Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          byAiS/lOQ0UJ62/V+ioWo0guVvfTR0lawvn7oSCA0rE=
Subject key identifier:   76:E6:08:92:24:3B:CF:28:94:E0:2D:BD:5B:59:D3:6B:A6:36:38:47
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       0232
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          0229
Signing time:             Sat 27 Jun 2026 04:44:06 +0000
Manifest this update:     Sat 27 Jun 2026 04:44:05 +0000
Manifest next update:     Mon 29 Jun 2026 04:44:05 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: dQqCefqBe+8wEOXp+0y9/Klhv07x7NscBdoRcUMVM2s=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Jun 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Jun 27 04:44:05 2026 GMT
            Not After : Jun 29 04:44:05 2026 GMT
        Subject: CN=6a3f5516-bc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:d2:b0:1c:3c:e3:b0:5c:27:49:9b:eb:75:
                    f9:f5:ef:87:f0:34:53:4f:98:ce:a0:cc:2f:7c:ae:
                    09:d4:61:65:a9:ce:24:0c:71:0f:d8:d5:1b:f1:42:
                    51:fe:e5:a3:d5:ba:36:88:9b:bb:8d:48:f1:dd:db:
                    68:b3:25:dd:e4:98:ad:25:b5:2c:a4:b6:8c:59:aa:
                    77:9f:79:e3:78:6c:29:01:62:6f:bb:44:69:bc:5f:
                    fd:95:7e:a1:a0:e6:14:62:ef:5a:f6:12:c7:e2:53:
                    10:07:ab:09:09:df:40:e5:15:4b:86:db:f4:c4:c7:
                    05:e7:25:fc:ac:93:d4:62:f7:29:39:5a:5d:21:2f:
                    4c:c6:b6:14:6b:f6:79:e8:23:15:de:a2:4e:fc:85:
                    59:3e:5b:c4:93:6c:5e:36:f6:f4:bd:4f:76:3e:7b:
                    e4:9c:75:2d:0d:44:53:e6:9e:09:f4:0f:de:fc:6a:
                    53:1d:f6:d0:f6:9a:73:82:bb:47:13:29:df:d3:bc:
                    8c:ce:34:0e:14:85:31:81:c9:10:74:df:81:57:53:
                    a8:51:77:83:5e:d2:da:77:e1:7b:f1:ed:52:af:27:
                    da:32:e9:e8:0c:8e:7c:47:e7:e3:56:1c:b3:72:f5:
                    b0:21:a9:f9:74:6c:66:f8:fb:3f:f7:eb:70:a5:9f:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E6:08:92:24:3B:CF:28:94:E0:2D:BD:5B:59:D3:6B:A6:36:38:47
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7f:c0:53:a6:b5:a1:d1:8a:76:8a:09:fe:08:26:f1:3d:1e:
         49:66:bf:28:cc:17:47:27:ca:be:a0:4e:7f:08:4f:82:10:79:
         72:6e:5a:0f:81:23:07:53:05:c1:80:25:6b:56:72:d8:88:bb:
         f0:05:5f:2f:96:7c:7a:57:fc:4f:88:45:ac:07:a6:ad:43:fc:
         ea:43:b3:4a:2f:95:f8:1f:56:da:4d:8d:06:ca:52:b9:0b:25:
         50:07:aa:86:e8:83:78:95:ee:c0:14:54:f9:be:f5:f4:91:29:
         b8:89:2f:fb:9e:71:c4:64:ce:1e:97:1f:24:b6:90:c4:c4:20:
         a7:23:c7:3e:eb:95:a0:cd:c7:68:5b:cf:c1:f4:9b:69:01:38:
         cc:65:13:bd:b7:af:49:ec:32:1b:72:ed:1e:4e:63:42:f9:9b:
         f0:48:c0:81:b2:9b:d0:53:47:d9:01:d5:a4:f2:03:35:83:ee:
         1a:33:38:22:ba:b6:36:b2:97:3c:88:16:3c:c6:4a:e0:c5:65:
         24:d0:3d:5d:e7:56:eb:9f:a6:43:04:d3:6d:96:9f:00:1a:f3:
         d3:43:7c:da:8d:29:c7:17:ad:ff:fe:e0:d1:84:10:ec:4e:d1:
         f4:7e:58:a1:f5:86:e8:0c:bd:5d:35:36:83:b3:3a:55:81:74:
         7f:b7:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:21:44 2026 by rpki-client