Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          4t/R16E7zuwUjjLHXObIcj50RHuSRKAr0ay7tGBK424=
Subject key identifier:   4C:1E:51:01:4F:8D:0E:40:3B:B6:38:56:A4:5B:7D:71:DC:ED:34:38
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       0A40
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          0A35
Signing time:             Tue 05 May 2026 01:22:07 +0000
Manifest this update:     Tue 05 May 2026 01:22:06 +0000
Manifest next update:     Thu 07 May 2026 01:22:06 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: gj5pT1JRrGhZErCxL/71atcnJwacvlh/fuJJaMYURdg=)
                          2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624 (0xa40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: May  5 01:22:06 2026 GMT
            Not After : May  7 01:22:06 2026 GMT
        Subject: CN=69f9463f-fea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:59:08:9d:39:47:12:c5:28:1c:b5:6e:16:
                    bd:fe:77:ef:94:52:98:ee:fd:01:c0:d3:dd:bd:fa:
                    9c:96:08:2d:24:84:14:ca:29:b0:95:eb:35:05:d5:
                    72:a5:c3:60:8d:99:62:0e:d6:05:aa:7d:57:a2:34:
                    1b:ab:11:1c:a3:17:e4:9b:8c:ee:80:3e:50:35:68:
                    9a:45:48:0d:fb:a8:d6:b1:b4:ec:06:fc:4f:69:fd:
                    90:56:43:3d:5e:11:ad:91:b3:20:db:a9:33:ef:8a:
                    53:50:dc:01:9e:d6:da:a0:64:05:7f:7a:70:bc:1b:
                    c3:ac:6b:de:ad:9b:5f:ef:43:37:b6:a0:0a:ee:a9:
                    bb:df:38:5c:34:29:35:68:fd:ba:f1:24:95:21:cd:
                    9c:8f:18:c8:75:a7:95:20:a7:ee:ed:1e:f7:45:6d:
                    3d:00:ea:96:a9:47:bf:ea:fb:fd:14:17:66:76:de:
                    e4:4b:9c:1d:4f:94:0d:08:6b:1f:f4:3c:a9:de:ad:
                    0d:77:e3:a2:3e:c3:c7:6a:57:87:f0:70:98:c1:86:
                    3b:ec:a5:e6:da:e5:a6:5b:a8:9e:2e:f1:1f:50:38:
                    f2:2e:16:a5:6b:a5:ad:1d:4e:e6:db:0f:9a:5c:f9:
                    8f:e5:f6:74:1a:15:9f:b2:83:5f:8b:26:eb:d2:d4:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1E:51:01:4F:8D:0E:40:3B:B6:38:56:A4:5B:7D:71:DC:ED:34:38
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1f:df:2d:b7:f6:a9:fb:13:72:5b:bc:6b:be:9a:5e:de:e9:
         7a:39:6e:b9:67:1c:ea:bb:af:eb:e4:62:65:4f:38:1f:5f:f0:
         d4:6f:7b:c6:5e:4c:ca:6f:c8:14:15:31:9b:33:ee:3a:98:96:
         14:1a:c3:4c:69:5a:98:80:fb:f2:98:68:14:03:26:3a:f2:28:
         fe:45:60:80:ac:0a:fa:d4:ab:96:aa:e6:0a:3c:36:ab:19:4c:
         f6:c2:32:e5:99:eb:f3:08:cd:9e:9e:7a:a3:11:fd:fa:49:dc:
         a8:cf:e3:bf:2c:8f:7b:cc:6d:6c:f5:e0:56:6c:ef:30:23:c0:
         5c:8c:07:a6:94:35:54:5c:ac:a3:29:e5:41:f1:6b:a9:09:29:
         e3:cd:ef:af:9e:7d:a4:63:99:72:19:4d:1f:d5:ca:31:92:97:
         37:46:b5:31:e5:25:79:2b:93:87:e9:cf:e5:7f:b8:c1:a6:46:
         ad:0d:83:27:d6:9b:2c:f4:aa:44:b3:92:dc:bd:a1:9d:d0:3f:
         25:67:fb:54:76:80:78:39:44:b6:6e:07:51:48:59:45:5b:11:
         b5:34:e4:51:13:67:ee:4d:30:63:7e:15:23:14:65:ff:00:ba:
         88:a4:96:d6:03:6f:0d:21:e1:04:98:56:28:a8:f6:7a:b9:f8:
         d8:ff:02:f6
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUZBMzZBUjExMC8GA1UEBRMoQzVGODYxNDhBNDQxMTZBNjI5MkMwMDhBMDlCNEU3
NUI4QkQ5REExRDAeFw0yNjA1MDUwMTIyMDZaFw0yNjA1MDcwMTIyMDZaMBgxFjAU
BgNVBAMTDTY5Zjk0NjNmLWZlYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzvlkInTlHEsUoHLVuFr3+d++UUpju/QHA0929+pyWCC0khBTKKbCV6zUF
1XKlw2CNmWIO1gWqfVeiNBurERyjF+SbjO6APlA1aJpFSA37qNaxtOwG/E9p/ZBW
Qz1eEa2RsyDbqTPvilNQ3AGe1tqgZAV/enC8G8Osa96tm1/vQze2oAruqbvfOFw0
KTVo/brxJJUhzZyPGMh1p5Ugp+7tHvdFbT0A6papR7/q+/0UF2Z23uRLnB1PlA0I
ax/0PKnerQ1346I+w8dqV4fwcJjBhjvspeba5aZbqJ4u8R9QOPIuFqVrpa0dTubb
D5pc+Y/l9nQaFZ+yg1+LJuvS1GZVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUTB5R
AU+NDkA7tjhWpFt9cdztNDgwHwYDVR0jBBgwFoAUxfhhSKRBFqYpLACKCbTnW4vZ
2h0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGQTM2L0FENDNGOTA2ODEzOTExRTk5MjhCMzgxQUY4QUVBMjI4L3hmaGhT
S1JCRnFZcExBQ0tDYlRuVzR2WjJoMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hmaGhTS1JCRnFZcExBQ0tDYlRuVzR2WjJoMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUZBMzYvQUQ0M0Y5MDY4MTM5MTFFOTkyOEIzODFBRjhBRUEy
MjgveGZoaFNLUkJGcVlwTEFDS0NiVG5XNHZaMmgwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxH98tt/ap+xNyW7xrvppe3ul6OW65Zxzq
u6/r5GJlTzgfX/DUb3vGXkzKb8gUFTGbM+46mJYUGsNMaVqYgPvymGgUAyY68ij+
RWCArAr61KuWquYKPDarGUz2wjLlmevzCM2ennqjEf36Sdyoz+O/LI97zG1s9eBW
bO8wI8BcjAemlDVUXKyjKeVB8WupCSnjze+vnn2kY5lyGU0f1coxkpc3RrUx5SV5
K5OH6c/lf7jBpkatDYMn1pss9KpEs5LcvaGd0D8lZ/tUdoB4OUS2bgdRSFlFWxG1
NORRE2fuTTBjfhUjFGX/ALqIpJbWA28NIeEEmFYoqPZ6ufjY/wL2
-----END CERTIFICATE-----
Generated at Tue May 5 22:12:59 2026 by rpki-client