Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
File:                     5PfkpBui3-Gkmtw2NMzweTXpIRg.mft (raw, json)
Hash identifier:          ALI90a9uSlqGpMSHWK+o8lrwB0qONCYiqWi7FnoDwBg=
Subject key identifier:   30:40:80:02:7D:7C:36:54:F7:53:1F:6D:C1:C7:0B:A2:9D:FB:E2:F7
Authority key identifier: E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
Certificate issuer:       /CN=F368356FAR/serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
Certificate serial:       0129
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
Manifest number:          0127
Signing time:             Tue 05 May 2026 05:02:05 +0000
Manifest this update:     Tue 05 May 2026 05:02:04 +0000
Manifest next update:     Thu 07 May 2026 05:02:04 +0000
Files and hashes:         1: 5PfkpBui3-Gkmtw2NMzweTXpIRg.crl (hash: ysdqeeiyuee76cHeskQ3UG1qiXKEACmS6EFzZwPl/gs=)
                          2: 5BCF46A8923911F0BEE309F5DAE4EC9C.roa (hash: ncq+Mwbrx6oQKK1sHldvuf8E9iLus0kj4fB63aqtMb4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                          rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAR, serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
        Validity
            Not Before: May  5 05:02:04 2026 GMT
            Not After : May  7 05:02:04 2026 GMT
        Subject: CN=69f979cd-c1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:7f:04:cb:65:a0:02:01:ce:d6:4a:79:2b:
                    d1:fd:aa:76:4b:50:9a:4d:0e:43:5e:e7:4b:91:f5:
                    f6:aa:b3:bc:59:57:8d:ec:14:6b:02:cf:15:33:f5:
                    21:a4:bc:bb:06:79:94:14:2c:04:ed:72:81:52:54:
                    14:db:e8:78:da:0e:ad:04:1a:3a:6d:68:60:a5:73:
                    33:4d:3c:8a:3e:80:63:f0:29:ef:cf:ec:ae:7c:30:
                    4f:38:bd:08:60:18:08:ff:77:d2:8f:39:0c:cd:7b:
                    5e:31:3d:e2:0a:40:6f:18:33:e4:90:df:cd:1d:85:
                    39:83:fa:54:08:d3:01:0d:89:ed:a5:1d:8e:4b:fb:
                    ed:f3:c3:4a:ea:3f:de:99:7a:f0:86:bc:f9:99:ec:
                    04:af:23:67:bc:6e:e4:a8:a5:7b:b2:2a:b0:f1:3a:
                    c7:bd:df:ca:20:bd:03:3c:b1:f8:d0:aa:84:c5:72:
                    bc:82:5f:08:7c:45:c5:e4:5d:46:3d:ab:e0:d7:05:
                    e7:eb:e6:1a:89:61:3d:da:a6:75:a3:61:79:ea:a7:
                    77:2f:9a:68:64:52:3b:4a:0c:26:5d:c6:a0:79:49:
                    10:a0:08:75:4d:6b:64:23:d9:e3:69:4b:33:3d:b5:
                    c1:a7:5d:75:2d:3a:17:26:e5:89:77:99:14:d3:f1:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:80:02:7D:7C:36:54:F7:53:1F:6D:C1:C7:0B:A2:9D:FB:E2:F7
            X509v3 Authority Key Identifier:
