Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          Y1CFcQvL+FushJjcuCscf7X+F9X0JM6subdhjq9HNC4=
Subject key identifier:   E5:1A:E8:04:61:25:F2:7C:3A:C3:17:F5:48:60:54:2D:1A:A9:22:DD
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       0568
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0564
Signing time:             Fri 25 Sep 2026 03:12:38 +0000
Manifest this update:     Fri 25 Sep 2026 03:12:37 +0000
Manifest next update:     Sun 27 Sep 2026 03:12:37 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: uMOa3NzvnUcXhAMCJBqOBfSRUGlgWHz6Frgs1xhdtrg=)
                          2: EB9A40F6876D11F18C949AC0CE1D38B0.roa (hash: bJKsXLMQt8rdTX8UmsGxka3X6/PGAj+R1BOTCf8x4As=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Sep 25 03:12:37 2026 GMT
            Not After : Sep 27 03:12:37 2026 GMT
        Subject: CN=6ab5e6a6-d3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:91:53:1b:46:ff:0d:34:eb:11:95:54:74:
                    aa:66:50:60:95:d1:ea:b0:76:6a:4d:78:fd:ff:69:
                    e2:3d:60:06:bf:07:e6:07:e9:44:87:0b:0d:70:d9:
                    ca:5f:6f:a9:1f:04:fb:47:dc:fd:75:6d:65:f3:ca:
                    92:ec:9e:6b:d1:f8:eb:3c:ed:57:dc:c6:9d:16:d2:
                    57:95:75:65:bf:60:8c:77:1b:86:97:fa:6d:6d:ac:
                    8d:9e:93:1f:83:fe:66:04:27:4d:4a:80:b1:da:86:
                    82:95:36:65:dd:78:7a:e5:d1:88:83:f5:67:55:02:
                    fe:cb:8f:d3:c7:a6:91:a5:c5:79:8e:6d:3e:5b:d6:
                    da:43:e5:ab:bf:01:6d:12:e9:e5:b6:89:31:8e:c9:
                    ad:4f:b3:31:c5:c3:28:8d:bb:57:45:11:30:77:26:
                    94:c6:7e:99:ab:c6:f3:38:25:55:49:a9:f4:e9:cd:
                    af:02:84:cb:18:dd:94:03:c6:52:4f:c2:79:77:44:
                    43:68:7f:b8:3b:f4:52:3d:b9:00:93:9d:85:af:8b:
                    98:94:73:d8:cc:31:b9:cd:62:bd:73:cf:48:13:9b:
                    da:5e:1e:c3:6a:d4:88:55:a4:be:8b:4c:42:5b:55:
                    1d:5f:7a:fa:47:29:72:89:a8:7a:09:5b:5c:dc:7a:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1A:E8:04:61:25:F2:7C:3A:C3:17:F5:48:60:54:2D:1A:A9:22:DD
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ee:4c:75:e2:93:cf:3b:40:70:de:3c:47:2b:d1:4f:d0:e7:
         74:07:24:42:dc:61:ad:71:a2:0d:3c:80:4c:47:fc:2d:1d:29:
         d6:43:f1:2a:1c:17:23:0c:6e:5e:d6:85:c1:5c:ef:6b:a3:f6:
         b5:a4:29:59:51:34:ed:55:23:15:b7:db:d8:9f:74:d1:5f:9a:
         ee:ae:da:2a:e6:04:9c:cf:20:a7:32:e1:e5:d3:ea:11:78:c7:
         ea:f6:f8:6e:1a:c1:41:c4:33:d9:ab:25:f2:df:02:04:ba:6f:
         be:5f:5d:88:41:4d:14:0b:54:47:a1:66:78:26:ec:63:91:9b:
         b9:be:ad:12:e1:d9:44:34:7f:e0:d3:62:85:00:26:94:ef:dc:
         ba:c8:11:f4:ee:4a:4d:b1:d3:57:dd:22:92:fd:c1:3b:79:22:
         9b:37:64:3e:1d:1f:fe:6e:5e:5c:e3:ca:2d:28:64:fa:6b:5a:
         43:40:db:f5:4c:20:75:77:cb:90:53:b5:1f:3d:99:d5:3a:e2:
         49:c2:f0:79:53:76:7f:1d:f4:e6:2b:46:7f:89:ef:89:af:cf:
         55:3a:8d:d0:64:4e:48:02:e4:91:13:ef:84:d6:26:b7:f4:56:
         6c:af:cf:76:ae:4b:52:16:3c:2f:c5:4e:6d:1a:3e:c1:1a:8d:
         6e:57:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----