Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          KW7M5lFyUeUK+bwUJaFLVzErys81wo/c5xC+sPD5quo=
Subject key identifier:   23:41:88:93:AE:54:8E:C6:26:AD:27:EB:6A:F5:74:5C:65:7A:FB:66
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       06FB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          06FA
Signing time:             Sun 21 Jun 2026 02:22:12 +0000
Manifest this update:     Sun 21 Jun 2026 02:22:11 +0000
Manifest next update:     Tue 23 Jun 2026 02:22:11 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: YqxdbgZJZPOCm0n/g93yA5jZC8hETZS0dC7bmXGcxEk=)
                          2: C93FE84E002211F184675EEADAE4EC9C.roa (hash: TnE7/LRtwIE2mvtxTz48ANwLuGsO5DbiYWo+sAJoECs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 02:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Jun 21 02:22:11 2026 GMT
            Not After : Jun 23 02:22:11 2026 GMT
        Subject: CN=6a374ad4-3c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:71:3d:90:5e:be:1e:f0:46:db:ff:e7:f6:
                    71:30:1f:2a:4d:e5:3c:cd:34:9c:de:ec:4d:66:60:
                    91:b5:c1:27:c6:f8:b0:04:16:23:60:0f:c3:27:22:
                    fe:b2:c8:ea:a6:32:7d:9c:d2:27:85:10:1f:51:da:
                    78:ca:49:28:42:5f:c3:c3:f3:08:36:e5:41:0e:c9:
                    ad:f2:ba:63:78:40:00:9a:32:19:08:16:7b:97:3c:
                    2f:06:06:0c:48:1c:83:fa:01:e7:73:a2:23:4c:ea:
                    63:db:d3:21:f8:d8:c8:49:55:3f:e6:ae:18:df:98:
                    a6:e2:79:76:d4:50:2e:e5:c9:6c:9c:b3:12:b2:ef:
                    4b:78:ff:ea:87:57:ed:7c:b4:4c:bf:e6:9c:75:29:
                    10:3b:6f:f9:c2:33:19:e5:71:3d:4d:60:e4:86:2e:
                    be:e9:6d:b1:9d:50:66:ee:92:2e:a7:eb:f8:57:b7:
                    06:4a:9a:c9:f9:1d:ed:64:03:fd:85:b2:09:26:3a:
                    19:77:89:d5:1f:59:ee:fb:9c:c8:f3:ab:5b:17:20:
                    83:fc:99:21:9b:0e:49:5c:63:b6:3e:10:bf:10:24:
                    a4:cd:58:6c:16:fc:3d:fc:6e:50:fa:96:a3:68:fd:
                    80:e7:f1:16:32:28:5e:c8:ce:7f:09:2c:1a:b9:bc:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:41:88:93:AE:54:8E:C6:26:AD:27:EB:6A:F5:74:5C:65:7A:FB:66
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4e:3c:9c:0d:d5:66:b8:81:9a:7f:21:89:17:5d:19:67:be:
         2e:b7:4b:fd:26:4c:22:f7:43:6a:3c:ea:e3:87:1f:ce:67:6d:
         6d:e2:ef:2e:54:bb:2b:f1:03:b2:9b:ce:e6:08:58:a5:5d:3a:
         b5:76:8e:3b:1a:3b:a8:26:87:b2:49:79:85:71:b8:e5:52:a8:
         f3:1e:65:b9:89:7c:29:a7:29:6b:3d:9f:e5:69:ec:56:d5:b8:
         0c:d6:12:a3:92:85:2c:87:bd:e5:a1:77:04:cd:8a:29:83:92:
         bc:ad:07:e7:de:75:b3:85:45:c8:b2:6a:45:f4:2e:5f:aa:82:
         36:20:e2:be:f8:65:af:fe:b2:15:d1:9a:d1:f0:25:dc:25:3a:
         5d:cb:7b:31:9d:3c:1a:13:19:cd:cf:b0:8f:58:69:71:ea:fa:
         2d:fe:1e:93:22:41:68:bd:ac:e6:92:8f:66:49:25:ca:e8:c2:
         9c:8e:e4:d9:2f:36:16:ce:cf:96:8a:4c:d8:3c:dc:7e:0d:4e:
         a7:d1:d7:03:5d:73:50:6e:5c:0c:aa:85:34:b4:bd:fe:6b:31:
         19:a8:c5:ea:4a:2c:06:c3:af:9e:12:df:a3:3e:15:8b:82:dd:
         42:dd:18:42:f6:f0:79:0f:8d:97:cc:a2:c0:eb:b5:a2:58:8b:
         0f:06:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 03:58:35 2026 by rpki-client