Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          Aco1eLKnnZr2quVV8MMazk3+4BM9a9+S15MDr/9zSEE=
Subject key identifier:   31:AE:FB:4D:5F:EA:32:3E:E2:7D:C3:29:C5:45:41:D1:81:91:63:59
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       098F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          0986
Signing time:             Sun 15 Nov 2026 01:48:26 +0000
Manifest this update:     Sun 15 Nov 2026 01:48:25 +0000
Manifest next update:     Tue 17 Nov 2026 01:48:25 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: DJd2UMkMQ0YuRaN3RK9GW3gtbO+kWjJmft+FEgwAqA4=)
                          2: 99A8625A96FE11F19C5185EDCE1D38B0.roa (hash: ECeVYVnqSVePtrNnv7WRQg4E/vshrUHBa3IjZ0zix/s=)
                          3: 5F3603A4962A11F1933886E0CE1D38B0.roa (hash: KMBACeJyVBJ0puCbfz/1XEtdPxL3K0XtxQ8Urj+oW2Q=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
                          6: F3C4F07896FE11F1AAB3ACEDCE1D38B0.roa (hash: 2/iMpDmTcl0zOebckPQ0ks803UQyEcERHUqi3OJVhhg=)
                          7: 51F67174962F11F188DB07FDCE1D38B0.roa (hash: C8vjN53fFmtWhX47uFtrZkO/tziLE7NPmO35j+SgWFQ=)
                          8: 5EFC7BDC8A6511F19E0DA0DFCE1D38B0.roa (hash: c6XaX+zU98bORccST4vkvWDGnTdu9fL1YRi4X5XYzmE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447 (0x98f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Nov 15 01:48:25 2026 GMT
            Not After : Nov 17 01:48:25 2026 GMT
        Subject: CN=6af90f6a-3b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:80:cb:16:1a:ae:ae:76:ee:a0:9f:e1:eb:c6:
                    60:a9:73:0e:ec:05:26:f2:a4:08:bb:7e:2b:a8:e7:
                    9f:5c:76:0c:48:fb:8f:68:0d:30:a3:8b:74:d1:bd:
                    a8:18:00:23:51:82:32:fd:48:9b:ef:82:aa:14:91:
                    6c:0c:61:9f:1d:52:b2:3c:6e:1b:71:12:c4:db:34:
                    04:36:af:20:2e:d6:47:8b:6a:ce:d8:87:44:bf:74:
                    cd:3c:4d:d8:5b:91:ee:b0:9b:1b:6c:f4:6c:f2:70:
                    34:30:24:02:30:7a:ed:1e:16:a9:44:2c:ab:b0:db:
                    21:48:c0:25:7b:9c:85:87:4a:54:2f:b3:e5:df:f0:
                    f1:a5:93:09:cd:d8:ed:46:75:5a:76:20:5a:ba:7a:
                    28:da:b6:ce:de:fd:9c:39:3e:76:b5:ce:52:f7:b6:
                    38:69:85:2d:12:68:75:72:97:65:d6:7e:91:ed:7b:
                    02:c9:56:b7:f8:05:78:97:3c:79:36:cc:b9:d2:e7:
                    8c:65:a9:90:0e:48:32:ec:bb:6c:d5:8b:7a:ae:0a:
                    d0:27:20:2c:60:0f:50:a8:91:2f:e5:b6:b3:3e:83:
                    60:fe:1a:7f:e8:48:22:e8:3c:90:8b:1a:dc:91:20:
                    0a:b4:b6:fa:4f:78:16:ce:fb:38:a3:1e:af:d3:da:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AE:FB:4D:5F:EA:32:3E:E2:7D:C3:29:C5:45:41:D1:81:91:63:59
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3a:65:b2:b7:02:2c:b2:63:8a:88:2c:79:8d:2a:57:34:af:
         f9:3b:44:50:1e:99:ce:b8:c5:c4:33:49:ae:06:2b:61:bf:61:
         1e:29:58:f0:a9:88:db:a1:06:ae:6e:f0:ad:0f:9f:9e:bb:e2:
         3c:bf:e6:32:dd:e9:d0:e4:50:6c:04:7b:dd:c6:9d:2a:51:24:
         2a:37:42:6f:9d:54:ac:e6:8a:5d:da:89:ec:c7:d0:99:e7:1b:
         dd:10:21:1b:84:55:5b:35:ac:13:78:7e:72:46:34:9c:43:d9:
         b9:50:0e:02:45:0e:f4:4d:da:61:2a:a1:92:34:ee:20:90:9e:
         9d:ce:e0:f9:73:ef:e7:69:bc:b9:58:26:ce:db:c0:ec:c5:7d:
         87:e1:01:06:c1:21:3b:bd:24:2c:43:fb:67:f3:3f:7f:58:a2:
         37:f1:f6:fe:ff:11:19:c1:de:68:83:a1:81:7e:f6:58:e5:13:
         7f:cc:16:6e:31:6a:88:ac:bf:25:e5:5d:3a:76:e8:76:bd:5b:
         00:95:f7:d0:9f:c3:78:a8:ed:67:92:da:ec:39:61:53:42:08:
         1e:bb:95:35:50:d0:14:69:5d:dc:bb:56:82:d9:df:5e:12:3c:
         96:96:92:f0:b6:b8:5d:2e:ee:02:0f:60:ad:95:0b:09:c3:d0:
         6f:65:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----