Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          i2VlOFTaHMRt0HNSU4MB2pmJiIvJhsgmrb+8QzIPHVQ=
Subject key identifier:   D9:BF:9F:F5:33:68:09:B7:AA:DF:6E:B7:EC:29:66:EC:7F:7C:42:5E
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       09F7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          09F3
Signing time:             Thu 24 Sep 2026 01:41:43 +0000
Manifest this update:     Thu 24 Sep 2026 01:41:42 +0000
Manifest next update:     Sat 26 Sep 2026 01:41:42 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: GPXZGhp6wCSQtiRlyVLY4akjSK13nLS7YjMF3Pmez7U=)
                          2: 5072AEFE89D111F18B20B5CDCE1D38B0.roa (hash: F8n2BcR3ryzUl8HMLoSq2Rf5j6pryb+IcWt69b/OZWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Sep 24 01:41:42 2026 GMT
            Not After : Sep 26 01:41:42 2026 GMT
        Subject: CN=6ab47fd7-7613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:ba:2d:63:3b:12:f2:73:eb:75:1c:99:f0:
                    c8:42:43:62:34:82:f7:b3:e7:a8:e9:2c:4d:15:a3:
                    28:a6:b6:30:56:a8:6c:a1:06:e8:20:f3:67:ad:ef:
                    4f:d0:a5:cf:db:58:f5:7e:b9:44:75:19:57:97:f9:
                    56:3a:bf:f7:2d:ee:6f:81:9e:62:b5:3b:48:a7:f5:
                    92:18:b1:63:0e:b6:f2:96:26:56:42:a8:14:4f:93:
                    a9:bd:dd:38:82:9c:54:35:60:ad:8b:27:ed:1d:29:
                    00:5c:6d:b1:80:fb:08:65:d4:59:1d:4b:41:27:c9:
                    1f:54:ce:86:ae:66:ba:6b:29:70:9c:35:3d:36:39:
                    4b:26:69:8f:22:cd:b2:5c:12:3a:0e:a4:00:6f:50:
                    a1:ae:bf:45:02:6b:be:e1:05:d9:13:68:70:d5:08:
                    21:b8:c9:ad:00:9c:44:da:78:b9:05:b7:21:9e:4a:
                    0d:93:d9:a6:3b:1c:29:4e:72:ea:73:ad:26:2e:07:
                    96:78:30:85:c4:83:93:3b:3a:e7:2a:4a:9d:c8:f7:
                    86:69:d2:b0:cc:ae:df:e8:9c:b5:52:ee:0e:69:e2:
                    9e:c8:91:da:2f:c2:7d:c1:d7:49:f7:e6:ee:34:73:
                    af:d1:a8:62:aa:fe:b3:35:a2:10:1c:fb:57:b3:ed:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BF:9F:F5:33:68:09:B7:AA:DF:6E:B7:EC:29:66:EC:7F:7C:42:5E
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:f2:6b:8b:69:8d:6b:e9:d0:c0:fa:59:60:50:a9:53:95:
         6f:08:ef:6d:ec:3d:ef:6e:c5:f1:db:2f:67:2e:bd:c0:30:fa:
         f8:a0:3f:20:a3:5d:74:8d:54:45:da:53:4f:64:d8:ac:1b:b5:
         9d:d6:74:19:a4:1f:cc:4a:c7:da:f9:4b:d9:ef:67:5c:0b:78:
         cc:0c:6e:99:81:99:1f:22:98:5d:37:f8:af:65:b3:ae:c2:78:
         a7:f6:29:41:42:a4:c8:99:b9:56:15:b7:a9:fd:10:8a:61:00:
         90:f8:b6:a7:2f:1f:38:5d:49:d5:ff:82:2c:cc:ec:8f:d4:ca:
         6c:1f:0a:ed:53:23:67:8b:04:9c:c0:7e:db:ea:91:75:6c:92:
         4e:e9:66:5a:af:23:61:1e:41:57:c0:c3:44:fc:7a:75:44:81:
         37:c1:94:36:27:61:d6:ba:ae:2b:7a:a6:a2:77:20:fd:fc:67:
         d3:12:04:3e:2a:74:8f:39:66:e2:b2:56:1f:1a:3f:c2:21:3b:
         96:8b:7f:70:a6:8c:33:dc:c3:0c:68:bf:17:cc:c5:c2:89:4f:
         48:c3:d8:d5:6b:d8:9f:78:63:7b:f8:87:bf:41:d4:2d:84:0a:
         8b:63:5c:14:fc:02:e7:54:1f:47:1f:2f:97:ea:cb:40:45:a4:
         d8:1b:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----