
                    a3:6c:ba:51:34:5d:d2:64:21:3f:a2:c1:3f:a7:2d:
                    5a:bf:b8:40:db:9f:7b:08:12:38:a4:5d:68:d4:ff:
                    90:d6:22:73:32:a4:8a:9c:78:fd:98:6a:b4:f5:ef:
                    c1:a2:c0:2f:39:f5:4b:28:7f:bf:79:bf:75:21:20:
                    d1:7b:68:38:9f:22:fc:66:8b:32:82:0a:c9:ed:0d:
                    59:af:2f:88:ca:1d:23:e1:f0:18:2f:c3:48:6c:bf:
                    3c:85:dc:76:7c:51:b9:57:31:10:6b:a0:0e:50:f2:
                    0c:f1:ed:a1:11:1f:24:77:06:d3:28:30:61:fd:96:
                    68:a5:71:69:26:6c:45:62:af:2e:09:7e:00:78:3c:
                    51:9c:ab:d8:04:2b:03:91:9f:b6:04:0c:82:f7:ea:
                    21:05:75:e1:8b:80:a1:2c:e7:72:1f:5b:16:fc:12:
                    f7:ae:4d:83:5b:1c:f6:6f:2c:69:e1:58:91:80:60:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:E1:D1:C1:9E:5E:CC:33:B5:68:8D:C0:54:4E:CC:1D:E2:DD:C7
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:37:fb:ff:f6:29:c6:48:22:8a:06:e1:eb:32:e6:99:66:0d:
         db:65:37:9b:72:77:31:f7:fb:2a:4d:84:7e:29:09:cd:34:9a:
         19:b4:63:68:b6:8c:4c:b6:bb:6f:e6:22:c8:12:b0:dc:d4:fd:
         f4:24:4e:eb:cc:e3:a6:7d:10:c1:09:15:c1:bf:9a:1a:f3:b3:
         ea:0b:4d:96:2b:b5:29:1b:d7:03:fe:b7:b3:55:c5:0c:93:d4:
         64:4a:2d:e2:c5:a6:62:85:f4:00:10:10:6a:15:7e:ad:75:e7:
         7f:f4:0f:a8:3f:85:f1:1c:b7:6b:50:01:8a:2e:41:5d:19:0a:
         5d:9c:6f:68:4d:be:d2:e2:25:84:7e:69:ff:72:df:40:7f:9c:
         dc:30:11:52:cd:1d:d6:06:ef:82:a1:b3:11:6b:d7:9b:da:bb:
         94:b5:bf:17:a4:a5:be:dd:c9:66:1b:e9:dd:ca:17:de:51:fe:
         2f:4c:2c:f5:a3:75:6e:b5:b5:95:ce:44:8a:90:88:c3:87:05:
         2d:ff:da:3e:b1:07:40:24:c5:b9:e0:90:ee:3c:05:3b:85:6a:
         3c:7c:db:d3:31:66:c9:88:79:69:d3:be:4a:18:fc:55:22:af:
         28:d3:f3:21:72:5f:0e:50:52:fc:6e:5e:71:cd:a2:fd:84:11:
         b7:fc:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 22:51:57 2026 by rpki-client