Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          qWbzSnp+Qn4cAPjwHiy23fYmwRztDbfrQCydqL1HbWk=
Subject key identifier:   86:17:AB:96:39:82:0C:0A:81:57:8B:8E:59:53:DC:F5:AB:BB:EE:69
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       0127
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          0125
Signing time:             Sun 29 Mar 2026 04:55:21 +0000
Manifest this update:     Sun 29 Mar 2026 04:55:20 +0000
Manifest next update:     Tue 31 Mar 2026 04:55:20 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: IC/icgpcAMay/B81c86h1FfQC412glflyg8dBh5a40c=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Mar 29 04:55:20 2026 GMT
            Not After : Mar 31 04:55:20 2026 GMT
        Subject: CN=69c8b0b9-fe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:5f:6b:7e:23:8f:f0:6f:10:59:2f:ce:ea:
                    2b:99:c0:62:28:f2:86:d1:5b:97:1b:a5:65:aa:d0:
                    05:21:99:da:ff:ab:22:8f:89:d2:13:9b:a2:a4:7b:
                    f1:10:f7:23:5e:0f:b3:75:ef:6f:20:67:00:21:c3:
                    a3:33:3f:01:e7:21:66:dc:e8:eb:09:ab:67:dc:5d:
                    b3:d6:d2:c2:bf:27:f7:a6:9d:87:42:2c:8b:52:dc:
                    0e:7a:b2:f0:8a:2b:33:2b:fa:c3:12:47:3f:9f:3a:
                    89:2c:93:68:25:56:9c:40:89:6f:bc:92:d7:62:74:
                    d8:33:fb:00:90:50:e8:44:0b:a3:ac:bb:f7:60:ab:
                    ad:47:d7:9b:0f:cf:c8:15:15:59:db:c5:82:7c:05:
                    db:79:86:72:26:4a:e6:cb:2d:e2:97:e9:cc:7a:2f:
                    31:e6:e7:7c:89:63:55:ca:0a:9c:46:18:b2:1b:85:
                    3c:1d:35:e5:24:12:90:08:e2:98:3b:f1:61:4a:19:
                    57:c8:4e:82:d3:ce:0d:ec:4e:e8:c1:70:eb:b6:39:
                    6e:5a:44:4a:10:92:10:72:76:51:c7:30:1b:c9:af:
                    ac:96:d4:ac:14:d6:29:8e:cd:27:f0:2c:7a:4a:63:
                    c0:79:96:14:c1:f1:f2:51:bc:07:dd:1f:01:54:a8:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:17:AB:96:39:82:0C:0A:81:57:8B:8E:59:53:DC:F5:AB:BB:EE:69
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:80:51:ff:db:ff:27:56:0f:a7:64:18:94:0a:1f:e3:07:7e:
         82:3d:d9:4b:64:6c:7e:23:1b:35:1b:0a:54:80:68:67:a2:a4:
         86:ac:75:0e:5e:73:59:ae:cf:ca:d4:8e:1e:69:d3:1c:3a:1b:
         5e:bf:5e:fc:dc:64:d3:bd:cf:8e:47:8c:0d:f8:42:7e:f7:bb:
         d1:eb:d8:30:1b:7b:7c:41:fa:ad:b2:fb:0c:ed:90:ec:28:6b:
         d0:b3:ce:6d:a1:f1:e6:0e:0d:99:3a:ec:cd:ae:6e:f5:3e:ef:
         77:40:0a:d4:62:25:25:31:16:2f:ce:fa:ea:85:8d:77:72:b6:
         e9:8c:fe:43:70:65:be:a4:95:71:4c:2f:26:ff:b3:d9:ad:7d:
         39:c8:8b:a1:e7:50:41:31:79:bf:24:4c:10:88:15:f2:18:d4:
         23:90:d1:3e:66:f9:46:49:af:c3:37:5e:a7:b5:1d:de:65:f5:
         9e:e7:04:b6:3e:5d:0e:72:2c:8b:88:24:f9:4f:6d:64:04:30:
         6e:77:47:6d:86:e3:1e:46:99:0b:88:b7:4f:63:03:24:71:c8:
         f5:c7:51:b6:ab:70:9d:3d:26:6c:99:0b:72:b9:12:0b:f5:d1:
         88:80:ca:48:0d:02:4a:d9:23:cc:f4:81:a1:1e:96:78:1c:8f:
         d0:35:76:49
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAScwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDJGQTRBUjExMC8GA1UEBRMoNDEyMUQyOEUwQkI5RUFGRUUwMjAwM0Y5MjNBQzc0
MEMyNkY1ODM2NDAeFw0yNjAzMjkwNDU1MjBaFw0yNjAzMzEwNDU1MjBaMBgxFjAU
BgNVBAMTDTY5YzhiMGI5LWZlMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqzV9rfiOP8G8QWS/O6iuZwGIo8obRW5cbpWWq0AUhmdr/qyKPidITm6Kk
e/EQ9yNeD7N1728gZwAhw6MzPwHnIWbc6OsJq2fcXbPW0sK/J/emnYdCLItS3A56
svCKKzMr+sMSRz+fOoksk2glVpxAiW+8ktdidNgz+wCQUOhEC6Osu/dgq61H15sP
z8gVFVnbxYJ8Bdt5hnImSubLLeKX6cx6LzHm53yJY1XKCpxGGLIbhTwdNeUkEpAI
4pg78WFKGVfIToLTzg3sTujBcOu2OW5aREoQkhBydlHHMBvJr6yW1KwU1imOzSfw
LHpKY8B5lhTB8fJRvAfdHwFUqDhPAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUhher
ljmCDAqBV4uOWVPc9au77mkwHwYDVR0jBBgwFoAUQSHSjgu56v7gIAP5I6x0DCb1
g2QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyRkE0LzM0MjVGQzgwNENFQTExRjA5NDhFRjc5QkRBRTRFQzlDL1FTSFNq
Z3U1NnY3Z0lBUDVJNngwRENiMWcyUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1FTSFNqZ3U1NnY3Z0lBUDVJNngwRENiMWcyUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDJGQTQvMzQyNUZDODA0Q0VBMTFGMDk0OEVGNzlCREFFNEVD
OUMvUVNIU2pndTU2djdnSUFQNUk2eDBEQ2IxZzJRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBgFH/2/8nVg+nZBiUCh/jB36CPdlLZGx+
Ixs1GwpUgGhnoqSGrHUOXnNZrs/K1I4eadMcOhtev1783GTTvc+OR4wN+EJ+97vR
69gwG3t8QfqtsvsM7ZDsKGvQs85tofHmDg2ZOuzNrm71Pu93QArUYiUlMRYvzvrq
hY13crbpjP5DcGW+pJVxTC8m/7PZrX05yIuh51BBMXm/JEwQiBXyGNQjkNE+ZvlG
Sa/DN16ntR3eZfWe5wS2Pl0OciyLiCT5T21kBDBud0dthuMeRpkLiLdPYwMkccj1
x1G2q3CdPSZsmQtyuRIL9dGIgMpIDQJK2SPM9IGhHpZ4HI/QNXZJ
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:18 2026 by rpki-client