Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
File:                     jXM8lU5mTeBH--8DjdEt57DxtNY.mft (raw, json)
Hash identifier:          Qdq0xKQ7EN/krBpHTSIxA3dDznDDgN3UCRn0MJiFcOA=
Subject key identifier:   A9:4C:9A:EC:C6:92:2B:60:71:D1:60:DF:12:E8:48:84:8A:2C:85:24
Authority key identifier: 8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6
Certificate issuer:       /CN=F366C302AR/serialNumber=8D733C954E664DE047FBEF038DD12DE7B0F1B4D6
Certificate serial:       0392
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
Manifest number:          0390
Signing time:             Wed 30 Sep 2026 04:08:13 +0000
Manifest this update:     Wed 30 Sep 2026 04:08:12 +0000
Manifest next update:     Fri 02 Oct 2026 04:08:12 +0000
Files and hashes:         1: jXM8lU5mTeBH--8DjdEt57DxtNY.crl (hash: 7gpPZONYr1i0orEu5cONJBhfGEce4xZYwc1Y7BSQQgY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
                          rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AR, serialNumber=8D733C954E664DE047FBEF038DD12DE7B0F1B4D6
        Validity
            Not Before: Sep 30 04:08:12 2026 GMT
            Not After : Oct  2 04:08:12 2026 GMT
        Subject: CN=6abc8b2d-ef48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:08:a6:21:43:03:93:9e:fe:16:92:59:93:
                    27:4a:bb:a8:03:29:ab:fb:1f:4b:b8:e1:37:9d:21:
                    3a:63:8e:19:1e:c2:ad:c9:87:58:29:03:0b:08:28:
                    0a:e3:7d:44:63:f4:19:1d:5d:3e:4c:ea:4a:9e:0b:
                    83:81:f0:4f:9e:dc:cf:8f:76:34:7e:4f:fc:08:72:
                    50:b2:1f:d5:8c:d4:5e:e4:f9:1a:2c:11:a4:47:24:
                    70:36:b7:05:6f:e8:ac:1b:03:d5:e5:3f:74:69:91:
                    cc:f2:fc:e9:71:30:de:5d:3f:58:21:75:15:9d:80:
                    0d:d5:ba:fc:ea:be:82:6d:5d:f2:af:0e:22:47:4b:
                    d3:72:a6:87:6f:a8:18:5b:7a:2b:62:7c:e6:28:94:
                    e8:3f:8c:03:e9:ac:5e:91:f7:9e:87:1d:aa:17:c2:
                    72:4c:7d:b0:ba:21:cc:20:1b:4c:a2:ac:f9:1a:25:
                    39:e7:56:94:70:07:1c:7f:b3:79:ae:9c:a6:26:ac:
                    89:6d:b1:8a:cd:36:45:7e:66:92:35:a6:9e:90:4a:
                    0d:32:e5:4d:80:72:77:9a:c8:44:6c:ab:a8:03:df:
                    f5:07:c0:89:c1:32:fc:3e:b6:39:98:56:c0:94:1e:
                    b7:5e:ef:54:de:97:6f:2c:6f:3e:48:5e:63:15:57:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:9A:EC:C6:92:2B:60:71:D1:60:DF:12:E8:48:84:8A:2C:85:24
            X509v3 Authority Key Identifier:
