Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          zMFDxELAFrQW61V/tKdIc1gO1sfAnpD1VY3+pCOkN3A=
Subject key identifier:   D3:4D:5B:82:36:66:57:F7:75:50:1E:A8:BB:DE:EA:1A:77:B9:B0:B0
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       0556
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          0554
Signing time:             Tue 24 Mar 2026 03:24:04 +0000
Manifest this update:     Tue 24 Mar 2026 03:24:03 +0000
Manifest next update:     Thu 26 Mar 2026 03:24:03 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: uP14uZzo3XyDOapNLTrtqHJZWHsZm2ixU9UNAPxxqGo=)
                          2: 526F2A62732611EEA96ED8714AD9E6FC.roa (hash: Ukkb5AVQsO1Gjuu3k0PEd18RL/gRcbSRynh/B4Aa3tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 26 Mar 2026 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Mar 24 03:24:03 2026 GMT
            Not After : Mar 26 03:24:03 2026 GMT
        Subject: CN=69c203d4-c97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:14:7e:e6:46:80:1e:c2:82:e7:91:95:29:
                    25:19:48:ed:0f:65:bf:b0:59:3f:c6:29:8b:93:2f:
                    f9:24:74:e5:8b:4b:96:1a:f8:df:5c:24:8c:ce:27:
                    cc:b9:c2:c5:3e:b7:b6:8d:8e:f3:77:da:fc:b2:7c:
                    7b:12:ab:fc:6f:46:a6:9f:e6:6d:48:e3:a3:d9:48:
                    d5:a4:be:2e:c0:1c:16:85:fc:27:30:06:f3:15:5f:
                    9e:75:b1:b6:98:40:fc:f1:ce:9f:24:fb:84:0c:2e:
                    64:da:a9:d2:d9:9d:8a:d3:03:bf:02:33:fc:08:8a:
                    54:fa:c1:0a:16:0a:d4:ea:bc:9b:92:87:ae:47:da:
                    8a:00:94:c8:ab:19:2b:82:be:e5:7b:10:81:ee:a2:
                    e2:20:c7:74:b6:74:7d:61:17:6e:2a:8d:dd:4c:03:
                    16:57:08:46:e6:55:43:57:cd:61:20:51:64:1e:b0:
                    41:66:6f:2e:c2:0d:35:02:a7:81:27:59:71:1c:5c:
                    7c:0a:8e:15:b3:ec:46:b4:a5:77:c2:20:91:d5:14:
                    4e:74:5f:df:d7:23:a1:a2:e0:6b:31:f5:84:5c:23:
                    29:0b:e9:c2:73:77:1d:1c:03:26:dd:3a:17:f8:90:
                    ca:d1:71:18:d2:da:36:0a:9f:02:2a:2e:90:9d:7e:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:5B:82:36:66:57:F7:75:50:1E:A8:BB:DE:EA:1A:77:B9:B0:B0
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:37:d4:bd:0b:28:33:36:e3:d7:cc:5f:fd:03:8f:80:2a:
         6d:53:48:5b:a5:bb:13:f0:0e:2e:09:1e:c1:d3:55:8a:cf:c6:
         e2:d2:62:52:be:76:2d:d5:87:f6:fc:1c:39:87:85:8b:fb:5c:
         65:ca:db:3c:e0:ae:e3:53:8c:1f:fa:6a:38:c5:23:4b:c5:b2:
         01:a4:00:9e:0d:50:d4:4b:b3:97:91:c5:f7:4a:9d:f5:43:fe:
         c8:cf:f7:c1:ae:ed:5a:b3:f0:9d:a1:bd:c2:4a:7f:6b:bc:1c:
         56:aa:9e:2d:a4:7f:3a:ae:35:c1:87:78:2e:48:d3:e4:2e:62:
         42:70:d5:76:a5:f4:78:9d:96:00:21:99:1b:05:2d:0f:fa:1a:
         42:ee:f0:a4:d6:59:b4:4a:e2:9b:3b:1e:a4:af:f3:c2:5f:18:
         72:4f:82:37:46:ec:05:dc:fc:3c:9d:b1:5d:5b:ea:27:0c:62:
         f3:6d:24:c9:ec:ac:63:d9:43:4b:0f:5a:5f:c8:1f:5d:16:8d:
         7d:42:0f:7b:de:3a:c5:a6:95:41:db:98:99:f5:aa:95:d5:de:
         07:c9:b2:22:ee:1d:d4:65:02:97:f7:f4:8e:67:c3:d0:c9:1f:
         29:30:b4:af:1e:bc:51:cf:a8:95:a4:5c:ba:23:71:36:f5:88:
         ff:9a:8c:ac
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTZFNUZBUjExMC8GA1UEBRMoOEIyOURDNDEzRUI1MDJCRDZEREVBMzA2NDYxRTFB
N0ExMDg0QzVGNjAeFw0yNjAzMjQwMzI0MDNaFw0yNjAzMjYwMzI0MDNaMBgxFjAU
BgNVBAMTDTY5YzIwM2Q0LWM5N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN7BR+5kaAHsKC55GVKSUZSO0PZb+wWT/GKYuTL/kkdOWLS5Ya+N9cJIzO
J8y5wsU+t7aNjvN32vyyfHsSq/xvRqaf5m1I46PZSNWkvi7AHBaF/CcwBvMVX551
sbaYQPzxzp8k+4QMLmTaqdLZnYrTA78CM/wIilT6wQoWCtTqvJuSh65H2ooAlMir
GSuCvuV7EIHuouIgx3S2dH1hF24qjd1MAxZXCEbmVUNXzWEgUWQesEFmby7CDTUC
p4EnWXEcXHwKjhWz7Ea0pXfCIJHVFE50X9/XI6Gi4Gsx9YRcIykL6cJzdx0cAybd
Ohf4kMrRcRjS2jYKnwIqLpCdfvcDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU001b
gjZmV/d1UB6ou97qGne5sLAwHwYDVR0jBBgwFoAUiyncQT61Ar1t3qMGRh4aehCE
xfYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzUyRkU4OTdDMTg5NzExRUQ4MDU5QjlEMkYxMjIyNDY4L2l5bmNR
VDYxQXIxdDNxTUdSaDRhZWhDRXhmWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l5bmNRVDYxQXIxdDNxTUdSaDRhZWhDRXhmWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTZFNUYvNTJGRTg5N0MxODk3MTFFRDgwNTlCOUQyRjEyMjI0
NjgvaXluY1FUNjFBcjF0M3FNR1JoNGFlaENFeGZZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC9jfUvQsoMzbj18xf/QOPgCptU0hbpbsT
8A4uCR7B01WKz8bi0mJSvnYt1Yf2/Bw5h4WL+1xlyts84K7jU4wf+mo4xSNLxbIB
pACeDVDUS7OXkcX3Sp31Q/7Iz/fBru1as/Cdob3CSn9rvBxWqp4tpH86rjXBh3gu
SNPkLmJCcNV2pfR4nZYAIZkbBS0P+hpC7vCk1lm0SuKbOx6kr/PCXxhyT4I3RuwF
3Pw8nbFdW+onDGLzbSTJ7Kxj2UNLD1pfyB9dFo19Qg973jrFppVB25iZ9aqV1d4H
ybIi7h3UZQKX9/SOZ8PQyR8pMLSvHrxRz6iVpFy6I3E29Yj/moys
-----END CERTIFICATE-----
Generated at Tue Mar 24 20:16:12 2026 by rpki-client