Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
File:                     htscudi9_Ntk5yx843BiWWXoPT0.mft (raw, json)
Hash identifier:          6kwx2muGqFwoJBto0sUhIdpg1LyeTqy50ZgHrmRGq1Y=
Subject key identifier:   F6:B8:04:F7:99:BB:34:77:3C:E9:A3:55:54:2A:72:68:AB:A1:C6:44
Authority key identifier: 86:DB:1C:B9:D8:BD:FC:DB:64:E7:2C:7C:E3:70:62:59:65:E8:3D:3D
Certificate issuer:       /CN=F3664D8DAR/serialNumber=86DB1CB9D8BDFCDB64E72C7CE370625965E83D3D
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/htscudi9_Ntk5yx843BiWWXoPT0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
Manifest number:          1A
Signing time:             Sun 15 Nov 2026 06:02:54 +0000
Manifest this update:     Sun 15 Nov 2026 06:02:54 +0000
Manifest next update:     Tue 17 Nov 2026 06:02:54 +0000
Files and hashes:         1: htscudi9_Ntk5yx843BiWWXoPT0.crl (hash: xI2kpNzavkv9mVTuGN3eCPXeWMoLO0Ee7pjE9zyMMhg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
                          rsync://rpki.afrinic.net/repository/arin/htscudi9_Ntk5yx843BiWWXoPT0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664D8DAR, serialNumber=86DB1CB9D8BDFCDB64E72C7CE370625965E83D3D
        Validity
            Not Before: Nov 15 06:02:54 2026 GMT
            Not After : Nov 17 06:02:54 2026 GMT
        Subject: CN=6af94b0e-2ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:9c:76:a7:ba:29:93:02:83:7d:51:95:23:
                    7e:db:c5:6a:31:5f:ab:08:40:33:91:f1:9e:52:f0:
                    ea:b2:e0:aa:8f:54:b9:80:64:17:e7:19:69:57:c5:
                    67:a9:96:81:ac:c9:eb:75:6f:b9:32:cc:96:d7:0c:
                    ea:60:1a:50:23:09:23:a7:ef:70:7f:0a:97:02:bb:
                    74:74:9f:bf:24:df:6c:38:05:26:b1:1c:2c:2a:c0:
                    cf:6e:87:06:67:ce:5b:31:6c:46:21:d7:79:45:04:
                    cb:46:bd:9e:15:00:e5:47:9f:d4:90:19:bf:95:b4:
                    f9:e9:95:22:3c:f9:e1:72:ff:40:63:4d:67:d9:58:
                    c3:cd:81:12:b3:de:75:30:fe:9b:12:c7:cd:fe:3a:
                    72:5c:23:9d:0f:c2:48:78:0e:c0:14:df:2d:52:9f:
                    34:b2:28:1c:eb:cb:0d:da:af:bc:ba:8c:72:f6:f5:
                    d4:a6:b4:11:c1:79:0f:b6:6e:f8:e9:e8:4b:33:08:
                    18:62:56:c4:f2:e2:bb:15:8c:df:fc:86:d2:b2:b1:
                    e9:85:57:82:a7:42:70:17:aa:c3:fe:8f:8c:f8:af:
                    f8:a8:37:a1:c2:05:d7:bd:1d:04:07:5e:9d:26:04:
                    39:63:74:d8:e1:fd:14:80:61:ea:3c:90:e8:0e:2d:
                    0a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B8:04:F7:99:BB:34:77:3C:E9:A3:55:54:2A:72:68:AB:A1:C6:44
            X509v3 Authority Key Identifier:
