Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          0hrDRT7lv7BIiYI+dTYHJiz56Nwnmdj/nIfc0JBc6Fc=
Subject key identifier:   EA:9B:4A:08:EE:83:26:BA:A4:65:16:EB:1A:A5:85:BE:2E:11:2A:26
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       02AD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          02AC
Signing time:             Tue 24 Mar 2026 05:00:42 +0000
Manifest this update:     Tue 24 Mar 2026 05:00:41 +0000
Manifest next update:     Thu 26 Mar 2026 05:00:41 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: pOsnvFfCakwflDcN+DCDsKEAi5zn2M+8bOaHPSgnabo=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 26 Mar 2026 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Mar 24 05:00:41 2026 GMT
            Not After : Mar 26 05:00:41 2026 GMT
        Subject: CN=69c21a7a-3077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7c:5b:57:30:63:2e:c3:32:57:79:9d:3a:01:
                    53:73:6d:03:15:08:e5:b0:f7:88:8d:da:69:83:c7:
                    dc:dc:82:fd:53:76:68:3e:15:a3:c2:5c:16:22:ee:
                    61:6a:6c:b5:8c:91:71:cb:d6:ab:4a:f2:84:fa:f2:
                    9f:67:39:e8:13:c1:90:56:a9:9c:f6:11:b7:99:81:
                    95:53:7f:e4:f1:fc:dc:bd:76:db:2e:ef:45:38:db:
                    9b:d5:f1:05:59:03:4f:21:70:5f:7f:e5:25:3f:ac:
                    25:41:4e:a3:f3:54:1a:7b:56:45:c4:7f:74:bd:c5:
                    4d:8e:93:8a:a6:d6:4e:40:2b:a1:b3:3b:b9:c7:2a:
                    7f:6b:b4:9b:16:4f:c9:90:00:19:7a:66:c8:ac:35:
                    7a:11:8f:77:4a:5b:06:99:52:a7:e7:af:64:a6:4d:
                    ad:18:0c:ca:2f:b0:46:2b:c7:fe:a6:53:2f:5b:91:
                    77:27:54:0d:e0:ac:e9:f3:d7:6c:84:6d:a8:9a:d4:
                    b6:d4:0d:e2:2c:df:96:f6:df:f0:d9:cf:3e:9d:32:
                    2c:64:21:12:29:b5:86:f4:af:dd:52:8c:1c:7c:e2:
                    86:a5:84:00:9d:15:45:7a:24:ce:59:47:e1:71:83:
                    ea:97:81:0d:46:d4:61:c1:1b:ef:b0:c7:c3:2f:e1:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:4A:08:EE:83:26:BA:A4:65:16:EB:1A:A5:85:BE:2E:11:2A:26
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:b5:a5:36:c4:27:60:0f:c3:01:be:f8:23:eb:e6:0c:de:
         0f:d2:91:fb:c3:40:87:ee:d7:48:eb:7a:c8:38:e8:88:99:97:
         14:18:91:2f:a4:0f:1a:1f:46:f2:0b:9a:8e:ab:8b:75:ec:01:
         4c:73:b6:51:62:76:f4:e2:82:73:2a:15:c9:75:00:21:9f:63:
         25:cc:57:f6:58:b4:77:60:14:37:8b:a7:bf:88:24:d5:a2:74:
         62:17:88:f1:8f:90:7b:98:16:7e:d7:00:38:cd:87:7b:61:2e:
         2c:db:c1:b2:8d:b0:be:cb:20:11:ca:27:56:bf:41:c4:9a:30:
         c5:ad:48:99:a5:43:b5:18:34:a2:3b:38:6f:2e:27:ea:dc:3c:
         cd:99:99:2f:62:68:34:65:86:e8:b3:84:40:d2:97:5f:ec:c5:
         4d:e1:3d:05:3d:37:57:41:23:4c:1d:2e:0e:a3:38:1b:4d:e8:
         c1:9c:1b:a1:2f:64:11:3e:31:eb:42:39:d3:28:e7:9d:39:bb:
         5a:fe:aa:75:28:74:ae:9d:31:f1:7a:21:2d:1d:6e:2a:58:38:
         a6:62:08:a1:f5:35:3e:a0:3c:11:f9:65:ce:71:f5:80:4e:ee:
         3a:dd:3c:a7:00:06:8b:b2:74:66:c4:e0:ba:66:97:1f:b3:33:
         cb:4e:40:6d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzJCRjJBUjExMC8GA1UEBRMoMjIzNkZGQUI0Rjc4QTA3QTE5QjgyRThGREU2REMy
REIwNjRBREJCRjAeFw0yNjAzMjQwNTAwNDFaFw0yNjAzMjYwNTAwNDFaMBgxFjAU
BgNVBAMTDTY5YzIxYTdhLTMwNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjfFtXMGMuwzJXeZ06AVNzbQMVCOWw94iN2mmDx9zcgv1Tdmg+FaPCXBYi
7mFqbLWMkXHL1qtK8oT68p9nOegTwZBWqZz2EbeZgZVTf+Tx/Ny9dtsu70U425vV
8QVZA08hcF9/5SU/rCVBTqPzVBp7VkXEf3S9xU2Ok4qm1k5AK6GzO7nHKn9rtJsW
T8mQABl6ZsisNXoRj3dKWwaZUqfnr2SmTa0YDMovsEYrx/6mUy9bkXcnVA3grOnz
12yEbaia1LbUDeIs35b23/DZzz6dMixkIRIptYb0r91SjBx84oalhACdFUV6JM5Z
R+Fxg+qXgQ1G1GHBG++wx8Mv4Ut5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU6ptK
CO6DJrqkZRbrGqWFvi4RKiYwHwYDVR0jBBgwFoAUIjb/q094oHoZuC6P3m3C2wZK
278wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyQkYyL0YxN0E0OThBMTlFQzExRUY5QzAyODkyQzAxNzAwMUIxL0lqYl9x
MDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0lqYl9xMDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzJCRjIvRjE3QTQ5OEExOUVDMTFFRjlDMDI4OTJDMDE3MDAx
QjEvSWpiX3EwOTRvSG9adUM2UDNtM0Myd1pLMjc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMlrWlNsQnYA/DAb74I+vmDN4P0pH7w0CH
7tdI63rIOOiImZcUGJEvpA8aH0byC5qOq4t17AFMc7ZRYnb04oJzKhXJdQAhn2Ml
zFf2WLR3YBQ3i6e/iCTVonRiF4jxj5B7mBZ+1wA4zYd7YS4s28GyjbC+yyARyidW
v0HEmjDFrUiZpUO1GDSiOzhvLifq3DzNmZkvYmg0ZYbos4RA0pdf7MVN4T0FPTdX
QSNMHS4OozgbTejBnBuhL2QRPjHrQjnTKOedObta/qp1KHSunTHxeiEtHW4qWDim
Ygih9TU+oDwR+WXOcfWATu463TynAAaLsnRmxOC6ZpcfszPLTkBt
-----END CERTIFICATE-----
Generated at Tue Mar 24 20:17:29 2026 by rpki-client