Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File:                     KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier:          GWX2llofsbAajZwSZeGvY1g/npo7B3yLHcRUsay3930=
Subject key identifier:   A1:1F:A9:1D:6A:49:2C:51:6F:87:B8:96:A4:8D:43:83:69:24:5D:44
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer:       /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial:       0577
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number:          0575
Signing time:             Fri 25 Sep 2026 03:08:13 +0000
Manifest this update:     Fri 25 Sep 2026 03:08:12 +0000
Manifest next update:     Sun 27 Sep 2026 03:08:12 +0000
Files and hashes:         1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: VVDAlHH97zVncfPi1wk3BXBrTWFlbidfKJol+GKnAOk=)
                          2: 5698C4728D7711F195BD11A9CE1D38B0.roa (hash: UatJHt+lZTC3A+YKRk8bCN0broh1snWF863Wd3rJti0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                          rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
        Validity
            Not Before: Sep 25 03:08:12 2026 GMT
            Not After : Sep 27 03:08:12 2026 GMT
        Subject: CN=6ab5e59d-30cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4f:90:84:cc:fb:0d:c2:f6:1d:8e:9b:46:c3:
                    84:eb:57:37:7e:af:4b:75:27:cf:ba:3f:c6:ea:ce:
                    b3:91:83:20:4b:d0:8f:99:ff:7a:02:1c:f8:12:54:
                    08:e3:20:92:2a:c6:67:49:62:df:b7:da:5c:5b:56:
                    2d:d2:aa:c8:56:bc:7d:91:10:bc:15:56:31:8b:b9:
                    82:cb:e9:e7:ad:4c:e6:14:40:d0:bf:dd:3c:2c:38:
                    50:78:07:f0:1a:9a:9e:9b:56:5f:13:07:50:24:b8:
                    59:20:7c:28:ff:0b:da:6d:7a:5f:9a:6b:fe:9b:3d:
                    74:77:62:a9:2c:65:39:a5:a2:dd:32:d8:60:d4:81:
                    29:5d:23:b1:a3:b6:5e:f4:c7:c1:be:4b:3e:e1:60:
                    76:38:ed:a9:70:e1:8b:21:56:06:fe:fe:6c:00:4e:
                    50:7f:b5:5a:b2:29:d0:c1:bd:d2:0c:b8:b7:46:48:
                    d2:4e:1e:ff:92:da:5e:aa:a8:cd:91:c1:3c:6e:80:
                    35:aa:f9:7c:a5:65:06:b0:9b:fc:62:2f:d1:4b:a2:
                    c3:76:cd:c6:44:2e:41:d1:da:35:ee:37:66:4a:5d:
                    29:52:4b:45:2e:22:e2:22:99:3b:f7:d1:60:bc:f8:
                    1d:09:76:a8:30:18:23:fa:dc:bc:c9:8d:cd:2d:1b:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:A9:1D:6A:49:2C:51:6F:87:B8:96:A4:8D:43:83:69:24:5D:44
            X509v3 Authority Key Identifier:
                keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:de:88:6f:11:a3:40:67:c8:01:d9:21:25:3f:73:83:3b:d0:
         5f:45:39:83:cb:c5:03:23:23:f8:d0:c7:43:66:6b:2c:ee:f4:
         42:f0:99:71:41:4f:33:9d:31:9c:07:2d:71:54:10:5e:78:9f:
         8c:89:94:f2:b6:bc:b4:f2:dc:46:35:c3:4d:0e:d4:38:ee:86:
         e4:25:de:e6:35:cd:46:e8:3c:fe:27:5b:d6:dc:76:19:7a:90:
         5f:03:2c:c8:b9:c3:1a:9e:cd:d1:c9:6e:d2:f0:b9:35:38:90:
         f9:e7:f6:50:4c:ae:b3:94:ad:83:df:a0:5b:02:cf:be:cf:ba:
         09:0f:e5:4e:c2:7c:0d:4e:ae:ef:ad:90:42:0e:67:a8:16:7e:
         c7:7b:44:be:14:43:01:88:63:20:7d:fb:92:07:77:30:be:29:
         7b:54:28:ae:09:19:ba:d7:d4:3c:a3:9e:01:1d:4d:1d:7d:62:
         2c:e4:9d:31:ab:9b:40:d2:01:33:37:7b:53:19:00:9f:47:b1:
         56:3b:e6:13:bf:0c:66:2a:db:14:67:d1:dd:0e:a2:6e:09:66:
         5d:ea:70:9a:7d:bb:1a:4f:db:9f:56:2c:4d:43:74:74:a3:69:
         45:00:89:37:ee:33:1f:20:38:f4:11:1b:f7:87:28:77:15:b6:
         4c:de:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----