Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          xT5B8hNCxkD2GRdwdYJ+Li0+bgUaNAZcIHJzNdCEF88=
Subject key identifier:   A9:67:7C:89:31:97:7A:15:56:73:D9:60:EA:FF:2E:E4:4D:60:C9:3B
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       0A6D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          0A6C
Signing time:             Thu 06 Aug 2026 01:30:11 +0000
Manifest this update:     Thu 06 Aug 2026 01:30:10 +0000
Manifest next update:     Sat 08 Aug 2026 01:30:10 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: DGi0+hvGqzKIJBq69sPixA59nT3Q0GzI11Mpawqri+A=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Aug  6 01:30:10 2026 GMT
            Not After : Aug  8 01:30:10 2026 GMT
        Subject: CN=6a73e3a2-681f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:c5:29:b5:5c:5a:94:a8:5c:10:77:10:55:
                    38:9e:17:31:38:c8:57:67:38:d2:16:5b:14:9d:1f:
                    e2:e7:03:9f:00:2e:7f:7d:5e:f8:95:3c:10:39:47:
                    b7:0a:de:41:0f:74:6a:95:86:b4:fd:6b:9e:43:8b:
                    46:41:08:b0:64:06:1f:8e:c3:fa:ef:d6:7b:2a:cf:
                    ec:cc:e7:c9:12:ee:a0:c7:0b:ae:42:f2:56:09:0f:
                    fc:b6:cd:12:d3:f8:bd:2e:c0:87:9e:8d:ba:f9:7a:
                    f9:0a:36:9c:10:7e:5e:69:77:3d:70:f9:15:44:1e:
                    1d:41:92:61:5f:3a:78:42:1f:0a:2d:d2:66:3b:a0:
                    c5:da:51:a2:6b:62:f0:05:4e:85:ff:8b:b2:8c:60:
                    ec:18:bc:46:5e:00:c2:9c:ad:1e:6b:5a:1c:cc:bf:
                    75:71:e6:f4:eb:f9:c0:82:12:cb:2f:43:7b:4b:96:
                    81:7f:0d:9d:33:34:c2:cc:94:47:8c:dd:fe:12:f5:
                    2e:10:ee:07:c2:ea:b8:0b:97:e8:1f:ba:ed:bf:4f:
                    a7:7a:eb:46:73:1e:ff:b4:f1:70:94:d7:43:c3:f2:
                    71:c9:de:c7:1f:5f:6c:61:b8:2a:36:29:c2:40:29:
                    13:6f:34:a1:4f:02:ff:8d:ba:56:83:db:c8:6c:87:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:67:7C:89:31:97:7A:15:56:73:D9:60:EA:FF:2E:E4:4D:60:C9:3B
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:a8:33:48:04:3e:96:21:00:50:0c:91:4b:c8:55:ec:a3:
         b0:dc:f1:e1:c5:05:15:2f:1b:98:d5:f1:12:ed:34:5b:7d:62:
         c4:dd:1a:dc:cb:a7:b8:2c:28:4c:df:ee:0f:7c:76:ee:4c:24:
         e9:0e:6d:ef:fd:c5:d0:b9:da:5f:56:fb:28:72:f4:bb:b8:8d:
         8a:68:e9:90:c4:15:d0:67:e0:d3:ba:d4:4f:08:09:a3:32:86:
         8d:ab:f4:4e:af:08:2f:9a:31:a6:35:82:09:43:cb:f9:2f:7a:
         dc:70:d1:ef:3a:dd:77:9d:65:93:d1:bb:f6:10:e6:08:ea:40:
         52:f7:31:17:15:b0:ee:9e:ad:82:ee:f7:82:df:af:85:2e:46:
         93:fa:fd:82:aa:7b:20:a9:24:a3:83:b0:57:e4:cf:bb:af:d1:
         f0:3f:ff:10:05:ff:02:ee:a9:59:b8:0f:ba:b3:7a:25:a6:00:
         11:31:ad:3f:1d:d1:31:20:28:49:bb:b3:8c:b7:d8:ef:82:ed:
         9b:12:58:47:21:44:60:21:fa:36:f4:13:9f:d0:02:7c:8a:b7:
         76:f0:82:1c:8f:5b:ad:c6:b4:30:1c:be:90:81:b6:97:0b:4b:
         6b:6a:74:69:71:70:a6:a7:86:d4:9b:cf:ae:65:11:e0:b3:68:
         9f:d6:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 15:11:06 2026 by rpki-client