Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
File:                     kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json)
Hash identifier:          oB+T5oyHxdJp97RxgPWomyoqGIPCGkkI1gKulTQtBw0=
Subject key identifier:   CF:FE:49:C7:81:6C:98:31:07:8E:79:CA:AE:99:42:70:84:DE:53:36
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Certificate issuer:       /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial:       0564
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
Manifest number:          0553
Signing time:             Fri 09 Oct 2026 03:16:37 +0000
Manifest this update:     Fri 09 Oct 2026 03:16:37 +0000
Manifest next update:     Sun 11 Oct 2026 03:16:37 +0000
Files and hashes:         1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: XB1UOvWX+CH1boFJnY3eJyQ2HWDByNYpK1Z6yCHWDa8=)
                          2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=)
                          3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=)
                          4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=)
                          5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=)
                          6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=)
                          7: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=)
                          8: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=)
                          9: 8C2651F4195511F1A35B4FC0DAE4EC9C.roa (hash: pGpRj6/PqXx9Td2hUx4ugVnycXhSWNsX+vCSVgOR8bM=)
                          10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=)
                          11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=)
                          12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=)
                          13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=)
                          14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                          rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
        Validity
            Not Before: Oct  9 03:16:37 2026 GMT
            Not After : Oct 11 03:16:37 2026 GMT
        Subject: CN=6ac85c95-fdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:5f:f1:50:1f:57:d2:58:c3:98:2b:54:8f:
                    d7:ed:2d:3c:3b:a4:06:93:68:30:04:e5:93:68:84:
                    e0:e8:5b:f9:11:53:df:5c:f5:72:a1:b2:8c:94:f5:
                    49:ba:e4:72:4c:5f:2e:16:3f:bd:be:c6:fe:5f:22:
                    a7:09:aa:68:53:82:dd:f0:19:3e:de:d4:52:20:ee:
                    56:53:e9:54:27:ff:77:1b:3a:b0:dc:46:cd:e3:d5:
                    a1:bd:ea:62:81:03:44:84:dc:03:71:b7:fe:c5:50:
                    c0:27:43:2c:83:5e:ea:68:88:4f:00:79:58:2c:d7:
                    d4:5e:4e:bb:9f:de:04:b4:ed:43:0e:b3:f0:69:a2:
                    f0:52:7c:65:44:5d:0c:6a:be:90:1e:26:68:72:71:
                    5c:77:ba:0e:84:fe:ee:c2:2a:76:f8:9f:14:5e:36:
                    64:23:18:a4:a4:2b:22:8c:11:f1:ee:de:ad:03:71:
                    1b:36:98:6d:4c:0c:5b:03:31:7e:ce:36:f5:99:24:
                    bc:3a:42:16:b6:e1:17:62:7e:7a:44:e4:d2:0e:7a:
                    5b:60:12:b5:48:b5:cc:cc:2c:54:2f:99:5c:a4:96:
                    1a:b1:1c:da:b6:35:91:1d:4c:4f:be:bb:e9:ec:34:
                    d5:8e:84:51:cf:72:e2:1b:63:3a:65:82:87:e6:7f:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:49:C7:81:6C:98:31:07:8E:79:CA:AE:99:42:70:84:DE:53:36
            X509v3 Authority Key Identifier:
                keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:2f:cd:6d:1a:be:c2:cf:ff:d0:a4:98:94:ed:b6:00:25:
         5f:cb:a7:6e:25:ee:eb:b7:c7:6d:af:ac:e0:67:b1:c3:59:1e:
         82:72:76:e3:05:ef:6c:7a:f7:d5:d1:ed:48:57:03:70:2f:77:
         89:9c:5a:75:1d:6e:64:35:c3:88:31:cc:03:98:0d:06:a5:24:
         bf:ae:60:84:87:f8:0a:dc:28:63:b2:e6:07:9b:f1:51:3f:8f:
         97:37:ca:a8:e8:88:06:b9:54:0c:37:9b:c4:f2:89:73:8c:c7:
         89:8f:1a:b5:8c:07:c7:18:6a:bb:ce:e2:ce:9f:34:3a:a9:27:
         c5:cd:91:ab:4b:6c:de:31:2d:06:86:e1:45:74:cc:d8:b0:c1:
         4a:8d:84:1c:40:91:32:a5:b8:36:1c:9d:8d:9d:a0:d6:82:65:
         42:44:06:32:a3:15:3e:9f:fd:a5:c0:4e:dc:d5:36:e9:9e:d7:
         ad:19:d8:10:46:2b:12:4b:3e:c4:18:bd:5e:e0:8a:54:b6:d2:
         52:d0:29:b0:56:7c:5f:02:81:5b:c8:8f:b0:76:46:27:23:f4:
         0d:6f:eb:15:b4:b5:ef:09:65:bf:b7:c0:14:73:e3:87:ac:78:
         cf:2a:b1:88:52:86:f7:ee:e5:88:7f:b9:84:7d:ad:fa:f7:f2:
         bf:6f:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----