Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          GnrYvyariBeHOTSCBhpgUvyoTinQz/tZATqGDNRD+Bs=
Subject key identifier:   0A:E5:A8:26:AF:95:47:60:5C:B0:32:35:BA:BE:94:59:90:DC:75:33
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0357
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0352
Signing time:             Sat 25 Jul 2026 04:08:59 +0000
Manifest this update:     Sat 25 Jul 2026 04:08:59 +0000
Manifest next update:     Mon 27 Jul 2026 04:08:59 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: 5Un/KWvHGU9I/nyRF0imk9N5p799WE7DnYs7n+WtMB4=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Jul 25 04:08:59 2026 GMT
            Not After : Jul 27 04:08:59 2026 GMT
        Subject: CN=6a6436db-12a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:db:c9:c1:58:f4:d0:81:97:49:19:63:bf:
                    7f:a8:3f:e2:a0:ee:96:28:2c:8a:fc:70:ad:05:ae:
                    1d:6a:0d:a6:f5:38:ce:55:fe:e0:b7:6e:79:18:07:
                    14:be:22:3d:b1:71:6e:2b:48:0e:a5:c9:6d:77:20:
                    af:2f:4a:05:54:3e:a1:45:90:e0:7a:4c:57:31:b4:
                    0a:23:1f:5e:68:0f:d6:38:08:dc:49:43:9c:33:b1:
                    f5:d4:c8:c7:79:c9:15:75:c2:c5:a1:35:1a:06:26:
                    05:ea:54:25:a1:b7:08:11:f1:2f:6a:0e:53:4e:37:
                    8f:65:01:e1:91:48:8a:9d:9c:45:87:c4:be:69:34:
                    e2:78:6a:bd:de:ce:ad:61:d1:9b:31:2b:6c:c4:a2:
                    da:21:61:49:91:5d:44:28:04:49:d3:92:b6:48:0d:
                    82:e2:15:71:24:93:ae:e1:2b:b0:f8:ce:85:92:51:
                    f0:1b:8f:bb:15:39:4f:fc:d2:92:46:6b:d6:5d:57:
                    1b:ec:38:4f:58:70:d4:dc:1c:42:84:56:66:e4:28:
                    90:fa:a5:e5:7c:33:3c:4f:6a:d7:6c:60:5c:a2:1b:
                    da:91:9d:a1:7a:ab:11:71:bc:5f:b3:60:93:9d:ea:
                    c6:04:81:bd:ae:5c:9a:5f:4f:8f:83:47:66:42:7b:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E5:A8:26:AF:95:47:60:5C:B0:32:35:BA:BE:94:59:90:DC:75:33
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c2:6c:4e:8c:aa:67:bd:3b:84:99:49:6c:9e:e9:fd:cf:7e:
         52:ac:84:34:ec:45:56:79:02:17:8f:85:54:94:18:ae:0e:e4:
         17:81:17:95:28:31:60:5b:b8:3f:af:1f:a0:4c:a7:96:18:79:
         34:03:e9:18:d9:17:18:9c:da:da:bb:4b:1c:f1:48:86:e4:a0:
         7d:c8:d3:00:36:ac:55:bc:fe:74:24:67:49:14:62:e9:fc:6a:
         6f:a4:ea:9d:6b:62:93:0a:5a:16:13:d9:46:ac:5d:ed:a5:92:
         62:93:d9:50:3c:20:ae:7c:6c:4c:f4:a3:87:a4:d8:83:2c:0a:
         16:38:72:73:ed:70:1a:3e:4a:89:a6:f1:ad:84:2b:d8:5b:94:
         b4:72:d3:8f:1f:6c:5c:c0:74:db:f0:fa:4d:d2:13:d9:47:7c:
         21:11:c9:9d:6e:d3:6f:1b:1b:05:85:19:b0:2c:2d:05:46:88:
         1c:76:40:5d:fd:9e:ba:48:2e:7a:d2:4a:39:cf:e7:f3:9c:8a:
         71:fa:ad:96:2f:ea:41:d5:a8:d7:2a:eb:16:ec:2e:b3:52:45:
         18:18:f0:cd:b7:62:98:51:87:b4:9d:43:42:27:d1:b7:1a:69:
         5a:bb:6c:1b:ca:d8:a2:72:55:d7:72:ac:29:b7:3b:4d:3b:ba:
         15:0f:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 00:23:15 2026 by rpki-client