Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          C/QTgmb+aMI+iqRSmDdorl1xSy0c4MuPv0Azy4/OVwk=
Subject key identifier:   AC:F6:13:3A:D7:4F:DB:5E:D6:30:64:5B:AF:9B:51:FD:44:5F:45:10
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       02E9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          02E8
Signing time:             Tue 05 May 2026 04:11:42 +0000
Manifest this update:     Tue 05 May 2026 04:11:41 +0000
Manifest next update:     Thu 07 May 2026 04:11:41 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: f5SaSenpNansfNOk3vCjModb8PXm6sGEytST2GDp1os=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: May  5 04:11:41 2026 GMT
            Not After : May  7 04:11:41 2026 GMT
        Subject: CN=69f96dfe-c398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b9:0e:d5:8e:52:d3:c7:9c:00:71:35:45:57:
                    ab:da:71:4a:c8:b5:cd:41:6c:fa:6e:93:60:40:c1:
                    f8:a1:c8:27:94:5e:c6:07:30:45:d8:05:9a:82:89:
                    b7:7f:43:53:21:b3:82:28:e2:28:95:f3:49:43:1e:
                    7f:83:51:b8:7d:de:ba:22:5b:5d:d3:86:a6:b4:ec:
                    15:d1:3a:ec:fe:35:4a:e1:dc:4d:30:8f:87:f9:ec:
                    f3:c8:fc:e9:0a:5b:87:c3:a7:d5:89:8d:03:82:9f:
                    71:0a:ec:58:c6:6e:74:72:b7:b1:7f:12:13:14:5a:
                    16:cf:4f:73:80:66:d7:75:2e:d6:e6:45:29:e3:b6:
                    1c:d9:b6:1a:e1:0c:39:e5:a4:dc:ff:52:9e:20:1b:
                    96:8f:ee:af:61:97:52:f9:83:a6:79:70:c3:b1:a7:
                    94:53:fb:c8:e8:f1:c8:c0:c8:d7:be:ba:00:70:20:
                    ac:63:3d:3d:ee:22:bb:87:fe:f9:26:27:9f:81:03:
                    f6:c4:59:2d:f5:e4:4b:4d:7d:c4:01:5e:c8:8a:a3:
                    ae:5e:b9:f6:7b:22:42:d5:b7:0f:d6:ef:24:c0:26:
                    97:01:91:11:8a:69:95:7c:75:b3:1e:ac:6f:7f:73:
                    40:9d:09:7c:43:67:ca:ae:fd:20:8f:16:ef:23:94:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:13:3A:D7:4F:DB:5E:D6:30:64:5B:AF:9B:51:FD:44:5F:45:10
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ef:6a:1b:07:01:88:9e:b4:51:ed:43:e4:48:00:89:83:df:
         37:a5:54:4e:23:c6:19:60:77:65:14:91:ef:41:0b:a1:cb:37:
         71:ea:ca:42:4f:3f:87:fa:64:b6:83:ab:ca:fd:a4:c4:81:4d:
         f3:5e:e9:f5:5e:25:ac:88:d5:d5:7a:86:6a:1d:9e:a9:68:1b:
         11:20:5f:9d:03:bf:7f:28:eb:2d:cd:fa:40:84:31:0b:e7:af:
         09:3c:54:34:69:64:8d:a9:b6:67:33:a4:a6:b3:89:26:ad:71:
         87:ba:2a:6c:01:78:d8:e7:0f:97:9f:fe:16:fd:91:bc:83:45:
         49:d6:1e:8d:d3:06:1e:84:33:48:97:28:5c:4c:8e:fb:ae:06:
         1a:37:b4:3e:23:b3:8f:2b:44:32:a8:93:02:b1:e3:2e:34:4c:
         ed:58:e5:41:f4:bf:f7:3b:91:44:e3:83:e4:49:50:f4:de:a5:
         33:60:3a:cc:f0:7e:57:4a:52:c0:98:a1:08:95:96:63:9d:10:
         cd:22:31:91:d1:20:2a:00:e3:f2:b6:eb:53:aa:c4:f5:7e:ac:
         89:2b:6f:66:3c:66:ed:30:83:6e:d1:e8:cc:a6:6a:0f:29:ee:
         ac:ca:15:8d:a5:58:28:45:63:47:f4:a4:9a:40:3f:0d:42:ea:
         70:13:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:12:54 2026 by rpki-client