Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          vYDnyc54fEgtgabQBm3wPYYV6UKG+yXe8ylhWMX1JP0=
Subject key identifier:   66:65:15:2F:EF:96:F3:B0:E9:E4:E8:4E:74:D8:5F:AF:A9:02:DF:B1
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       0AC0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          0AB8
Signing time:             Thu 24 Sep 2026 01:24:01 +0000
Manifest this update:     Thu 24 Sep 2026 01:24:00 +0000
Manifest next update:     Sat 26 Sep 2026 01:24:00 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: 0SBIlfa3M6OOTdwK53JrKr3LJWpkEoIzGNYsjvkgK9U=)
                          2: B2B71F48BBB711F0A55267C8DAE4EC9C.roa (hash: kChp13s64I7ds7m3cFb8J8f9uZBGgnrFBEhdaD7OJR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752 (0xac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: Sep 24 01:24:00 2026 GMT
            Not After : Sep 26 01:24:00 2026 GMT
        Subject: CN=6ab47bb0-3f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:3f:7c:a4:36:b9:5a:56:ed:6f:5c:cb:29:
                    33:73:d2:48:f6:56:25:36:81:eb:9a:c6:b2:51:78:
                    7d:80:03:ea:ed:38:05:06:ea:6b:d8:de:dc:1a:a7:
                    52:f6:5d:85:14:98:76:22:00:19:81:ab:4c:d7:b7:
                    a2:9a:e6:f0:0b:e5:ec:d1:e2:ea:91:a6:fc:94:2d:
                    a4:e8:4b:a1:22:ac:91:93:1b:46:40:33:4b:ea:f4:
                    34:19:e3:e8:ee:56:a2:75:d4:08:c0:fc:bb:da:b2:
                    98:fb:3c:f0:0c:7a:10:d2:44:62:41:9b:5e:cd:0e:
                    eb:c1:c2:27:1e:97:bc:54:75:fa:73:46:c2:3d:48:
                    a0:25:67:86:f8:f1:45:2f:ab:86:a8:66:db:6f:e3:
                    8d:d4:18:dc:d1:f6:4a:fa:92:0f:71:6b:47:69:55:
                    65:7f:82:be:11:df:9e:07:b6:69:91:f7:66:df:02:
                    f6:2e:43:75:99:f4:e7:4a:50:a9:3e:79:49:8a:a4:
                    0f:fa:d9:1b:fc:14:7d:f8:bd:1b:45:c5:53:ce:45:
                    83:54:4a:c2:a5:aa:d4:8d:89:ed:d3:67:fa:ff:30:
                    91:87:e0:f2:ea:74:46:ee:7f:ac:bf:9e:c5:96:ee:
                    a2:0d:36:37:53:03:d4:12:08:7e:3e:6e:b7:ae:15:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:65:15:2F:EF:96:F3:B0:E9:E4:E8:4E:74:D8:5F:AF:A9:02:DF:B1
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:24:0b:11:c1:eb:f4:4b:09:92:75:1a:4c:a0:b3:66:71:94:
         46:05:58:ec:60:9e:18:17:28:e0:ed:aa:f3:a5:03:b2:2b:e4:
         1f:19:94:91:29:5d:ce:d7:79:04:35:bb:74:74:3c:42:ba:8c:
         45:ea:d2:d2:17:e0:00:5b:1d:97:7c:35:ce:5f:b8:c4:0d:b5:
         c2:89:28:59:b5:1e:e8:16:a7:74:5a:00:c0:16:ed:7a:34:87:
         5b:23:83:56:24:60:9c:ed:68:15:71:4d:b5:5a:e5:4d:f7:81:
         5c:33:35:94:59:89:3f:7c:d8:a2:41:8b:90:10:96:55:93:c5:
         a8:09:fa:95:4d:86:9f:fb:55:ed:13:c0:1d:14:f2:d5:51:dd:
         53:66:96:f3:dd:59:fd:c9:55:61:04:ad:83:34:1f:bf:3c:1e:
         ec:35:58:ae:c5:61:b3:4d:27:a1:79:84:29:bc:60:cb:09:12:
         85:5b:07:b2:7c:c2:aa:cc:22:89:9f:7b:6e:58:73:cb:48:46:
         6c:e0:e1:b7:ff:e7:f6:d4:be:e5:13:2a:88:50:48:3e:0e:73:
         0b:b4:39:c0:b7:ed:4a:ba:46:96:e6:0c:50:f0:89:6a:92:b2:
         48:02:11:f3:46:c2:54:08:28:38:67:2f:13:20:e3:54:83:3e:
         37:fc:50:b0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkFGMDJBUjExMC8GA1UEBRMoOTMzRTAyOTYxRTBBQkQ4MzVDQkM3RUUyODNGMTU3
MTk0NzQ2MzIzRjAeFw0yNjA5MjQwMTI0MDBaFw0yNjA5MjYwMTI0MDBaMBgxFjAU
BgNVBAMTDTZhYjQ3YmIwLTNmN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpEz98pDa5Wlbtb1zLKTNz0kj2ViU2geuaxrJReH2AA+rtOAUG6mvY3twa
p1L2XYUUmHYiABmBq0zXt6Ka5vAL5ezR4uqRpvyULaToS6EirJGTG0ZAM0vq9DQZ
4+juVqJ11AjA/Lvaspj7PPAMehDSRGJBm17NDuvBwicel7xUdfpzRsI9SKAlZ4b4
8UUvq4aoZttv443UGNzR9kr6kg9xa0dpVWV/gr4R354HtmmR92bfAvYuQ3WZ9OdK
UKk+eUmKpA/62Rv8FH34vRtFxVPORYNUSsKlqtSNie3TZ/r/MJGH4PLqdEbuf6y/
nsWW7qINNjdTA9QSCH4+breuFSCRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUZmUV
L++W87Dp5OhOdNhfr6kC37EwHwYDVR0jBBgwFoAUkz4Clh4KvYNcvH7ig/FXGUdG
Mj8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBRjAyLzRGNkZEQTY2ODM4QzExRTlCMzY0RTkxMUY4QUVBMjI4L2t6NENs
aDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2t6NENsaDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkFGMDIvNEY2RkRBNjY4MzhDMTFFOUIzNjRFOTExRjhBRUEy
Mjgva3o0Q2xoNEt2WU5jdkg3aWdfRlhHVWRHTWo4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADJAsRwev0SwmSdRpMoLNmcZRGBVjsYJ4Y
Fyjg7arzpQOyK+QfGZSRKV3O13kENbt0dDxCuoxF6tLSF+AAWx2XfDXOX7jEDbXC
iShZtR7oFqd0WgDAFu16NIdbI4NWJGCc7WgVcU21WuVN94FcMzWUWYk/fNiiQYuQ
EJZVk8WoCfqVTYaf+1XtE8AdFPLVUd1TZpbz3Vn9yVVhBK2DNB+/PB7sNViuxWGz
TSeheYQpvGDLCRKFWweyfMKqzCKJn3tuWHPLSEZs4OG3/+f21L7lEyqIUEg+DnML
tDnAt+1KukaW5gxQ8IlqkrJIAhHzRsJUCCg4Zy8TIONUgz43/FCw
-----END CERTIFICATE-----