                keyid:8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:6a:c3:0b:28:17:40:9e:99:ed:ce:27:f8:32:a9:42:26:
         c8:3d:89:4c:e6:68:f1:1a:68:49:d0:9a:7a:b9:3c:31:e2:cb:
         2c:82:9a:8a:8c:6d:c4:b1:00:72:06:a9:ac:2a:bb:60:44:5a:
         9b:f0:d3:83:1a:11:72:92:65:7e:83:7e:cb:f1:d8:7f:01:9a:
         e4:b1:7e:c5:71:f5:1a:74:34:0b:7a:07:ef:af:c5:0c:12:39:
         8c:07:4a:52:64:8b:56:03:a2:89:f3:a8:04:dd:d2:8b:c4:4a:
         bc:89:cb:d3:e2:bd:7d:5b:6e:c7:b5:a9:d7:ac:8d:ff:ee:10:
         e9:80:aa:f2:dd:12:4e:e7:6d:9d:72:e5:6b:df:54:6a:9a:aa:
         51:0a:4d:16:32:f0:72:ff:d5:da:ff:ab:a4:e7:54:c5:6d:7f:
         ce:b7:94:f5:a9:94:eb:a6:81:27:ff:78:02:09:7f:ea:8b:4d:
         1f:da:bb:12:2a:86:af:b3:16:c8:da:a0:62:d5:cf:6d:b7:6b:
         a2:05:33:be:a0:0c:b7:ea:ea:9e:00:fa:3b:be:db:0b:18:ff:
         44:87:fd:ce:01:3c:dc:14:2b:f4:81:98:83:72:eb:61:e7:ad:
         8b:d6:b9:49:5f:47:aa:1d:6b:fc:a7:c2:d7:fc:e5:03:d9:df:
         41:f1:a0:fe
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkMzMDJBUjExMC8GA1UEBRMoOEQ3MzNDOTU0RTY2NERFMDQ3RkJFRjAzOEREMTJE
RTdCMEYxQjRENjAeFw0yNjA5MzAwNDA4MTJaFw0yNjEwMDIwNDA4MTJaMBgxFjAU
BgNVBAMTDTZhYmM4YjJkLWVmNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDc/AimIUMDk57+FpJZkydKu6gDKav7H0u44TedITpjjhkewq3Jh1gpAwsI
KArjfURj9BkdXT5M6kqeC4OB8E+e3M+PdjR+T/wIclCyH9WM1F7k+RosEaRHJHA2
twVv6KwbA9XlP3Rpkczy/OlxMN5dP1ghdRWdgA3VuvzqvoJtXfKvDiJHS9Nypodv
qBhbeitifOYolOg/jAPprF6R956HHaoXwnJMfbC6IcwgG0yirPkaJTnnVpRwBxx/
s3munKYmrIltsYrNNkV+ZpI1pp6QSg0y5U2AcneayERsq6gD3/UHwInBMvw+tjmY
VsCUHrde71Tel28sbz5IXmMVV9KhAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUqUya
7MaSK2Bx0WDfEuhIhIoshSQwHwYDVR0jBBgwFoAUjXM8lU5mTeBH++8DjdEt57Dx
tNYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDMzAyLzg3Qjk0NjM0RkVFNjExRUVCRTFFMzM2RDAxNzAwMUIxL2pYTThs
VTVtVGVCSC0tOERqZEV0NTdEeHROWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2pYTThsVTVtVGVCSC0tOERqZEV0NTdEeHROWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NkMzMDIvODdCOTQ2MzRGRUU2MTFFRUJFMUUzMzZEMDE3MDAx
QjEvalhNOGxVNW1UZUJILS04RGpkRXQ1N0R4dE5ZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKymrDCygXQJ6Z7c4n+DKpQibIPYlM5mjx
GmhJ0Jp6uTwx4sssgpqKjG3EsQByBqmsKrtgRFqb8NODGhFykmV+g37L8dh/AZrk
sX7FcfUadDQLegfvr8UMEjmMB0pSZItWA6KJ86gE3dKLxEq8icvT4r19W27HtanX
rI3/7hDpgKry3RJO522dcuVr31RqmqpRCk0WMvBy/9Xa/6uk51TFbX/Ot5T1qZTr
poEn/3gCCX/qi00f2rsSKoavsxbI2qBi1c9tt2uiBTO+oAy36uqeAPo7vtsLGP9E
h/3OATzcFCv0gZiDcuth562L1rlJX0eqHWv8p8LX/OUD2d9B8aD+
-----END CERTIFICATE-----