Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          7Ir9fVCwcT0/boR9PKBhDvRwde3h3yo1NWbsol8b5xY=
Subject key identifier:   B9:EC:1E:B9:F4:E0:0F:DA:4C:CF:9E:15:AC:97:B5:64:78:94:35:0A
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       04D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          04D1
Signing time:             Mon 27 Apr 2026 03:11:46 +0000
Manifest this update:     Mon 27 Apr 2026 03:11:45 +0000
Manifest next update:     Wed 29 Apr 2026 03:11:45 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: nIJ7KV/3ELKP4f7fzPFzLElAjmfWF5vteJLnNTVU/70=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Apr 27 03:11:45 2026 GMT
            Not After : Apr 29 03:11:45 2026 GMT
        Subject: CN=69eed3f2-f143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:73:b3:c4:a2:65:77:08:23:cc:73:b6:2a:
                    a6:a0:4c:6d:33:3f:ba:73:32:ce:1b:d7:5e:54:73:
                    56:37:c9:7e:e3:48:4a:c1:1a:a7:b9:86:07:70:a5:
                    03:3d:50:58:d9:dd:6e:4e:cb:f3:bc:7c:e1:83:ee:
                    8a:b2:70:68:33:d3:18:e7:fe:34:1b:85:7c:d9:fe:
                    3e:71:44:2e:8c:4d:8f:c0:f0:16:19:22:0a:93:89:
                    a3:7c:be:14:75:7b:3c:a4:f1:d3:0c:9a:4a:26:60:
                    1a:f4:9b:0d:26:13:ce:09:55:d1:db:97:c0:b9:af:
                    4f:5c:d1:e7:64:76:32:34:06:36:99:f9:4f:85:3e:
                    f4:29:f3:7e:e4:75:c4:3e:09:dd:e5:92:ab:f7:54:
                    ed:a6:2e:a4:7b:61:53:39:5f:83:c5:dd:b2:22:4d:
                    2c:ef:47:7b:62:af:3c:67:d5:46:33:97:c2:7c:59:
                    52:9b:e7:6f:3c:d9:9b:13:50:d0:88:d5:63:9c:75:
                    62:14:23:27:f0:fb:2d:1e:97:67:c0:51:57:ee:d9:
                    87:2d:68:24:01:22:6a:e6:f1:ed:34:57:15:b6:76:
                    15:59:c2:63:02:cf:50:0d:17:17:1e:40:b7:8e:99:
                    f7:7d:88:21:b3:ca:1b:f1:1c:32:e9:0f:28:fe:05:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:1E:B9:F4:E0:0F:DA:4C:CF:9E:15:AC:97:B5:64:78:94:35:0A
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:10:11:d5:bc:1d:d1:79:75:b9:50:f8:fc:96:6b:ee:d7:a5:
         e1:2e:33:fd:4d:f7:c2:6b:ec:a4:fc:7f:e1:b9:ee:f3:ce:2e:
         dd:92:59:49:a8:0b:72:5c:6b:24:18:e7:2a:e0:11:bd:95:48:
         e9:c7:a9:45:e5:5e:56:c2:89:70:d6:ac:62:fb:5e:cb:9b:96:
         6d:3d:f3:83:1e:b3:97:79:6b:a2:0d:3f:1c:8b:7f:e4:03:df:
         9e:9c:3b:d4:06:1a:fa:b0:91:cc:3d:fc:f7:31:9b:46:85:9d:
         4c:27:d8:ec:40:f5:83:84:3b:44:6a:75:9d:b0:f4:1e:f1:f1:
         5f:d3:74:4d:f2:2e:6c:27:8c:73:87:af:a7:f2:ab:66:c6:49:
         61:5d:e7:47:06:46:75:ed:10:90:d7:0c:f0:8a:a1:cb:a1:0e:
         85:cf:80:0f:83:db:27:d3:9b:61:ae:fb:d8:9d:1f:91:e8:aa:
         a9:5b:4e:9f:6d:3c:db:9c:7b:4b:a4:ce:83:28:63:06:91:ff:
         e5:1f:93:8d:f7:2f:64:f3:14:a9:78:ec:e9:a3:6f:89:cd:bc:
         ad:1c:d5:d2:0b:ae:49:20:61:83:42:0a:f1:43:6e:ac:4d:6f:
         88:88:0a:c5:f5:10:82:a7:d7:81:e3:91:f7:59:91:44:0b:8c:
         93:00:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:36:49 2026 by rpki-client