Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          L3AOkHrVlpfVklLv5z4LEefcsRoLCf0YTgu2wxqGfw8=
Subject key identifier:   ED:B1:D4:65:AB:5C:AC:88:F1:0E:FD:69:22:E2:AA:D1:FF:69:8E:92
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       0589
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          0587
Signing time:             Tue 05 May 2026 02:52:50 +0000
Manifest this update:     Tue 05 May 2026 02:52:49 +0000
Manifest next update:     Thu 07 May 2026 02:52:49 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: X2swVW8UlBk6xf22tQaq1cMg+cWs87EWzsCWHhmT0tI=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: May  5 02:52:49 2026 GMT
            Not After : May  7 02:52:49 2026 GMT
        Subject: CN=69f95b82-8bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:2b:7e:4c:b4:e5:5e:ca:d1:71:37:f8:d5:
                    05:c8:29:18:e9:c8:88:e0:03:68:f6:55:c5:bb:51:
                    83:02:6a:b6:a0:1d:87:ac:bb:11:51:c6:f3:87:16:
                    41:1b:71:54:94:a0:02:c2:e9:b4:93:bb:34:29:c0:
                    29:b2:9c:3f:e1:67:b9:ec:ea:89:59:38:66:7f:2e:
                    4f:20:86:02:94:40:87:88:03:d2:e4:e3:90:47:6b:
                    08:17:73:d0:e2:ae:b6:a6:76:60:23:cc:91:fe:a3:
                    ea:fc:07:af:f2:dc:55:62:3e:d7:37:8f:86:47:6b:
                    b2:70:e9:4a:fd:b7:d8:10:b4:ed:d3:05:f0:33:8d:
                    8b:a0:9d:29:12:99:b7:b0:20:88:e9:1a:20:3c:7c:
                    86:cf:cd:60:23:20:38:f4:b0:07:1e:35:52:09:19:
                    82:2e:03:6f:70:06:e9:fb:d0:ec:34:84:f4:3e:dc:
                    65:82:b1:cc:94:5d:5c:57:eb:90:b5:44:66:3f:d9:
                    ca:5d:ac:4c:e0:a3:d6:d2:4d:38:20:04:1e:6d:be:
                    be:c7:d9:9d:29:5f:2c:8a:8b:ce:ce:9a:ab:f7:62:
                    7c:50:1c:75:09:55:2b:86:21:65:b6:40:40:21:20:
                    c5:4b:ae:01:a4:35:fe:10:f4:40:d1:43:74:98:b6:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B1:D4:65:AB:5C:AC:88:F1:0E:FD:69:22:E2:AA:D1:FF:69:8E:92
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:65:bb:cc:38:4e:90:3a:2b:78:2d:dc:c0:2b:2f:53:01:2c:
         b3:f1:bb:9d:53:8c:3c:0c:14:e3:2e:df:d4:a5:22:6b:7a:65:
         c9:e8:dc:26:e8:e5:86:89:c9:17:51:be:af:a1:02:7e:43:a0:
         ab:b4:aa:0e:a3:04:a9:21:70:ad:4c:80:d0:45:58:7d:2d:a0:
         0b:b4:d1:37:27:7a:72:6d:89:a2:49:43:d9:b9:e8:48:72:15:
         fc:cb:3b:44:ea:f9:49:45:5f:c8:e1:d3:2b:e8:5f:8d:6f:af:
         50:f7:31:ea:74:f9:e5:f3:8d:8f:69:65:56:44:d0:4e:97:17:
         dd:7e:80:9b:d0:ad:87:ea:79:30:76:99:29:5d:86:78:c5:07:
         eb:1c:d7:e8:d8:9c:ff:3b:f3:e9:12:64:1e:10:e7:85:f5:a3:
         27:1d:89:be:f5:fc:a5:cf:ce:34:0a:fd:38:d8:b9:db:0f:50:
         7c:b5:f2:37:55:c9:41:4a:e0:a0:b1:e9:d4:5f:25:f8:e7:12:
         d7:57:bf:e0:43:45:9f:d5:e6:b1:56:5b:21:15:35:62:04:5f:
         1e:d6:b0:61:a6:45:95:e9:6e:70:b0:5b:70:43:09:c8:42:38:
         0f:34:16:14:d6:39:56:96:c6:d8:98:6a:92:60:47:9b:45:2d:
         1d:4c:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:11:24 2026 by rpki-client