Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          V/ufZwbPnPqE0gpYl94N+iPZ5Lbv4dy2v65d4K32hdM=
Subject key identifier:   83:F9:6C:4F:05:F7:7D:70:A5:D6:AA:45:89:21:9B:F4:29:1A:26:3C
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       0312
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          0311
Signing time:             Fri 25 Sep 2026 04:25:58 +0000
Manifest this update:     Fri 25 Sep 2026 04:25:57 +0000
Manifest next update:     Sun 27 Sep 2026 04:25:57 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: VYT5mOQ9y7Xw/mp0PEipz7AyV/hjB96ccI2T/RHTTUE=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Sep 25 04:25:57 2026 GMT
            Not After : Sep 27 04:25:57 2026 GMT
        Subject: CN=6ab5f7d6-83f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:4c:e6:dc:e4:54:21:dc:ad:c8:19:f3:c7:
                    f7:89:86:e6:e7:30:d2:a0:98:a4:36:48:8c:75:17:
                    b6:75:80:d5:f0:e4:95:ab:81:12:3b:85:81:82:9e:
                    b8:99:5c:13:c0:cb:a4:63:5f:aa:2e:45:80:99:61:
                    0d:b9:62:9c:60:f2:28:69:51:45:c0:4a:06:57:79:
                    21:64:bf:04:73:79:30:00:bd:80:f1:a9:7d:7f:08:
                    86:c3:ec:9d:c2:d4:08:d1:85:ea:53:42:44:a0:d4:
                    a9:e4:2a:5b:4c:54:a3:56:87:f2:ab:63:1e:f2:ee:
                    e4:d0:1b:e1:57:d9:77:c4:c1:30:cb:e0:e9:4d:8c:
                    64:9a:41:4b:b2:04:91:fc:cb:9e:98:84:dd:4c:35:
                    ac:e2:2f:50:e6:33:5f:1b:9c:90:ba:59:5a:55:e5:
                    2d:2a:25:a1:51:ce:36:69:86:ce:9a:d8:51:e1:48:
                    bb:25:bd:21:65:1a:9e:30:0b:b6:15:84:a0:49:96:
                    e2:7a:cd:ea:46:d9:09:7d:da:0e:3c:3f:00:14:26:
                    4d:e7:cd:c1:1e:89:82:a9:c1:d1:0c:55:59:22:bd:
                    d8:d1:9c:94:86:29:9d:f7:46:6e:72:ca:d8:85:6d:
                    21:65:9f:59:26:1c:8f:32:e0:c1:45:3c:ba:13:c3:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:6C:4F:05:F7:7D:70:A5:D6:AA:45:89:21:9B:F4:29:1A:26:3C
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b7:f3:2f:6e:88:72:ff:84:77:6a:42:ed:bd:c3:d9:7e:47:
         1c:b5:2c:7c:de:da:8d:83:9b:28:0f:48:a7:bf:94:7d:25:ce:
         46:77:ad:5e:5a:c6:83:4f:84:96:4e:cd:41:e9:86:1a:a8:81:
         7c:62:b7:38:f3:1c:a4:a9:d2:30:96:f2:03:25:60:9b:e3:25:
         b7:df:24:f1:18:46:58:35:74:96:74:6c:b9:76:eb:0b:47:5a:
         12:b4:f9:02:85:c6:51:42:5d:22:86:1d:97:31:d2:b4:e4:d7:
         5d:40:9d:67:c7:93:81:37:ed:a1:d9:19:30:49:f8:f7:81:61:
         be:84:03:59:d3:1e:c9:c5:ca:9a:bc:3b:d1:66:4f:9d:8f:33:
         83:a2:ce:e1:7f:fb:44:df:68:30:75:ff:12:71:ed:7b:61:7f:
         30:54:c0:d4:31:2d:05:e5:02:68:bd:ac:a3:f4:42:4c:cc:76:
         fa:be:08:92:b3:ce:78:0c:4b:7f:7a:24:bf:24:be:21:70:b3:
         b2:bf:48:3f:3e:8e:4a:33:2a:c2:cc:24:53:78:46:d6:61:e2:
         27:61:9f:09:93:86:cc:b1:be:4a:53:02:32:e2:e9:59:a4:0d:
         ad:38:d3:58:80:59:42:1b:79:a2:66:79:d9:5a:88:2a:90:59:
         50:a6:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----