Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
File:                     16R0hb-cpGerJ5HbX06JVar0dkA.mft (raw, json)
Hash identifier:          1sSEycAMa+vKhh7R3Af1URYk+DjpZkdLxWkiXp8n1Rk=
Subject key identifier:   19:8F:7B:57:52:66:97:C3:A2:21:2D:95:FC:41:4A:5E:E0:25:CB:CB
Authority key identifier: D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Certificate issuer:       /CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Certificate serial:       07D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
Manifest number:          07D1
Signing time:             Sun 15 Nov 2026 02:14:45 +0000
Manifest this update:     Sun 15 Nov 2026 02:14:45 +0000
Manifest next update:     Tue 17 Nov 2026 02:14:45 +0000
Files and hashes:         1: 16R0hb-cpGerJ5HbX06JVar0dkA.crl (hash: dPTbW8g1ZcaCWuvW22Go/5Cs/eIpZnjonvJWXX5xrpA=)
                          2: 115C93BAE16111EB96804153F8AEA228.roa (hash: vVJYRPavoXyCLCs90IUxYtns4SSgNRSaXSbPs6FZN1c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                          rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2002 (0x7d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AR, serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
        Validity
            Not Before: Nov 15 02:14:45 2026 GMT
            Not After : Nov 17 02:14:45 2026 GMT
        Subject: CN=6af91595-8ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:0c:9b:8f:e7:d1:a5:19:6e:5c:81:de:bf:
                    87:d1:74:31:64:6b:de:13:97:88:c4:8e:18:bb:dc:
                    84:ff:59:f9:d2:ff:f8:14:b1:16:de:66:11:52:8a:
                    c8:af:a6:f7:58:28:a7:1a:a7:97:8e:08:5f:14:df:
                    a8:d3:0b:29:b8:17:a1:ad:2d:af:bc:f3:77:ba:1e:
                    6f:43:cd:fa:19:59:e0:c7:34:82:14:f3:a3:30:3c:
                    56:5d:a9:3d:6f:32:a5:51:e1:d5:0f:58:b3:16:0f:
                    c6:4b:89:37:c9:e8:0c:ff:32:fb:19:ad:5f:9b:58:
                    b0:4e:12:05:f7:c3:68:e3:96:d6:8f:49:29:ed:98:
                    03:d1:37:17:5c:c9:2a:39:e6:db:36:46:81:a5:ce:
                    2b:1b:b8:6d:88:be:3c:c8:be:f1:e0:27:b7:b7:54:
                    0d:23:4e:b5:09:90:94:dc:b1:ee:bd:93:cc:02:80:
                    b3:78:13:ba:73:f2:88:35:6a:d0:20:ba:aa:30:41:
                    47:a1:99:39:c5:06:5d:b3:f1:1a:60:e8:94:25:fa:
                    ff:15:db:c6:05:1c:bc:8e:2a:3d:b1:4f:96:a1:9e:
                    09:be:38:36:d2:93:36:c2:95:6b:99:59:21:38:c0:
                    5f:26:fa:0b:4a:1b:4c:82:41:5c:1f:c3:9f:f7:f8:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:7B:57:52:66:97:C3:A2:21:2D:95:FC:41:4A:5E:E0:25:CB:CB
            X509v3 Authority Key Identifier:
                keyid:D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:e6:6e:1e:cb:8a:8d:b7:42:ac:c4:f5:fd:3a:ac:71:db:
         35:c1:d6:51:a1:58:c0:d2:41:4a:d4:8d:46:84:27:90:3c:4a:
         8d:06:6b:02:80:24:f1:c8:b5:be:31:e3:8a:d5:cc:55:3a:21:
         7d:37:6c:c0:8c:7b:e2:9b:59:6a:7c:27:04:b8:24:73:77:88:
         97:f5:12:38:7c:6b:4a:3a:7e:13:3d:44:0c:7a:4e:85:17:05:
         b3:f8:ce:53:34:44:c6:f3:04:b6:27:1a:11:dd:b8:c2:a3:69:
         8e:4b:de:57:b3:cf:a2:0a:e4:cc:55:90:ad:f2:91:40:8d:6f:
         68:e8:b7:b2:16:79:be:e1:09:67:bb:53:b2:24:32:e4:03:52:
         ba:2b:5d:c7:bd:5f:9a:b1:53:9f:a7:b4:f0:d4:8b:d5:25:2e:
         d2:f7:56:b0:3e:79:aa:f8:6f:6f:62:f8:0a:be:80:e8:c4:a4:
         45:c4:59:73:e9:aa:ad:75:2d:45:c3:05:a9:fd:1a:99:22:f0:
         c0:eb:fc:44:7c:b2:6f:8b:6a:27:71:c6:91:26:81:77:3d:97:
         8f:ce:27:01:a4:59:63:bc:b1:ce:06:e8:5a:84:6c:b5:51:26:
         59:9f:6b:82:51:d9:b4:64:72:45:71:cb:4e:b0:02:d5:39:cb:
         c6:5b:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----