Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
File:                     D-g4ATBnRIcNHQamDPfzuj5UJlI.mft (raw, json)
Hash identifier:          iqn5bYgjfxi8nUcQpg6Ppzeouh5xJiX7QrH5z1iOPUI=
Subject key identifier:   F3:D7:EF:2A:BF:9E:8E:53:D7:BB:18:14:F8:59:A9:CA:E6:A4:60:6A
Authority key identifier: 0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52
Certificate issuer:       /CN=F362E39EAR/serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
Certificate serial:       0ECE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
Manifest number:          0ECB
Signing time:             Sun 15 Nov 2026 01:04:40 +0000
Manifest this update:     Sun 15 Nov 2026 01:04:40 +0000
Manifest next update:     Tue 17 Nov 2026 01:04:40 +0000
Files and hashes:         1: D-g4ATBnRIcNHQamDPfzuj5UJlI.crl (hash: 3Q/lvuyBEYlYZ2ZC4yRHSis83JYPL2Zs4SPDzZReYhQ=)
                          2: 85751D2246C411F0B35CB878DAE4EC9C.roa (hash: 8RnruMpMOyIroRB7WdabR+dI97SGVIprP/OPugvR+SU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                          rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3790 (0xece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAR, serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
        Validity
            Not Before: Nov 15 01:04:40 2026 GMT
            Not After : Nov 17 01:04:40 2026 GMT
        Subject: CN=6af90528-85ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:87:a6:6b:83:63:41:fe:e0:93:56:15:ff:
                    51:d5:d3:5a:c6:53:58:ce:c4:93:61:8f:39:99:0a:
                    67:37:e3:8b:50:4d:f0:cb:af:e5:c0:75:69:58:45:
                    43:16:85:e1:f5:8e:ff:87:3f:96:9a:2e:6f:d4:0e:
                    6e:7b:d8:04:c3:b0:8f:b1:8d:ba:b4:f1:7f:a0:a7:
                    17:fb:8a:5d:e9:32:7e:94:31:5e:41:70:3c:20:ec:
                    14:b6:66:aa:e6:fb:2f:c7:70:a4:97:2f:fb:a5:ac:
                    f6:3b:25:97:48:52:6f:87:1e:1a:19:81:9f:1a:91:
                    6b:99:df:33:62:65:6b:58:fd:34:ee:2b:28:54:70:
                    f7:69:97:84:f7:4e:04:0f:92:9e:9b:be:88:d4:bc:
                    49:b2:bd:ab:f5:c9:be:8b:db:11:a5:aa:d1:af:21:
                    16:6c:ba:b0:fc:c6:db:10:8c:58:d1:8a:9b:00:33:
                    8e:a7:fb:17:64:c5:e4:ec:93:a0:41:f9:2f:6a:fb:
                    01:39:e9:d6:8b:a7:2f:8d:47:65:20:6a:0d:97:a8:
                    5c:4a:2b:d2:fe:fb:c4:c0:d6:94:fe:f9:c5:46:71:
                    fe:fd:49:1c:8e:a8:16:6e:3d:b1:a1:c0:da:fe:92:
                    f6:49:8d:28:29:24:d4:18:07:59:0c:a8:8f:7d:0d:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:EF:2A:BF:9E:8E:53:D7:BB:18:14:F8:59:A9:CA:E6:A4:60:6A
            X509v3 Authority Key Identifier:
                keyid:0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:62:50:98:16:e2:41:c2:4d:60:14:26:aa:e1:a3:b8:c8:ea:
         b2:6b:de:15:96:c1:2d:54:c8:2d:36:35:c9:4f:ee:5d:ad:1b:
         14:e3:57:41:7d:d4:ab:37:76:fb:e1:09:c0:63:9c:27:f4:e6:
         7a:ea:68:7a:67:09:2a:6c:dc:1e:59:e3:2c:c9:2d:83:6f:49:
         7c:b5:f9:66:3e:eb:36:38:12:12:a9:4e:83:b3:04:3d:85:77:
         b1:66:b0:ab:ce:2c:5d:dc:f0:71:19:f1:7b:fc:42:e2:1d:30:
         e1:7a:f1:05:d8:2f:ca:d7:45:63:78:4e:70:3a:e9:58:a9:db:
         d6:a4:7b:f1:d3:fd:a0:c4:49:6a:0a:ba:c5:92:2f:20:95:8a:
         6e:db:e0:01:c7:0d:71:fc:88:40:fb:a3:e3:1e:6c:d2:de:7e:
         89:92:23:5d:30:16:0d:52:0a:57:ce:e1:78:41:cb:4a:e5:fa:
         aa:6b:69:82:77:ed:c4:d7:cf:1f:70:7d:9c:65:52:76:89:30:
         b0:e7:13:2a:80:45:a3:7c:7a:08:d8:d1:97:9f:b9:9d:ce:9e:
         1c:98:41:14:0d:73:f2:ad:c8:0a:0c:a7:c3:e6:85:24:7e:25:
         f8:b6:cb:2e:4c:f8:71:49:70:73:a2:58:06:e2:0b:d0:42:cf:
         c7:1f:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----