Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
File:                     BoarqsOL5_GqLSv8WD8tN9iLpEI.mft (raw, json)
Hash identifier:          J3dsLNh4VwacoZy4wBscmNWf1tBLC+GMFvLVil+wjH8=
Subject key identifier:   20:24:F9:AC:D9:37:61:59:5C:58:3E:83:5A:3A:42:8F:63:C3:18:3C
Authority key identifier: 06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Certificate issuer:       /CN=F3660C14AR/serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
Certificate serial:       0A91
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
Manifest number:          0A91
Signing time:             Fri 25 Sep 2026 01:31:13 +0000
Manifest this update:     Fri 25 Sep 2026 01:31:12 +0000
Manifest next update:     Sun 27 Sep 2026 01:31:12 +0000
Files and hashes:         1: BoarqsOL5_GqLSv8WD8tN9iLpEI.crl (hash: g3kj6wRHUjWanV9q2ofq+6RtFpBPY0KlHpKp9PM03uo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                          rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2705 (0xa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AR, serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
        Validity
            Not Before: Sep 25 01:31:12 2026 GMT
            Not After : Sep 27 01:31:12 2026 GMT
        Subject: CN=6ab5cee1-91d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:89:db:53:49:34:c2:37:1f:58:c7:33:ba:
                    cd:7b:8b:ce:12:b6:b8:56:9b:23:2c:99:2e:a1:0c:
                    ee:3f:70:ba:5b:c5:ac:c6:46:1e:38:d2:6d:e1:3b:
                    05:5d:6a:27:10:7d:6d:a4:c6:43:4c:37:91:68:76:
                    1d:b3:ed:20:bb:c3:71:6a:10:20:74:75:35:90:89:
                    ae:c0:89:18:a2:f8:36:b1:76:ab:47:e3:49:ef:8a:
                    49:4b:d4:ba:be:20:da:8b:27:a5:58:f1:4c:0d:2b:
                    b2:3b:3b:d5:97:fd:40:af:55:43:c1:9a:c7:03:aa:
                    fa:f8:b4:88:57:81:08:fc:5b:f3:e1:dd:b0:7f:2e:
                    ac:c8:79:a0:ca:6e:dd:82:f6:ff:0a:e3:6d:25:ac:
                    d8:0a:08:26:36:30:65:49:42:2a:74:a5:b9:e1:b6:
                    1d:2c:4b:97:81:86:07:19:31:92:9a:cf:da:90:7c:
                    d6:81:b0:d7:bf:bb:52:63:01:83:f7:ca:7a:31:70:
                    3f:e3:8c:62:fc:d8:e8:69:75:b7:49:24:85:0b:56:
                    38:9a:45:5a:5d:a0:1d:da:8c:3c:90:d4:9b:d5:8c:
                    14:de:20:cd:bf:82:c7:b8:a1:93:84:81:bc:c1:54:
                    d0:b2:71:75:9f:b0:cc:df:9c:ba:01:f3:b6:fd:d8:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:F9:AC:D9:37:61:59:5C:58:3E:83:5A:3A:42:8F:63:C3:18:3C
            X509v3 Authority Key Identifier:
                keyid:06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:ed:33:c2:fe:2f:1e:e2:70:85:57:da:fa:37:b9:b4:f5:
         42:6a:a3:be:c1:04:7f:8f:f3:2f:de:fe:5f:45:bf:48:1d:9f:
         4c:32:be:40:97:3b:ec:68:31:8d:fc:df:60:fa:e4:41:12:76:
         fb:1b:a4:53:9d:2f:ad:fa:2b:65:74:c2:b1:8a:70:9f:71:c9:
         df:9e:3a:09:44:ab:9a:34:52:56:70:35:c2:0b:a1:77:e2:4a:
         31:c8:e3:f2:04:88:61:3e:15:e8:b5:28:33:75:34:72:09:13:
         bd:eb:dd:da:33:38:66:fc:dc:d6:d0:d5:e4:0c:e9:4e:42:0c:
         0e:30:24:55:2f:4f:df:b4:76:c1:18:c1:55:9c:3f:17:a5:f2:
         66:38:b1:88:b1:aa:59:79:8d:d3:17:87:6b:76:65:cf:60:e5:
         b2:a9:c1:a9:db:8a:be:ca:c8:a6:79:0a:32:ab:9a:5c:3f:aa:
         3f:88:c5:83:c6:9e:45:37:7c:6f:15:54:95:df:be:1e:f3:6c:
         5f:d9:6b:c3:c5:18:d3:2e:a2:6a:48:30:c0:2f:b3:87:94:cb:
         06:14:d3:16:cf:4c:dc:3c:1d:8f:45:57:61:2d:93:3b:02:e3:
         f6:38:04:8e:79:3e:41:0c:26:c8:55:eb:eb:9c:48:69:2b:98:
         f2:0f:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----