Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier:          b08zBBzUa3Y0nRJ/pijPvWOPAkR+PWsYTbzqIbo2NRA=
Subject key identifier:   C5:69:23:45:BB:D7:AE:31:53:F7:BB:8B:B9:6C:9B:85:84:D1:E8:FE
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer:       /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial:       04E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number:          04E2
Signing time:             Tue 05 May 2026 03:09:20 +0000
Manifest this update:     Tue 05 May 2026 03:09:19 +0000
Manifest next update:     Thu 07 May 2026 03:09:19 +0000
Files and hashes:         1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: fPUhCGWRv4U4sXJYw5DACO9OVxfmsMaVhLNq82RoKP4=)
                          2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                          rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Validity
            Not Before: May  5 03:09:19 2026 GMT
            Not After : May  7 03:09:19 2026 GMT
        Subject: CN=69f95f60-4417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:3c:88:21:63:80:75:15:bf:a3:ee:98:58:
                    7f:fc:b6:5e:59:ef:09:5e:73:8f:e6:8c:a7:8c:65:
                    24:cf:91:bb:a3:20:48:79:b9:b5:89:01:a7:ff:58:
                    9c:d4:70:1b:9b:a2:e7:eb:b6:c7:62:f0:fa:7c:1f:
                    93:33:71:9b:49:ab:fc:37:6c:8c:f9:03:5a:72:87:
                    94:6f:0a:d6:15:6f:09:aa:c2:6c:d1:cf:c4:6f:1c:
                    65:53:47:86:7f:28:ff:d3:be:b0:02:bc:95:00:7f:
                    ff:1b:15:fc:76:2a:90:ef:ba:d2:07:a8:a4:5a:6f:
                    90:53:16:66:b0:fc:04:82:94:52:e4:99:1d:ae:0a:
                    32:3a:04:33:96:cb:35:81:15:fe:fd:29:a0:7d:0f:
                    7b:18:75:e8:d8:8c:4f:d5:2b:f3:47:a0:31:92:15:
                    18:4f:b4:74:a5:3f:7a:dd:67:a0:a9:33:c4:9c:70:
                    0f:05:e0:72:f1:ef:96:4b:7e:f0:a8:d3:9a:0f:57:
                    e8:69:8e:47:f8:19:72:fe:e7:07:ab:0b:5d:25:21:
                    f7:34:ab:84:41:de:56:ff:4e:8f:70:c9:6d:2d:aa:
                    24:52:3b:5f:70:7c:7f:11:44:8e:e9:a6:91:78:03:
                    8f:eb:37:c2:16:43:dc:bb:86:19:23:74:eb:47:6f:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:69:23:45:BB:D7:AE:31:53:F7:BB:8B:B9:6C:9B:85:84:D1:E8:FE
            X509v3 Authority Key Identifier:
                keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:1e:94:46:72:63:ac:c8:42:86:a8:09:03:8a:02:ec:a3:
         2c:2e:07:14:79:77:f8:ce:73:e4:ff:19:29:9c:36:63:3d:d9:
         ef:91:ad:40:46:f3:8d:82:97:4c:b0:83:f5:58:e2:ec:26:71:
         d8:a8:bc:34:ed:71:98:50:f2:17:95:4f:21:f6:d5:cd:a9:70:
         15:2b:0c:a6:d8:9c:2d:11:fe:58:6d:ad:ff:97:18:f1:19:42:
         26:df:43:22:2d:85:b9:89:3e:0a:3b:a8:11:39:31:e5:f9:02:
         94:7b:18:1a:95:69:c4:c7:cd:20:1a:4a:22:db:50:43:30:8f:
         4c:af:47:13:8a:86:2a:19:d6:45:e7:24:f5:d7:8e:41:ed:4c:
         2f:de:41:1f:fb:f6:84:c9:d3:d8:56:6e:de:a6:b4:7b:77:b1:
         e6:8d:d2:66:20:26:67:d8:91:72:35:48:27:e8:dd:b8:30:d2:
         2d:b1:d4:3d:bc:14:2d:8f:58:0b:ee:67:a9:9b:8f:9f:8f:a8:
         3d:16:6e:26:51:45:16:9b:cb:1b:f2:f5:59:ec:0c:89:31:d1:
         ae:50:b7:74:54:fa:c7:b0:d4:8e:7a:04:7d:80:52:2b:e2:2f:
         de:46:be:31:12:12:8b:4a:f2:82:09:c3:f9:59:b5:ae:40:b9:
         aa:5b:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:12:53 2026 by rpki-client