Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          n96IAokzk6ScdAmpsDsteNVmLzoFbpUPKrX0DuGqJFg=
Subject key identifier:   BF:B9:F2:2E:36:A7:36:1E:31:52:6F:E3:E8:88:82:A5:37:05:0F:4B
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       0103
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          FF
Signing time:             Thu 24 Sep 2026 05:23:31 +0000
Manifest this update:     Thu 24 Sep 2026 05:23:30 +0000
Manifest next update:     Sat 26 Sep 2026 05:23:30 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: x617Y7M4TKFJ41C0slXCEefvBtwmGDn3wysGdAP7LPU=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Sep 24 05:23:30 2026 GMT
            Not After : Sep 26 05:23:30 2026 GMT
        Subject: CN=6ab4b3d3-e9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:3b:41:63:43:ee:14:33:df:62:54:d6:c2:
                    fe:d5:c9:e1:2e:a9:53:ee:10:ba:8b:e4:ed:6d:c0:
                    03:0d:d6:1a:f2:62:e1:5d:16:1a:42:c9:b2:51:dd:
                    b5:01:41:68:d2:a5:29:4a:c4:73:be:f2:61:0a:76:
                    51:bc:ef:b2:e2:4c:0c:73:75:53:66:ed:6d:98:b2:
                    8c:09:7d:be:26:25:fc:2c:00:5e:0b:81:af:a6:5a:
                    12:10:5d:b2:66:81:d2:16:a1:13:89:00:ca:8b:ab:
                    09:8a:b9:5f:0b:93:fa:56:eb:de:80:34:09:70:65:
                    96:89:6f:dc:2e:b6:da:d7:3e:e2:70:43:db:94:2c:
                    95:43:b9:d8:51:d8:db:b3:7e:d7:8c:f9:50:78:d4:
                    f8:8c:66:1d:87:04:a2:b6:8d:0f:9e:90:10:01:93:
                    24:73:c9:05:90:ea:65:a6:f7:c7:2f:9f:e1:ee:4e:
                    b2:e2:95:a8:6f:45:55:23:a6:b7:ad:bc:62:5d:f0:
                    69:97:80:6c:47:b9:92:59:06:e0:88:67:08:c1:4c:
                    e7:36:a4:90:13:9a:87:eb:af:a9:ea:89:bb:7d:3b:
                    8d:8f:82:4a:da:fe:be:6b:be:2f:88:bb:97:13:4b:
                    ce:db:c8:27:7a:71:7b:ac:5b:5e:1d:30:4d:d3:5e:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B9:F2:2E:36:A7:36:1E:31:52:6F:E3:E8:88:82:A5:37:05:0F:4B
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9b:15:e0:d7:76:cc:d9:b0:93:31:87:68:ec:90:5c:32:f7:
         36:e0:a0:a3:4e:de:71:e8:88:b0:d6:f6:78:33:72:a4:0f:3d:
         6f:ba:9a:32:0a:98:37:32:b0:0e:5d:db:cd:ea:91:96:1b:93:
         7e:81:34:9b:4d:ae:a9:95:cb:df:b8:a6:59:d2:5f:62:1d:3c:
         ae:64:a4:16:03:79:3d:85:80:98:d1:e8:83:d1:0d:14:cf:0f:
         a1:8a:0e:6c:d7:4d:f8:40:6a:c5:3d:46:85:b2:b4:ab:b1:30:
         9f:26:f8:22:32:79:80:58:81:90:fa:0a:cf:77:7a:9d:af:8e:
         e2:77:16:d0:c0:fc:41:35:31:d2:1f:7c:7a:e6:0f:f7:c2:04:
         b8:f0:ec:ce:72:fa:c9:0e:a9:fb:b6:a7:45:4d:b7:aa:3f:11:
         f0:de:16:2c:3c:8e:02:ac:7d:ae:e4:c3:01:ed:e7:a2:d9:a1:
         97:ea:8d:a4:3c:35:e7:c1:c9:ad:dc:12:1e:21:c8:36:16:b9:
         7a:02:95:79:0f:41:2e:5f:43:79:a8:9d:94:c0:74:81:c5:4e:
         93:88:62:aa:a0:0f:ce:b8:3b:4f:08:85:cf:a3:3f:52:b4:43:
         30:63:d0:20:21:64:74:ba:fa:37:d2:c8:e1:e1:a1:bd:26:b5:
         22:d9:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----