Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          rOWokrqjQIDVihKShb0BhM9MwIdQ89+vdbdg7gwNaHg=
Subject key identifier:   34:1B:65:C5:68:9E:AE:87:05:1F:9B:72:08:F3:CA:69:A4:90:6B:22
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       0A2A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          0A26
Signing time:             Sat 14 Nov 2026 01:40:27 +0000
Manifest this update:     Sat 14 Nov 2026 01:40:27 +0000
Manifest next update:     Mon 16 Nov 2026 01:40:27 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: iB4i8GEa5V3K4wXYsgrbjZKEF6zBkf9pCJ+tUcs4+DU=)
                          2: 5072AEFE89D111F18B20B5CDCE1D38B0.roa (hash: F8n2BcR3ryzUl8HMLoSq2Rf5j6pryb+IcWt69b/OZWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602 (0xa2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Nov 14 01:40:27 2026 GMT
            Not After : Nov 16 01:40:27 2026 GMT
        Subject: CN=6af7bc0b-fcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:d6:d0:07:9e:98:a3:1a:eb:66:06:9b:3a:
                    57:bf:69:fe:e0:19:60:b1:42:ce:14:1a:5a:67:e6:
                    4b:45:8e:9e:43:b2:88:e2:9c:62:da:2a:f0:b4:58:
                    88:a3:3b:79:66:bc:65:a8:a1:91:37:b3:15:15:e7:
                    77:98:9a:22:e2:e6:8c:92:14:b9:7e:12:42:44:fd:
                    da:c4:db:b1:fb:17:9d:7e:78:67:47:c1:bc:42:eb:
                    ae:18:5f:ca:b6:da:e2:84:2b:be:11:9c:d8:f0:b1:
                    33:3b:83:3f:7d:c0:e6:63:46:da:6d:6d:02:e3:d6:
                    a9:ba:be:53:4e:64:5a:c2:38:96:2f:e3:67:7b:6f:
                    00:77:3c:43:3f:ba:81:0f:b1:d7:00:9e:db:f0:d0:
                    67:49:aa:ca:a3:68:20:61:e9:dc:b7:4c:44:09:27:
                    6a:9b:31:b7:1e:60:39:8c:f8:f5:5e:51:df:fc:a5:
                    14:cb:00:6d:56:8b:e1:64:01:b2:4c:be:16:ab:49:
                    12:84:ab:c1:98:26:4a:dc:11:30:85:72:b3:01:0b:
                    58:45:e2:79:14:b1:46:90:bf:4b:fb:9b:b6:19:c6:
                    8d:8d:ba:6d:97:ef:a4:5c:a4:0b:74:7a:f3:9f:b1:
                    6d:a3:f4:06:4b:8b:5a:7b:c5:64:98:a3:f5:c5:b0:
                    b0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:65:C5:68:9E:AE:87:05:1F:9B:72:08:F3:CA:69:A4:90:6B:22
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:21:6a:a3:3b:42:91:ef:a8:a8:18:29:94:1c:cf:58:98:6d:
         98:4a:65:07:84:bb:1a:84:a6:ea:4d:dc:d3:c3:e5:7d:a5:ad:
         fc:d9:61:55:06:90:3f:e6:18:22:f9:ff:d1:48:97:98:d2:e7:
         ed:d5:dc:fe:25:cb:e7:49:23:2c:a2:1b:4b:2a:da:93:4f:59:
         fb:32:cd:cb:df:13:6c:82:7f:58:a2:2f:d5:df:43:b1:91:43:
         18:64:ef:25:61:10:85:6b:12:be:80:a8:8e:57:9d:df:44:f5:
         9e:99:6a:90:32:1b:fa:96:68:41:dc:b1:35:a2:c3:e2:d5:95:
         d5:c8:73:a1:37:f6:8a:3f:5c:09:72:58:f5:7c:45:67:ed:3c:
         00:1f:ba:11:d7:d5:56:1f:75:32:67:31:d7:5b:16:43:6b:a3:
         6e:2f:3b:28:86:33:9b:55:1d:e2:50:18:99:07:ec:23:e6:aa:
         85:e3:f4:62:60:b8:28:14:71:58:8c:81:fd:12:fc:39:1f:23:
         e2:40:1b:e6:bc:64:95:5e:0a:f8:0e:6e:2c:33:f6:b4:61:47:
         56:2b:22:97:a7:41:b5:68:c6:ce:71:97:7b:2f:cd:ad:5e:c5:
         d6:a8:42:e9:e6:47:ce:bd:32:c1:8f:b7:d9:01:5d:8b:3a:2c:
         7e:68:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----