                keyid:86:DB:1C:B9:D8:BD:FC:DB:64:E7:2C:7C:E3:70:62:59:65:E8:3D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/htscudi9_Ntk5yx843BiWWXoPT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:32:80:9b:fb:d0:80:dc:18:7e:35:c1:b0:25:aa:4c:ff:
         ef:71:6c:cf:f2:4d:cc:ac:14:70:21:a2:5e:90:99:f5:20:57:
         1a:74:ae:ed:cf:4f:f6:92:16:81:9b:c1:29:7f:4a:d3:dd:e2:
         f5:93:6b:55:79:b4:b0:c0:28:b6:9b:80:ab:e3:f0:1f:e0:e0:
         ae:bb:df:80:9d:8d:ae:0d:62:55:9a:60:c3:76:f1:32:b8:2d:
         ca:de:87:7f:a6:bb:bb:37:6b:5e:de:67:55:e3:69:72:f7:61:
         25:b3:1f:36:d6:7a:e2:24:38:8f:c4:a3:c0:4f:04:0f:1d:47:
         02:11:85:71:c3:32:af:9d:60:5a:3c:ec:f8:5f:45:43:50:08:
         02:56:ed:97:c4:b6:fe:1b:ff:99:db:75:c4:4f:bd:8b:5c:54:
         c8:0e:cd:be:71:11:bd:72:e5:e2:1d:b8:51:c3:0f:72:76:ac:
         2e:79:53:2c:29:41:db:ef:d9:88:8f:7f:98:35:03:76:a4:92:
         14:83:e0:55:ee:b8:00:fb:8a:82:fd:09:6c:80:b9:38:e1:99:
         fc:2f:4c:4e:59:58:57:a3:1e:2a:7e:1a:c4:c9:b6:3b:50:33:
         4a:59:d0:55:8a:6f:ac:38:b4:09:6f:e9:4d:9d:26:56:7d:28:
         99:f9:1e:64
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBGjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
NEQ4REFSMTEwLwYDVQQFEyg4NkRCMUNCOUQ4QkRGQ0RCNjRFNzJDN0NFMzcwNjI1
OTY1RTgzRDNEMB4XDTI2MTExNTA2MDI1NFoXDTI2MTExNzA2MDI1NFowGDEWMBQG
A1UEAxMNNmFmOTRiMGUtMmFkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKLWnHanuimTAoN9UZUjftvFajFfqwhAM5HxnlLw6rLgqo9UuYBkF+cZaVfF
Z6mWgazJ63VvuTLMltcM6mAaUCMJI6fvcH8KlwK7dHSfvyTfbDgFJrEcLCrAz26H
BmfOWzFsRiHXeUUEy0a9nhUA5Uef1JAZv5W0+emVIjz54XL/QGNNZ9lYw82BErPe
dTD+mxLHzf46clwjnQ/CSHgOwBTfLVKfNLIoHOvLDdqvvLqMcvb11Ka0EcF5D7Zu
+OnoSzMIGGJWxPLiuxWM3/yG0rKx6YVXgqdCcBeqw/6PjPiv+Kg3ocIF170dBAde
nSYEOWN02OH9FIBh6jyQ6A4tCtECAwEAAaOCArUwggKxMB0GA1UdDgQWBBT2uAT3
mbs0dzzpo1VUKnJoq6HGRDAfBgNVHSMEGDAWgBSG2xy52L3822TnLHzjcGJZZeg9
PTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjREOEQvREM5RTI4N0FDRDYyMTFGMTk2QzVDRjA3Q0YxRDM4QjAvaHRzY3Vk
aTlfTnRrNXl4ODQzQmlXV1hvUFQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
aHRzY3VkaTlfTnRrNXl4ODQzQmlXV1hvUFQwLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY2NEQ4RC9EQzlFMjg3QUNENjIxMUYxOTZDNUNGMDdDRjFEMzhC
MC9odHNjdWRpOV9OdGs1eXg4NDNCaVdXWG9QVDAubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGqLMoCb+9CA3Bh+NcGwJapM/+9xbM/yTcys
FHAhol6QmfUgVxp0ru3PT/aSFoGbwSl/StPd4vWTa1V5tLDAKLabgKvj8B/g4K67
34Cdja4NYlWaYMN28TK4Lcreh3+mu7s3a17eZ1XjaXL3YSWzHzbWeuIkOI/Eo8BP
BA8dRwIRhXHDMq+dYFo87PhfRUNQCAJW7ZfEtv4b/5nbdcRPvYtcVMgOzb5xEb1y
5eIduFHDD3J2rC55UywpQdvv2YiPf5g1A3akkhSD4FXuuAD7ioL9CWyAuTjhmfwv
TE5ZWFejHip+GsTJtjtQM0pZ0FWKb6w4tAlv6U2dJlZ9KJn5HmQ=
-----END CERTIFICATE-----