Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
File:                     DjU23jQviMVeSslMS36nCgwn6aE.mft (raw, json)
Hash identifier:          gN7U+xk4HuliESUCivWp07KuFzWH9zVFO1sIjZTxzoc=
Subject key identifier:   18:80:E8:06:81:B7:84:16:07:C0:32:46:D2:E4:93:54:97:F5:E2:AF
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Certificate issuer:       /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial:       06D9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
Manifest number:          06D7
Signing time:             Tue 24 Mar 2026 02:39:25 +0000
Manifest this update:     Tue 24 Mar 2026 02:39:24 +0000
Manifest next update:     Thu 26 Mar 2026 02:39:24 +0000
Files and hashes:         1: DjU23jQviMVeSslMS36nCgwn6aE.crl (hash: 9cHsD+/Z7+eO9MpSxHphvMr5i1IpREpoR8ZiHaZiqc4=)
                          2: A6E483ACF13D11EBB28E971FD8A014CE.roa (hash: tXqfjeHuKCyrjlrfXizxneaHbdNneJ3cppKugGAFdHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                          rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 26 Mar 2026 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
        Validity
            Not Before: Mar 24 02:39:24 2026 GMT
            Not After : Mar 26 02:39:24 2026 GMT
        Subject: CN=69c1f95d-dc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:28:9b:c2:34:36:65:03:ad:a3:9f:bc:f2:
                    24:5d:b3:7d:15:1e:c2:67:fc:84:33:b9:01:ee:e6:
                    ce:5a:52:42:08:f0:63:c5:f0:38:1c:15:89:37:51:
                    e8:65:f2:ad:7c:6e:9e:cf:51:91:bb:cd:23:d4:b7:
                    55:67:9d:02:d3:f6:1e:87:72:26:e1:70:b3:20:aa:
                    b3:24:e8:d3:e6:5a:ec:08:28:6d:04:0e:be:1f:95:
                    c1:4f:a0:8c:fc:d2:84:1b:b3:ab:f3:36:14:33:9e:
                    c5:1d:87:d3:ad:b7:2f:30:99:99:40:26:7e:77:b9:
                    10:74:c4:cb:69:a7:c7:e5:f7:7d:5f:5b:4a:56:06:
                    54:7a:21:5b:75:b2:1e:50:4b:74:a5:4f:66:36:60:
                    da:9b:23:21:2d:46:ed:a7:6d:68:eb:7d:6b:0c:d2:
                    ad:e8:65:b4:8e:d6:17:f5:6f:06:cd:ce:b1:ce:e8:
                    e3:db:fc:6b:ff:b6:02:94:9c:af:61:1c:bf:3a:3b:
                    68:9a:ed:25:78:04:20:83:63:2a:20:9d:2f:c5:dc:
                    a8:3f:23:a4:c9:cc:8f:dd:e1:09:a2:ee:77:70:97:
                    4c:c0:35:69:65:d5:6e:00:e9:df:f6:85:f7:d6:5c:
                    49:d8:07:8b:95:d8:e1:c3:68:4d:f1:aa:e2:ae:b7:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:E8:06:81:B7:84:16:07:C0:32:46:D2:E4:93:54:97:F5:E2:AF
            X509v3 Authority Key Identifier:
                keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:37:cb:a5:09:16:95:fa:75:86:ca:c9:22:d1:ee:0d:9c:08:
         80:f1:43:3d:31:c6:3c:ec:04:87:a2:fd:13:31:21:36:2c:51:
         40:e9:46:2d:3d:03:3b:3a:50:45:e9:57:71:fd:e7:ac:cd:a1:
         fd:3d:29:6e:ba:1a:f9:4e:d6:4c:71:39:3f:8d:d4:e5:2d:e9:
         ee:56:bb:68:42:ac:3f:3c:8a:f6:ad:c1:83:89:b7:5f:57:79:
         b4:e4:8f:66:9e:1c:a3:2f:8a:7d:1a:73:e0:a5:7c:40:28:ce:
         34:ca:ac:84:2f:17:8c:b5:f8:c7:b7:ea:1d:5a:95:05:ee:71:
         2a:22:88:ef:de:9b:f7:93:b0:17:3c:54:18:82:b9:16:d4:60:
         38:40:9a:c7:02:8f:75:17:5d:45:00:26:e7:82:40:08:d5:be:
         88:56:09:d8:c1:b6:b2:c1:30:c9:e0:f2:e9:12:2d:4b:15:4a:
         63:a4:03:79:da:10:9b:f4:ca:48:47:0e:4d:31:ab:10:68:86:
         23:09:60:6b:d6:49:af:c5:a5:dd:0f:65:ab:4e:5e:c5:09:f9:
         c3:53:68:a8:09:0f:ac:43:db:15:bc:c3:2a:b2:de:ad:9f:ff:
         36:86:7e:b0:4e:59:c2:22:41:78:3e:67:e0:c3:58:06:fe:3d:
         7f:44:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 19:47:24 2026 by rpki-client