Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          ipr1DmdsqY+8GdppHF3ct3EGx10DzzP6RX9fWbU6EYI=
Subject key identifier:   83:98:8D:A6:B5:65:DF:F9:79:EC:53:61:83:D8:88:D8:CD:4C:D0:9A
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       0729
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          0724
Signing time:             Tue 13 Oct 2026 02:32:06 +0000
Manifest this update:     Tue 13 Oct 2026 02:32:06 +0000
Manifest next update:     Thu 15 Oct 2026 02:32:06 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: R4pDYzy6ySsvISnAdl0e4sosOam7+X07l8NVlMVQDFQ=)
                          2: C0B861D41CFF11F199815BDEDAE4EC9C.roa (hash: OSOMPml4dWonWMy5j4ZjUxfK0LOQE9IMO9et91Z/nf8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                          rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Oct 13 02:32:06 2026 GMT
            Not After : Oct 15 02:32:06 2026 GMT
        Subject: CN=6acd9826-98ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:0a:e0:a5:d6:7b:5c:30:cd:c0:3b:46:01:
                    2e:8a:44:5b:ee:62:02:2b:a1:63:43:69:7a:82:46:
                    db:0d:6f:d2:70:aa:8d:1e:22:c0:61:16:94:11:99:
                    45:f5:b9:16:34:c2:52:97:41:2c:37:86:ee:58:f6:
                    68:56:67:4e:49:b0:68:5a:95:a4:02:eb:2a:00:31:
                    ee:cf:fb:74:eb:cf:30:e5:64:82:cb:80:0a:b3:6d:
                    da:17:ca:33:c1:2d:7f:21:c1:69:c5:20:3f:0e:f3:
                    7c:38:36:d6:d4:51:87:1a:cc:94:2f:af:87:3e:91:
                    1b:70:99:2b:65:3c:41:c4:55:e9:18:86:0f:87:eb:
                    24:2e:e8:2c:3b:f7:5c:a8:61:b3:b0:4a:b3:d6:b8:
                    98:35:3e:9a:16:47:64:55:24:e4:12:76:02:9c:f6:
                    33:25:92:a3:df:c5:3b:9c:e0:b1:8c:23:7e:2d:9d:
                    73:8b:49:a7:b8:7a:97:11:8d:84:09:84:17:d1:c7:
                    77:40:a2:7c:66:d4:3a:3f:4b:d8:d3:08:04:85:b5:
                    4c:82:74:92:db:df:8b:c6:e8:29:17:cd:f8:c4:6d:
                    95:cd:32:95:b7:43:1e:22:d3:6c:20:92:93:93:09:
                    b2:4d:1f:37:bd:32:df:0f:96:1f:9e:5c:69:ad:92:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:8D:A6:B5:65:DF:F9:79:EC:53:61:83:D8:88:D8:CD:4C:D0:9A
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8f:f4:91:0b:aa:b7:4f:65:25:b9:c4:ca:ea:cb:9b:25:d6:
         12:0b:13:58:f4:d9:e2:10:23:c3:28:bb:79:39:f9:d1:37:cd:
         fd:b1:ce:5c:c7:5a:ed:8b:0e:13:69:92:4d:98:4b:92:f1:13:
         21:e4:0e:b6:88:24:df:0d:93:43:e4:23:59:cc:76:c4:b3:62:
         e2:02:1e:52:14:17:a9:fb:ac:a3:00:dd:cb:47:c7:03:2f:a4:
         0b:95:1a:d4:d8:78:15:bf:25:80:dd:ad:58:e4:e0:1e:44:6b:
         b4:1b:f5:af:44:00:59:a7:5b:73:db:93:c9:6b:99:2f:a3:32:
         6a:5b:4e:c9:9e:9e:a4:0f:20:4b:f7:7d:af:23:b2:bc:be:3d:
         34:85:87:26:79:2e:76:56:65:91:f1:7d:77:98:22:83:40:91:
         63:be:7f:a6:2d:f9:c2:a8:2b:53:04:d3:a7:da:9a:be:47:ee:
         59:60:84:75:24:a0:cb:09:49:c3:13:dc:51:d0:fe:2b:99:57:
         d6:fc:12:08:39:44:42:84:17:fe:df:cb:2c:77:12:63:38:d4:
         a0:cd:cd:f3:6e:5a:f9:f4:f6:7c:ee:d7:9c:2e:64:79:57:48:
         9f:7d:d1:74:87:bb:3a:c7:0c:bd:1c:af:21:79:d0:18:dc:05:
         a6:b2:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----