Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
File:                     Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft (raw, json)
Hash identifier:          jDGWIBdpmh+nvXCXG9+gb3oKWllWUF8oort3qYKdxoU=
Subject key identifier:   49:A2:50:A1:00:D4:03:61:1B:4A:AA:37:24:48:89:C9:9E:AB:BC:36
Authority key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39
Certificate issuer:       /CN=F36B5EE7AR/serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
Certificate serial:       EB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
Manifest number:          EA
Signing time:             Fri 13 Mar 2026 04:29:28 +0000
Manifest this update:     Fri 13 Mar 2026 04:29:27 +0000
Manifest next update:     Sun 15 Mar 2026 04:29:27 +0000
Files and hashes:         1: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl (hash: 82DCtfNGRUKMNqJHrm0VVGF56/U78lcSDmAb/Dii3Bc=)
                          2: 38D8D2366B9211F095FD868ADAE4EC9C.roa (hash: QAj9ZVXFClZ+xgA1S3DzLLKJ/tdZw+gURdKUv7+f/hc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                          rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
        Validity
            Not Before: Mar 13 04:29:27 2026 GMT
            Not After : Mar 15 04:29:27 2026 GMT
        Subject: CN=69b392a8-6aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:94:c5:e4:0a:e8:ad:7e:7e:77:04:c6:50:
                    ea:dd:07:6d:b5:d1:16:17:3b:55:8a:bf:fa:51:2e:
                    70:ab:26:3f:0c:c0:67:a2:fb:42:14:fd:b5:66:65:
                    f0:25:ca:f7:05:11:d2:44:dd:92:db:ae:9d:55:75:
                    4f:0e:d5:9a:91:b6:56:cf:d7:5e:da:68:3c:4a:d5:
                    19:e5:81:a3:c2:ba:ba:b2:1f:f9:f9:74:92:ce:01:
                    e2:b6:26:25:6d:89:d5:a4:fe:76:4a:e5:15:17:05:
                    6b:ac:55:29:7c:87:72:1b:ae:87:9b:e0:5b:51:52:
                    66:63:75:b9:e4:3c:a5:c1:bd:14:c2:6f:f4:1f:2e:
                    55:f5:d0:bc:9b:04:2e:ec:a3:51:be:e4:64:a3:c7:
                    3a:49:b5:d4:b8:35:95:d5:e1:59:0e:3e:1a:41:03:
                    26:39:f1:14:9c:1a:97:6f:a1:88:63:4f:f5:50:c8:
                    aa:5c:99:f9:dd:98:c0:23:8f:d2:57:d9:33:11:93:
                    fc:86:d7:6b:3a:0e:3b:06:82:2f:8b:b6:b0:c4:80:
                    75:83:24:ef:be:71:99:5b:a9:a4:6d:f9:59:fe:65:
                    dc:a7:b5:f1:47:9f:97:b2:4c:bf:5d:06:f7:6c:73:
                    02:25:b1:66:93:ce:10:9b:ec:93:64:11:15:c9:70:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:50:A1:00:D4:03:61:1B:4A:AA:37:24:48:89:C9:9E:AB:BC:36
            X509v3 Authority Key Identifier:
                keyid:67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:12:83:27:b3:5f:06:b5:39:23:04:74:ca:e3:27:af:a9:
         2f:b4:48:06:c5:d9:ce:4f:08:1e:d5:03:92:b1:1f:81:88:5d:
         27:7f:72:c2:41:29:c4:5e:08:3a:1c:61:b1:6b:f9:8d:89:2e:
         f6:1f:e4:5b:ff:79:3b:d0:6b:7e:5c:33:0a:e8:7f:47:f4:04:
         bc:33:0f:d8:45:e7:6e:0b:af:1a:86:20:dd:8f:39:33:9c:79:
         f3:ad:15:aa:60:67:b5:e9:d7:a6:57:12:53:93:3f:1a:cb:50:
         3b:8b:fd:b6:a2:54:8b:bf:20:b2:5b:87:50:18:80:19:9a:5a:
         02:7a:c5:44:e1:b4:98:21:8c:f0:b1:58:57:39:45:dc:db:33:
         66:b4:99:67:b0:08:34:a7:46:e5:f2:52:c6:7a:69:75:6f:99:
         59:02:22:5d:3e:4b:8d:f1:3a:9f:40:a2:92:51:3e:1c:1b:26:
         c4:30:87:07:74:50:c5:41:27:f6:17:15:07:79:a2:77:3b:e0:
         b3:4b:53:53:6a:d5:0f:ab:cc:90:46:bd:42:1a:58:90:82:25:
         76:f2:4e:da:2b:48:3e:fc:8d:c2:91:67:08:bd:6c:9b:2e:19:
         7c:9e:bb:62:11:7d:83:2b:cc:95:3f:ac:ea:89:83:c0:d0:37:
         58:47:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:34 2026 by rpki-client