Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          +ZAf3g0GEbes1oGuHGhYqELJ90CBPlnCQI2ZEVgWjJs=
Subject key identifier:   A4:18:F4:87:6E:6F:C0:A5:D8:C4:A4:D2:E8:59:8B:FF:49:0F:6E:F2
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0EC7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0EC5
Signing time:             Sat 14 Nov 2026 01:05:21 +0000
Manifest this update:     Sat 14 Nov 2026 01:05:20 +0000
Manifest next update:     Mon 16 Nov 2026 01:05:20 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: pgOgSwvtQkzQqttVbE8lSWY5zijF61wFlPvLNUow5JQ=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3783 (0xec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Nov 14 01:05:20 2026 GMT
            Not After : Nov 16 01:05:20 2026 GMT
        Subject: CN=6af7b3d1-1356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:34:18:9e:e4:23:43:d2:c3:d6:59:43:34:
                    db:a2:f2:12:78:91:11:17:f0:1c:cc:da:76:32:14:
                    37:a7:66:95:7e:35:d8:0d:98:4d:98:bf:71:8e:4a:
                    3a:0b:fb:17:da:98:0e:d7:d4:a6:58:00:7c:3b:fc:
                    2c:c8:69:13:f0:ea:8a:72:f6:0f:b0:7c:22:21:8e:
                    09:97:0b:0f:89:66:8a:47:8c:b7:de:8e:ec:12:e7:
                    b9:88:d7:1d:11:6e:71:f3:3c:ad:a3:48:f2:c1:e2:
                    bd:ab:48:a3:55:6a:bf:a7:52:bc:b1:11:9a:e8:ed:
                    12:a8:9a:ba:a9:b7:f2:22:9e:6c:c0:9a:dd:03:88:
                    bc:23:50:ef:fa:ff:07:c8:ab:24:20:00:3d:de:bd:
                    28:2e:9c:93:ad:00:3e:8a:9c:0b:4d:2b:81:3e:82:
                    d5:b4:87:07:73:8e:a8:19:5c:ea:85:2d:f1:5a:44:
                    e9:35:58:53:18:c4:36:61:3c:3b:10:69:ad:b3:ed:
                    cc:0e:2b:ba:db:68:06:66:f8:12:76:0f:5d:92:61:
                    7d:2a:9d:9a:b1:ef:54:e4:b3:1a:18:e6:6c:99:ac:
                    16:84:df:f0:35:c4:08:44:69:da:21:92:9e:70:56:
                    6a:d2:6e:74:50:d0:68:4d:ee:bf:b0:9c:b0:3e:35:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:F4:87:6E:6F:C0:A5:D8:C4:A4:D2:E8:59:8B:FF:49:0F:6E:F2
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:91:c2:bd:68:69:a7:b8:0d:ba:92:23:da:1b:97:60:92:84:
         62:75:2c:8b:b2:6b:1b:47:1d:0b:bc:85:f7:a3:9d:ff:53:e2:
         61:e1:b3:b6:5d:22:78:44:04:2a:42:db:7a:9d:a4:4b:69:8e:
         f3:a7:cf:6c:80:20:b8:32:10:62:f4:a1:25:8d:fa:3f:74:f3:
         97:e0:b2:51:4d:bb:19:11:0a:86:06:c8:bf:b5:5c:19:e8:79:
         1b:8e:c7:61:d8:0a:22:5a:15:9b:8d:44:fd:37:ff:bd:77:12:
         72:45:72:d4:61:7e:96:7e:3d:d5:4e:87:fc:d5:1a:43:ad:f4:
         00:f6:37:78:5e:bd:c3:87:b4:57:97:8a:86:1f:ca:03:0c:08:
         b3:a9:a3:03:6b:6e:a3:53:81:83:2f:d3:33:60:1a:14:32:11:
         f1:af:87:37:31:57:5d:b2:b1:ce:18:2e:b1:e1:6b:48:31:0e:
         e9:b0:b2:e6:e3:43:0c:b1:d0:86:f5:06:05:a2:1f:36:b3:cd:
         29:5e:eb:a4:9e:5e:7f:40:7f:87:df:1e:96:4c:3d:52:30:82:
         a2:6e:5e:29:41:26:1f:fc:ff:7a:c8:f7:a5:0f:f8:3d:de:62:
         86:f6:d3:97:c5:37:a8:e9:0b:c0:23:35:c8:77:f6:d2:5f:5e:
         0e:49:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----