Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          mEJJQPFfTGmBr4CHkU1QkjC6uAH60WRBRlEnuoIoEIQ=
Subject key identifier:   43:76:56:E3:06:10:EB:C4:26:DD:93:F0:79:C4:E2:07:8C:BA:9C:3E
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       0A20
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          0A1F
Signing time:             Tue 05 May 2026 01:26:15 +0000
Manifest this update:     Tue 05 May 2026 01:26:14 +0000
Manifest next update:     Thu 07 May 2026 01:26:14 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: 3NyAzeLnLt+NO7Japn4lVdifiF2Fv1849cpqNMoazOQ=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2592 (0xa20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: May  5 01:26:14 2026 GMT
            Not After : May  7 01:26:14 2026 GMT
        Subject: CN=69f94737-d6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:3e:46:c9:74:a2:ec:ae:84:20:c3:51:f8:
                    13:f3:6b:c9:f5:04:cb:3c:bc:6a:e9:b3:b2:d8:61:
                    25:eb:9d:68:ba:c3:05:d4:a3:f4:60:a0:ba:3d:b0:
                    33:c2:cc:fa:79:83:70:dd:bc:9b:92:04:5b:99:9d:
                    41:2a:a1:f5:76:d2:a6:1b:66:b8:d2:a2:bb:a6:3c:
                    3a:7b:e9:a5:9a:13:d6:42:ff:83:1b:a3:d3:2c:86:
                    b0:8c:f0:a0:00:b4:74:f7:cc:35:50:bf:10:65:0a:
                    ec:65:5a:d0:6d:e7:a4:d8:cf:c2:0d:fe:f1:60:6e:
                    72:cc:b5:85:8b:65:05:82:08:08:67:d8:51:11:6d:
                    c3:a3:3b:8b:84:20:32:fc:85:e1:e4:20:90:ff:37:
                    04:fe:c1:ef:b2:22:0e:f7:74:7c:da:31:69:91:75:
                    a0:fd:4a:1a:59:30:01:8e:66:0a:60:bb:a6:06:79:
                    ea:54:ab:c7:74:28:72:9a:68:b1:fa:c4:8a:fa:28:
                    01:bd:89:4b:95:de:70:7e:ee:f2:06:13:1d:76:b1:
                    fd:96:e7:39:14:a3:48:f0:9f:be:10:3a:95:fd:41:
                    47:d3:3b:25:c2:93:de:37:a0:52:3e:b9:77:20:57:
                    38:fd:5c:c8:05:1c:d9:34:ee:50:f8:77:37:d5:ae:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:76:56:E3:06:10:EB:C4:26:DD:93:F0:79:C4:E2:07:8C:BA:9C:3E
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d3:2b:d7:42:63:3d:73:1b:f1:56:d1:8e:01:88:54:96:b4:
         1b:bb:a1:4c:a1:ee:e0:db:a5:32:5b:d3:e4:5a:7e:05:cc:c2:
         c9:1a:b3:1e:76:26:d7:3c:d0:c5:9b:8d:95:ad:9b:4c:db:21:
         e9:c1:c7:0d:ed:47:55:f3:96:af:3b:fd:ed:b8:ba:db:75:21:
         e3:7f:e6:05:16:f9:ad:93:9f:75:89:f1:49:2b:95:6e:52:84:
         97:36:85:cf:a2:45:fa:5b:46:10:0d:62:dc:48:46:3f:91:27:
         55:8b:7b:8e:9c:35:ac:3d:64:bd:90:37:75:7a:c4:f0:1c:9c:
         46:1b:3a:3f:1e:3a:03:86:aa:f9:41:d9:24:6d:be:f4:e6:c7:
         6c:b3:ca:8f:04:c1:d0:36:59:69:23:55:40:c8:4e:ea:42:4e:
         1f:33:b6:ba:a9:b6:eb:5c:6d:4c:2c:cc:10:bb:69:a8:5c:01:
         0f:cb:bf:36:54:d4:00:24:b5:bc:97:3c:e0:7b:68:3f:b6:56:
         4e:34:b3:df:1a:ba:67:9d:bb:96:61:a0:9d:2a:3f:3c:42:dc:
         63:ed:16:06:cf:7f:a0:94:4b:d5:15:47:b2:62:d7:cc:5d:f6:
         54:f9:6e:7e:d3:56:49:a7:28:90:e9:d5:d3:df:3b:95:49:7b:
         1d:fa:bc:df
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUE4ODhBUjExMC8GA1UEBRMoRTQ4RERBMTJGN0RCNDAzNTk0MTc4Q0E0QjhFRDQ2
RTY2MkFGOEVDQzAeFw0yNjA1MDUwMTI2MTRaFw0yNjA1MDcwMTI2MTRaMBgxFjAU
BgNVBAMTDTY5Zjk0NzM3LWQ2ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcKz5GyXSi7K6EIMNR+BPza8n1BMs8vGrps7LYYSXrnWi6wwXUo/RgoLo9
sDPCzPp5g3DdvJuSBFuZnUEqofV20qYbZrjSorumPDp76aWaE9ZC/4Mbo9MshrCM
8KAAtHT3zDVQvxBlCuxlWtBt56TYz8IN/vFgbnLMtYWLZQWCCAhn2FERbcOjO4uE
IDL8heHkIJD/NwT+we+yIg73dHzaMWmRdaD9ShpZMAGOZgpgu6YGeepUq8d0KHKa
aLH6xIr6KAG9iUuV3nB+7vIGEx12sf2W5zkUo0jwn74QOpX9QUfTOyXCk943oFI+
uXcgVzj9XMgFHNk07lD4dzfVrqofAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUQ3ZW
4wYQ68Qm3ZPwecTiB4y6nD4wHwYDVR0jBBgwFoAU5I3aEvfbQDWUF4ykuO1G5mKv
jswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBODg4LzRCNzJCMzc4ODg2MTExRTlBMDBFMDg2M0Y4QUVBMjI4LzVJM2FF
dmZiUURXVUY0eWt1TzFHNW1Ldmpzdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzVJM2FFdmZiUURXVUY0eWt1TzFHNW1Ldmpzdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QUE4ODgvNEI3MkIzNzg4ODYxMTFFOUEwMEUwODYzRjhBRUEy
MjgvNUkzYUV2ZmJRRFdVRjR5a3VPMUc1bUt2anN3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAY0yvXQmM9cxvxVtGOAYhUlrQbu6FMoe7g
26UyW9PkWn4FzMLJGrMedibXPNDFm42VrZtM2yHpwccN7UdV85avO/3tuLrbdSHj
f+YFFvmtk591ifFJK5VuUoSXNoXPokX6W0YQDWLcSEY/kSdVi3uOnDWsPWS9kDd1
esTwHJxGGzo/HjoDhqr5Qdkkbb705sdss8qPBMHQNllpI1VAyE7qQk4fM7a6qbbr
XG1MLMwQu2moXAEPy782VNQAJLW8lzzge2g/tlZONLPfGrpnnbuWYaCdKj88Qtxj
7RYGz3+glEvVFUeyYtfMXfZU+W5+01ZJpyiQ6dXT3zuVSXsd+rzf
-----END CERTIFICATE-----
Generated at Tue May 5 22:13:09 2026 by rpki-client