Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
File:                     TpKdLt9gOvd04YalOhkf_QUMzgY.mft (raw, json)
Hash identifier:          QqOVM6VZu3RDIkomlfV+qevzG7cuHDOmrokpn+tuBkA=
Subject key identifier:   27:06:CC:95:A8:17:2A:72:45:B5:1B:65:E3:13:2B:B9:03:0E:04:19
Authority key identifier: 4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06
Certificate issuer:       /CN=F362E4AFAR/serialNumber=4E929D2EDF603AF774E186A53A191FFD050CCE06
Certificate serial:       4A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
Manifest number:          4A
Signing time:             Thu 24 Sep 2026 05:44:56 +0000
Manifest this update:     Thu 24 Sep 2026 05:44:55 +0000
Manifest next update:     Sat 26 Sep 2026 05:44:55 +0000
Files and hashes:         1: TpKdLt9gOvd04YalOhkf_QUMzgY.crl (hash: +dr/z2KUH+zXHPvFNBKVcvP2vlcqTSuwojnTekcdCYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
                          rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E4AFAR, serialNumber=4E929D2EDF603AF774E186A53A191FFD050CCE06
        Validity
            Not Before: Sep 24 05:44:55 2026 GMT
            Not After : Sep 26 05:44:55 2026 GMT
        Subject: CN=6ab4b8d8-893e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:ea:18:f0:53:7c:06:02:9d:8d:eb:35:72:
                    91:32:c6:04:4f:f7:8b:7e:65:67:34:5f:82:66:33:
                    93:ff:2a:0c:b0:ce:ed:fb:d9:1c:3e:bc:22:00:2f:
                    79:35:b3:2f:c6:8e:ec:0c:0a:1b:58:de:e2:4a:20:
                    0e:79:a9:ba:12:6f:a6:6b:86:bf:e0:70:93:a2:f2:
                    f1:63:40:83:d2:e0:c7:67:89:65:6c:7a:d0:45:6b:
                    5f:a9:f2:cd:5e:88:56:f9:4a:81:3a:b9:20:37:32:
                    ab:47:63:76:b5:ee:0a:4c:c8:87:c0:11:08:de:2e:
                    4a:3d:a4:63:78:b8:7e:16:f2:4a:d7:0f:f9:37:16:
                    b0:c8:4b:91:77:ed:f3:3c:e1:37:f4:73:fc:d5:66:
                    7d:5e:10:74:a5:94:0b:90:ee:db:46:72:77:eb:6e:
                    4a:4a:c6:85:c2:8e:29:1c:9d:f9:68:16:d0:f4:f6:
                    ab:73:a3:4f:17:d1:1a:79:e6:5c:84:f5:0d:ff:56:
                    5e:20:1b:bb:a6:15:ad:54:51:95:82:63:f5:33:92:
                    53:b0:16:11:1a:77:7f:9f:28:e5:7a:9a:c4:14:c7:
                    28:4b:b0:82:f5:2b:fd:b9:87:62:c3:69:13:d8:24:
                    53:e0:00:5f:59:96:4f:63:2f:71:73:f8:c5:74:d4:
                    8c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:CC:95:A8:17:2A:72:45:B5:1B:65:E3:13:2B:B9:03:0E:04:19
            X509v3 Authority Key Identifier:
                keyid:4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:e2:fb:d6:d1:ed:05:1d:bb:89:4c:8d:7d:fa:d7:26:f5:
         c1:3d:c4:50:8f:4f:2c:b5:51:12:21:9f:85:d5:c2:48:36:45:
         0e:c1:d3:35:47:54:2e:7a:71:9e:97:51:b2:2f:da:e1:c1:4c:
         7f:92:21:a4:e6:22:c8:64:be:a1:ea:a6:df:25:64:96:b0:0b:
         71:99:47:b8:ff:3e:7d:18:6f:a2:58:ca:83:15:1c:e5:ef:db:
         21:d1:e9:a8:23:24:cf:d2:ef:26:44:79:95:4c:40:d9:64:94:
         fd:a0:e7:71:e3:18:d2:fb:f0:13:8d:4b:de:5c:f0:b1:93:b4:
         d4:d9:b9:2f:6c:f3:ae:0e:e3:2f:17:85:71:58:92:39:ba:00:
         5a:7e:54:13:a3:d3:3d:a5:15:ca:f5:28:cf:a7:8c:3d:00:74:
         c5:ba:72:d5:42:92:c5:57:a2:bd:a3:a2:a5:da:d1:be:d5:35:
         7e:54:4e:04:9b:61:8b:c9:0b:86:c4:26:71:b3:81:14:ee:31:
         9e:aa:45:2b:8c:d0:5d:42:db:9b:64:fe:ae:b0:00:7d:32:38:
         27:2f:a4:ca:18:8b:32:ae:b4:2a:fd:47:52:d8:1a:fc:14:6b:
         ca:52:d5:ec:49:87:03:e7:ed:ca:fa:05:10:7e:02:ed:22:12:
         0d:c8:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----