Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          irk2d4jPQbvLdBDKYrh969RTqfWq7ZV8Ps0KV605KZI=
Subject key identifier:   93:59:49:38:03:3F:41:9F:90:02:87:32:A3:69:10:B1:5F:ED:29:96
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          0132
Signing time:             Sat 14 Nov 2026 05:22:19 +0000
Manifest this update:     Sat 14 Nov 2026 05:22:18 +0000
Manifest next update:     Mon 16 Nov 2026 05:22:18 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: FNkLNkT+APvcKyYqSngdmbbqPA7TWZtzxOMBMxFchD0=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Nov 14 05:22:18 2026 GMT
            Not After : Nov 16 05:22:18 2026 GMT
        Subject: CN=6af7f00b-8daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:6e:a2:be:50:ad:78:8b:4b:42:bd:d7:0c:
                    45:66:34:8b:20:79:0b:56:25:45:a1:8b:6b:b0:07:
                    57:3b:31:b3:7d:a4:88:95:a8:a0:36:99:7b:b7:6c:
                    2c:15:a2:3a:b5:d5:10:24:99:eb:7e:8d:cf:2c:05:
                    8c:f6:f0:17:32:99:81:99:af:d7:f4:7f:e4:95:13:
                    b4:c1:e3:c3:03:79:44:9a:f4:84:81:63:08:19:d8:
                    51:67:2a:5b:3b:b7:20:cd:39:3d:bc:f8:a7:26:93:
                    93:ad:8e:21:99:57:ac:e5:46:89:8d:2b:47:b2:7e:
                    d6:51:a5:cb:39:bc:e1:14:9e:c7:82:9f:06:45:cb:
                    0a:2b:39:77:b1:cb:22:9f:5c:c0:2a:07:7d:5d:c9:
                    0a:e8:7f:7d:19:a4:48:6f:93:66:1b:60:aa:42:bd:
                    6e:c6:22:3e:19:82:b1:67:52:20:44:3d:4f:ab:72:
                    6a:36:e0:71:8c:fa:75:53:42:f8:de:a4:59:b8:1b:
                    e3:37:d2:16:c2:c8:5d:11:30:1a:c4:b9:8f:a6:ae:
                    b4:28:11:85:4e:45:4f:65:2e:6c:28:f1:e6:3c:fc:
                    f1:4d:a7:0b:c3:dc:8e:c1:ea:18:6c:94:64:8c:52:
                    97:8d:87:90:5b:72:9b:72:35:4b:11:4f:01:42:20:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:49:38:03:3F:41:9F:90:02:87:32:A3:69:10:B1:5F:ED:29:96
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:13:62:54:ca:47:61:fd:c5:e0:59:11:2a:27:58:c6:67:3a:
         e8:c6:f5:44:dc:1d:46:74:7b:dd:d9:55:36:f8:34:f8:85:ca:
         1b:2c:f6:4f:62:63:52:04:af:82:46:b3:ea:57:33:f7:0d:b7:
         ac:2c:02:df:9b:4f:c2:f0:41:a8:e9:fa:e0:4b:91:4a:c1:ca:
         b1:6d:0b:2c:2c:28:44:24:89:98:2a:94:9f:72:11:56:e9:04:
         b4:4e:3b:27:01:18:20:1c:4f:3c:11:05:d9:ec:c7:7f:65:1c:
         2b:bf:11:c2:5a:72:c6:3f:5d:ae:90:72:6b:8c:b9:e6:15:27:
         5f:9e:1c:45:6e:8c:54:92:ae:11:3c:6d:5f:3f:85:73:08:ba:
         18:62:82:2c:54:9d:9e:76:a1:a5:10:3c:fa:cf:27:ee:bc:44:
         86:ee:71:5a:16:01:f5:ba:15:8e:1f:a3:73:f2:f2:cf:75:fd:
         4a:72:06:5b:78:0b:4b:ed:b9:77:27:19:f1:a1:e9:60:b4:df:
         34:21:a2:55:33:c8:3a:e9:c2:f9:58:d6:3c:fa:36:5c:76:c8:
         00:dc:f5:4c:95:66:84:93:11:38:91:88:c4:fb:d3:0b:26:6c:
         a5:e9:09:07:08:a6:fa:f2:71:a1:fb:89:68:e0:a8:cc:b4:5f:
         11:5e:7f:74
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICATYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTIyMTBBUjExMC8GA1UEBRMoNzFCRkMwMEQ1MjFFNjBDOTBBMDAyNjg4MzQ2OEM5
QzFCNTM4MDE4MTAeFw0yNjExMTQwNTIyMThaFw0yNjExMTYwNTIyMThaMBgxFjAU
BgNVBAMTDTZhZjdmMDBiLThkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUm26ivlCteItLQr3XDEVmNIsgeQtWJUWhi2uwB1c7MbN9pIiVqKA2mXu3
bCwVojq11RAkmet+jc8sBYz28BcymYGZr9f0f+SVE7TB48MDeUSa9ISBYwgZ2FFn
Kls7tyDNOT28+Kcmk5OtjiGZV6zlRomNK0eyftZRpcs5vOEUnseCnwZFyworOXex
yyKfXMAqB31dyQrof30ZpEhvk2YbYKpCvW7GIj4ZgrFnUiBEPU+rcmo24HGM+nVT
QvjepFm4G+M30hbCyF0RMBrEuY+mrrQoEYVORU9lLmwo8eY8/PFNpwvD3I7B6hhs
lGSMUpeNh5BbcptyNUsRTwFCIPt5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUk1lJ
OAM/QZ+QAocyo2kQsV/tKZYwHwYDVR0jBBgwFoAUcb/ADVIeYMkKACaINGjJwbU4
AYEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUyMjEwL0VDREYzRjA4RjUzQjExRjA4MUY1MDFEQkRBRTRFQzlDL2NiX0FE
VkllWU1rS0FDYUlOR2pKd2JVNEFZRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2NiX0FEVkllWU1rS0FDYUlOR2pKd2JVNEFZRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTIyMTAvRUNERjNGMDhGNTNCMTFGMDgxRjUwMURCREFFNEVD
OUMvY2JfQURWSWVZTWtLQUNhSU5Hakp3YlU0QVlFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhE2JUykdh/cXgWREqJ1jGZzroxvVE3B1G
dHvd2VU2+DT4hcobLPZPYmNSBK+CRrPqVzP3DbesLALfm0/C8EGo6frgS5FKwcqx
bQssLChEJImYKpSfchFW6QS0TjsnARggHE88EQXZ7Md/ZRwrvxHCWnLGP12ukHJr
jLnmFSdfnhxFboxUkq4RPG1fP4VzCLoYYoIsVJ2edqGlEDz6zyfuvESG7nFaFgH1
uhWOH6Nz8vLPdf1KcgZbeAtL7bl3JxnxoelgtN80IaJVM8g66cL5WNY8+jZcdsgA
3PVMlWaEkxE4kYjE+9MLJmyl6QkHCKb68nGh+4lo4KjMtF8RXn90
-----END CERTIFICATE-----