                keyid:E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:4e:6a:b7:2a:5a:25:08:89:90:00:bd:c4:4a:54:95:0c:
         e7:ed:67:a6:e9:2b:73:81:d7:12:d2:70:7b:f2:fe:b9:91:d7:
         6d:56:15:4a:b9:c5:0c:c0:5b:89:87:97:5c:ed:d6:ce:c7:a5:
         2a:75:13:9a:a5:88:36:76:50:93:ef:c0:39:31:3b:5d:0b:bb:
         93:1c:6d:0b:d7:bd:44:2e:98:d7:13:d7:19:0a:b6:89:3d:bc:
         ff:01:17:e0:83:ea:fd:de:f1:3d:55:6d:9d:dd:1f:64:bd:e7:
         c9:71:6e:e1:f0:3b:64:0e:d7:b7:5a:ac:6e:0f:73:57:5d:f3:
         9c:24:1d:9b:c8:1e:0b:c0:9b:34:e1:e6:44:10:0c:b5:49:8c:
         19:7f:22:9e:56:ef:e0:40:db:30:d7:26:9e:38:69:ab:f8:b2:
         82:49:e5:8d:db:88:cb:d7:72:06:79:1a:0a:b3:1e:f9:6b:09:
         e4:00:7b:fa:01:a4:7c:77:e0:eb:16:ad:d6:7c:02:9e:2d:48:
         c5:e3:4c:f4:53:db:8a:84:4f:94:98:df:62:f7:85:e7:7a:18:
         5f:4e:72:c6:7f:8c:e7:0b:4d:86:4c:0f:bb:4c:09:d1:fd:94:
         3c:97:13:78:ca:25:80:ef:77:7f:d7:1d:1b:1b:a2:ae:3c:b8:
         64:9c:54:cb
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICASkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODM1NkZBUjExMC8GA1UEBRMoRTRGN0U0QTQxQkEyREZFMUE0OUFEQzM2MzRDQ0Yw
NzkzNUU5MjExODAeFw0yNjA1MDUwNTAyMDRaFw0yNjA1MDcwNTAyMDRaMBgxFjAU
BgNVBAMTDTY5Zjk3OWNkLWMxYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIcn8Ey2WgAgHO1kp5K9H9qnZLUJpNDkNe50uR9faqs7xZV43sFGsCzxUz
9SGkvLsGeZQULATtcoFSVBTb6HjaDq0EGjptaGClczNNPIo+gGPwKe/P7K58ME84
vQhgGAj/d9KPOQzNe14xPeIKQG8YM+SQ380dhTmD+lQI0wENie2lHY5L++3zw0rq
P96ZevCGvPmZ7ASvI2e8buSopXuyKrDxOse938ogvQM8sfjQqoTFcryCXwh8RcXk
XUY9q+DXBefr5hqJYT3apnWjYXnqp3cvmmhkUjtKDCZdxqB5SRCgCHVNa2Qj2eNp
SzM9tcGnXXUtOhcm5Yl3mRTT8fvRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMECA
An18NlT3Ux9twccLop374vcwHwYDVR0jBBgwFoAU5PfkpBui3+Gkmtw2NMzweTXp
IRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzNTZGL0VDMzU0RkE2NjZFNDExRjA4MUIwOEM5MkRBRTRFQzlDLzVQZmtw
QnVpMy1Ha210dzJOTXp3ZVRYcElSZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzVQZmtwQnVpMy1Ha210dzJOTXp3ZVRYcElSZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODM1NkYvRUMzNTRGQTY2NkU0MTFGMDgxQjA4QzkyREFFNEVD
OUMvNVBma3BCdWkzLUdrbXR3Mk5NendlVFhwSVJnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlsE5qtypaJQiJkAC9xEpUlQzn7Wem6Stz
gdcS0nB78v65kddtVhVKucUMwFuJh5dc7dbOx6UqdROapYg2dlCT78A5MTtdC7uT
HG0L171ELpjXE9cZCraJPbz/ARfgg+r93vE9VW2d3R9kvefJcW7h8DtkDte3Wqxu
D3NXXfOcJB2byB4LwJs04eZEEAy1SYwZfyKeVu/gQNsw1yaeOGmr+LKCSeWN24jL
13IGeRoKsx75awnkAHv6AaR8d+DrFq3WfAKeLUjF40z0U9uKhE+UmN9i94Xnehhf
TnLGf4znC02GTA+7TAnR/ZQ8lxN4yiWA73d/1x0bG6KuPLhknFTL
-----END CERTIFICATE-----
Generated at Tue May 5 22:12:14 2026 by rpki-client