Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.mft (raw, json)
Hash identifier:          IZdcFI0mbOB9Y6s0NStsF/TPiUx+I8a2VRkNq/jWQQE=
Subject key identifier:   7D:23:18:85:F8:0F:98:AD:57:58:2F:7E:34:8B:09:1B:2A:CB:46:88
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Certificate issuer:       /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial:       04D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
Manifest number:          04D1
Signing time:             Tue 22 Sep 2026 03:26:48 +0000
Manifest this update:     Tue 22 Sep 2026 03:26:47 +0000
Manifest next update:     Thu 24 Sep 2026 03:26:47 +0000
Files and hashes:         1: GS9iV_wr5XP3WbXyvfg9aar_ouc.crl (hash: tWsUGA8BjtapaQV9jgjZ+Xo8IOyCYw/WW6YVRshU+9U=)
                          2: A147BE680D4211EF9356066C017001B1.roa (hash: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                          rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AR, serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
        Validity
            Not Before: Sep 22 03:26:47 2026 GMT
            Not After : Sep 24 03:26:47 2026 GMT
        Subject: CN=6ab1f578-16ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:d5:d8:0c:d1:34:b4:5f:c2:b8:da:8d:b0:
                    81:b1:24:1b:aa:85:e3:67:d2:0f:2c:21:c7:c3:8c:
                    ec:35:b1:af:c6:2d:c2:20:44:a4:ba:fa:10:83:0a:
                    18:0f:82:cd:39:f7:fd:b7:cd:bd:16:4a:68:19:79:
                    15:85:de:a6:a0:94:27:e1:5f:87:87:98:f5:ac:a7:
                    92:86:1c:ca:cc:18:04:4c:b7:f0:5e:b9:2a:70:3d:
                    d3:8f:30:c2:d6:fc:d1:8a:c3:b9:33:57:2c:10:b5:
                    98:a8:d5:16:f6:18:5f:51:6b:f3:35:0e:cd:da:9d:
                    6b:1a:e4:6e:15:e0:d8:b8:64:05:0d:e9:af:83:4c:
                    31:87:04:b2:4d:a4:a1:b3:d6:5b:d0:d7:5d:75:53:
                    3e:d0:c5:72:da:e4:43:45:86:6c:e8:b0:c8:a8:f3:
                    a6:f7:c2:fd:8d:29:4f:28:6e:33:5b:a0:b3:19:4a:
                    d5:ad:1c:4f:b7:6b:ae:c1:a9:fe:8d:18:4d:db:71:
                    d0:d8:01:9d:bf:89:ad:2b:2d:bf:c9:64:4f:9f:46:
                    d3:16:d5:ca:ff:71:14:1c:a3:d9:9a:1a:2f:ef:24:
                    38:98:7e:d6:40:39:38:62:17:9f:07:64:b4:25:d3:
                    fc:6b:ce:d3:40:8b:07:d2:90:fe:f9:6f:39:f5:07:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:23:18:85:F8:0F:98:AD:57:58:2F:7E:34:8B:09:1B:2A:CB:46:88
            X509v3 Authority Key Identifier:
                keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:9c:ee:52:ae:32:a1:1f:48:91:a5:f5:75:1b:bc:ce:78:
         89:ca:f1:3b:6b:f9:87:9f:3c:d4:81:6c:6f:67:23:0b:46:f5:
         6a:e3:5e:b7:ca:e9:7e:7f:6f:4a:85:d8:74:8a:b9:18:c4:24:
         b6:03:cb:b4:fa:4e:0d:37:48:b5:cf:aa:7a:54:2c:b3:12:a9:
         97:cb:33:99:72:04:48:44:0c:58:93:57:21:60:34:1d:44:19:
         64:fe:b9:df:70:63:ae:4e:b4:bb:d4:b7:3a:90:a3:c4:52:84:
         e7:85:69:26:b6:88:71:f9:00:27:11:30:d4:dd:ac:7f:31:a8:
         63:d3:51:02:90:8d:cb:df:3f:9d:72:b3:d4:34:60:6e:79:6e:
         41:54:c1:45:af:5a:31:68:c0:70:4a:ee:ae:4d:0c:9e:21:a3:
         54:a7:94:99:d7:8d:4c:23:b5:f6:23:5d:c6:cf:b7:ee:58:33:
         5b:7e:45:41:4a:8f:78:22:e9:c4:e2:e0:63:8e:2b:c6:88:10:
         4b:b3:71:64:16:2f:48:5a:81:83:a8:0c:80:b1:5d:97:43:f0:
         04:ba:fc:73:77:de:7c:90:8c:e7:7d:ce:71:9b:36:ae:41:34:
         a4:99:a7:7e:6d:49:bb:e9:57:60:24:dd:ec:63:16:b7:ca:10:
         6a:bf:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----