Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
File:                     _zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft (raw, json)
Hash identifier:          ePZvN2Cnrnv+ewl1uyrgJRoKOs1z4C1E0ULgF5at7j8=
Subject key identifier:   A0:46:7F:85:28:5A:D1:E6:DD:1C:DF:EF:10:01:9E:E6:84:45:C1:8D
Authority key identifier: FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
Certificate issuer:       /CN=F363C3E1AR/serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
Certificate serial:       0ABB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
Manifest number:          0AB8
Signing time:             Thu 24 Sep 2026 01:23:36 +0000
Manifest this update:     Thu 24 Sep 2026 01:23:36 +0000
Manifest next update:     Sat 26 Sep 2026 01:23:36 +0000
Files and hashes:         1: _zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl (hash: h0dXFrz0lvuQIyLXr+nwIgtjW5+elryVU6F29A1POMI=)
                          2: E3CC02928BFA11F19DE0CB0ECF1D38B0.roa (hash: /5dwb27y0IdwkPjkO4KiyDkBMyA4REL5xPm0ATHtFLQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
                          rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C3E1AR, serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
        Validity
            Not Before: Sep 24 01:23:36 2026 GMT
            Not After : Sep 26 01:23:36 2026 GMT
        Subject: CN=6ab47b98-859c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:9c:38:6b:5d:73:49:a9:8f:e3:4d:22:0e:
                    4a:36:7d:b6:6f:84:f9:42:2d:db:af:a1:07:bb:34:
                    f7:dd:f0:c1:26:b1:a0:38:b1:37:45:b0:98:e6:a6:
                    62:db:01:35:f8:47:bf:be:46:d6:1d:3f:e3:4b:62:
                    3c:e7:f0:02:9a:f7:d4:dc:c0:6c:23:c4:04:e4:33:
                    d4:74:ab:1b:c3:76:ac:3a:96:9b:f3:6a:56:44:6f:
                    4c:ab:f5:44:0a:7f:ca:02:e8:4c:cc:68:e7:af:19:
                    76:4b:69:26:68:ef:26:0a:78:a0:db:a3:e3:03:e2:
                    3e:44:5d:9f:bb:cf:f3:11:57:ce:c7:32:78:fc:4f:
                    8d:97:67:0b:46:d2:a8:6f:c6:63:c5:3a:00:e3:00:
                    f3:86:07:ad:69:ee:b1:99:c8:a9:d4:de:09:ea:88:
                    f9:ff:0f:c8:80:c9:83:bf:a8:a7:f3:37:0b:eb:95:
                    29:99:57:09:e7:6b:ee:ed:6c:d7:9c:0f:6d:07:32:
                    51:22:97:6e:be:5d:a8:fd:73:c2:7a:e2:3d:96:cc:
                    45:24:04:a3:1a:2c:f9:4f:c1:df:7b:6b:67:00:d1:
                    1a:91:f4:b3:0e:f0:50:38:d5:4b:bd:77:7d:0c:f9:
                    e8:dc:48:ee:5c:f9:c8:0b:87:55:94:bf:40:00:88:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:46:7F:85:28:5A:D1:E6:DD:1C:DF:EF:10:01:9E:E6:84:45:C1:8D
            X509v3 Authority Key Identifier:
                keyid:FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:84:15:58:55:ab:c1:82:43:75:67:dd:4d:47:da:65:3b:1a:
         b0:b2:0c:48:0f:91:7a:42:5c:f3:ee:9d:27:6f:1d:70:33:f1:
         f5:3e:2f:c3:46:eb:9d:b5:be:89:d7:b4:7c:2e:d7:5b:c0:f7:
         74:b5:01:6a:bd:d5:c7:7c:43:81:53:f3:f3:66:cc:bd:ec:11:
         2b:8f:3d:2e:93:5f:64:ad:97:4a:2d:8b:8a:5a:1d:61:d1:59:
         50:42:60:5f:85:6e:a8:f6:99:6a:1c:72:2c:43:d7:83:af:02:
         5d:7e:5d:a6:2f:f2:53:94:b1:54:f3:39:e2:56:3a:5b:72:89:
         66:fd:d7:fd:dd:1e:50:66:68:41:22:dd:15:06:39:44:a8:49:
         e1:b1:dd:55:72:c4:c6:4c:75:ba:ed:28:46:5f:60:27:4e:92:
         91:f2:5d:ea:1e:9e:f9:8e:d0:64:4e:06:0f:2f:27:14:bc:45:
         9f:23:49:87:68:3c:f0:fb:03:23:1b:31:7b:b2:41:be:e0:90:
         3b:03:5b:88:2d:7f:66:a9:ba:a2:e4:ac:c5:bc:e6:ef:e2:2b:
         7b:f4:e3:f3:4b:4f:92:03:fe:ae:7c:dd:72:56:08:14:ad:43:
         30:06:66:08:76:06:5c:8c:98:0c:b4:7c:07:c1:8d:dc:8b:9e:
         cf:3a:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----