Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          w9sV0/MZFAV1VTMWBVpQwTDQgHupyduVaXVJlogJ7kE=
Subject key identifier:   44:55:C1:DE:AA:68:CD:A7:31:71:01:CC:BA:48:7A:2C:6A:05:D0:B5
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       02C7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          02C5
Signing time:             Fri 13 Mar 2026 03:41:18 +0000
Manifest this update:     Fri 13 Mar 2026 03:41:17 +0000
Manifest next update:     Sun 15 Mar 2026 03:41:17 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: R/fdLMw9/2TZUHL2sz8pCapHsasG2qe2Dxn7dNN7UAg=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Mar 13 03:41:17 2026 GMT
            Not After : Mar 15 03:41:17 2026 GMT
        Subject: CN=69b3875e-2b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:43:89:d9:04:4a:59:38:0d:83:63:4a:f3:73:
                    3f:75:aa:85:de:dc:d7:1c:94:2f:76:f8:a3:84:c1:
                    a6:f9:b4:3f:3a:4d:1c:09:9d:02:03:c7:b5:c8:f6:
                    6a:c4:0b:e5:75:a0:3e:09:f4:31:66:1f:a4:b4:0e:
                    60:f7:ae:54:59:5a:78:fd:ab:b5:ea:ed:47:7e:e3:
                    3d:a7:a7:9f:0e:6d:77:7a:66:99:5f:0a:85:4c:10:
                    8f:6a:83:f7:61:7f:16:ab:a0:35:6c:d1:a7:92:70:
                    97:5e:b9:ce:e2:d9:43:b4:df:18:10:d1:7a:68:80:
                    56:3b:1d:a4:28:09:38:4d:ab:58:94:ba:66:33:f8:
                    10:d6:35:51:cd:61:1a:7a:35:b5:b8:39:f2:ca:6d:
                    f6:a3:52:c4:be:dd:2d:68:80:1d:70:96:79:0c:4e:
                    67:9c:ba:65:3a:83:06:cc:4a:8c:76:37:c9:5e:24:
                    e6:1d:48:2c:49:2d:cd:03:5a:27:de:aa:ad:3f:a8:
                    13:77:7d:2f:7e:5f:4a:07:52:2c:1d:25:ab:5d:88:
                    bf:44:c8:f9:b5:57:06:64:15:1c:a9:94:84:b2:b5:
                    1d:7d:6a:91:29:0a:6a:17:fe:c1:91:b1:6e:f3:0d:
                    e9:02:6a:d3:c8:18:a1:6f:f5:7c:ec:c0:b4:ed:11:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:55:C1:DE:AA:68:CD:A7:31:71:01:CC:BA:48:7A:2C:6A:05:D0:B5
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ff:9f:a4:29:c9:3b:c5:1e:da:df:b4:15:f6:94:ed:b1:a3:
         7b:05:60:20:90:35:33:ba:21:db:2a:71:8f:90:fb:8f:f4:2f:
         c8:2f:5d:d4:19:a1:13:52:1b:65:4b:f5:e8:c6:26:b3:ca:3f:
         7d:42:ad:dd:30:30:e7:38:85:2b:c4:3f:10:ca:74:01:e8:06:
         71:e6:73:ba:45:95:6b:e3:71:ce:b4:d3:a0:a8:dc:2b:04:de:
         e8:0c:24:a5:86:f0:25:7d:e8:c2:ed:a5:47:b8:21:bf:b9:50:
         bb:dd:96:a2:b7:d4:9e:d7:32:f5:d6:50:65:5c:6f:bc:7a:7c:
         25:89:7c:16:32:10:15:5f:82:55:31:d7:03:93:58:13:3c:34:
         09:91:00:02:c9:48:e2:77:24:69:81:f6:ef:c7:0f:cb:97:09:
         e8:6d:a6:e2:cf:76:8a:f2:bf:19:61:78:69:4b:53:75:6d:6f:
         e6:15:74:88:fd:50:35:a6:1e:31:74:03:46:5e:26:52:fd:33:
         69:21:21:58:55:84:d4:53:50:ed:75:3a:93:77:b5:1a:48:86:
         bd:7c:cd:3f:b1:d0:ec:6f:eb:cf:f2:50:ff:80:3f:5e:dd:37:
         9b:2c:a9:64:7f:02:e9:a2:17:2d:dd:0a:ba:4b:b6:ef:30:69:
         4a:51:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:53:33 2026 by rpki-client