Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          F/29Lgpa3p4YLgRzWTOala4ooseRbI95qEGOzwFlmXQ=
Subject key identifier:   5A:E6:48:74:5F:A3:01:1B:C4:5B:CC:51:30:96:12:7B:19:97:BB:41
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       0959
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          0950
Signing time:             Tue 22 Sep 2026 01:49:28 +0000
Manifest this update:     Tue 22 Sep 2026 01:49:27 +0000
Manifest next update:     Thu 24 Sep 2026 01:49:27 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: sZKw3qeLFQR7p68Uw9ZDo3GgQe84E0F/5GeUIK4SQz0=)
                          2: 99A8625A96FE11F19C5185EDCE1D38B0.roa (hash: ECeVYVnqSVePtrNnv7WRQg4E/vshrUHBa3IjZ0zix/s=)
                          3: 5F3603A4962A11F1933886E0CE1D38B0.roa (hash: KMBACeJyVBJ0puCbfz/1XEtdPxL3K0XtxQ8Urj+oW2Q=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
                          6: F3C4F07896FE11F1AAB3ACEDCE1D38B0.roa (hash: 2/iMpDmTcl0zOebckPQ0ks803UQyEcERHUqi3OJVhhg=)
                          7: 51F67174962F11F188DB07FDCE1D38B0.roa (hash: C8vjN53fFmtWhX47uFtrZkO/tziLE7NPmO35j+SgWFQ=)
                          8: 5EFC7BDC8A6511F19E0DA0DFCE1D38B0.roa (hash: c6XaX+zU98bORccST4vkvWDGnTdu9fL1YRi4X5XYzmE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 01:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393 (0x959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Sep 22 01:49:27 2026 GMT
            Not After : Sep 24 01:49:27 2026 GMT
        Subject: CN=6ab1dea7-92c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:db:73:23:7f:49:47:60:9b:30:91:92:05:
                    73:26:ff:e0:a8:3b:e8:cd:96:49:37:16:e5:fc:5d:
                    35:9a:44:cb:44:5c:86:a2:0e:66:8e:d8:4c:b2:b5:
                    f3:11:fa:93:f9:34:ec:a0:ed:0f:c1:cd:35:6a:21:
                    7e:9a:6e:88:b9:f9:8a:61:eb:e6:4d:87:83:5a:70:
                    a2:99:76:43:96:d2:73:e1:ef:ab:ff:d7:dd:7e:05:
                    0f:67:95:95:b3:46:a9:66:48:a4:e6:ea:4b:32:18:
                    18:5a:f0:2a:17:0a:e1:73:b9:1c:6e:4f:51:1c:da:
                    12:49:bf:87:90:d8:35:ee:62:04:db:dc:45:92:c9:
                    59:73:61:f6:39:17:2d:9a:fa:31:c8:06:8b:6d:a1:
                    a6:48:7b:2c:01:df:06:42:a4:2e:6b:9f:3e:f0:af:
                    c5:03:f1:80:06:a4:cc:6f:b3:e9:26:e5:5f:e4:ed:
                    8e:15:9f:83:60:cf:c9:01:37:0a:9c:36:2b:e8:35:
                    d5:ce:5e:5c:50:52:9d:dd:b7:fe:41:22:b8:47:5a:
                    1b:a0:64:43:14:fc:a9:a7:81:86:08:71:29:c9:23:
                    c3:6a:78:51:57:69:f2:e8:14:0e:5f:02:f7:53:59:
                    82:03:e2:af:b5:78:44:f5:9a:be:d4:49:d2:c6:4c:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E6:48:74:5F:A3:01:1B:C4:5B:CC:51:30:96:12:7B:19:97:BB:41
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:06:37:7c:a8:ef:f7:be:b0:ab:eb:1e:ed:05:00:99:aa:6b:
         26:40:3a:96:08:76:ca:44:51:4c:f0:a5:9b:1e:eb:a7:d4:4c:
         42:9e:60:6b:77:7a:ff:b8:c3:d2:5c:b6:78:1b:9a:d8:f7:05:
         cf:ec:b1:42:03:ec:e0:b0:66:fd:6e:38:9f:9b:3d:f9:bd:4a:
         6f:b2:8a:d2:dd:7e:be:e2:9f:eb:3e:76:46:1c:0f:1a:18:ed:
         3d:39:a3:0b:7c:29:c5:3b:50:bb:bb:8a:dd:f4:17:65:71:7b:
         53:26:e2:69:f8:d7:d9:e7:d6:4a:36:59:80:cc:bd:38:c4:f7:
         c9:e0:da:99:da:6d:1a:f6:83:81:b4:00:9a:df:98:d8:6d:52:
         73:88:92:d7:d7:d3:6b:ea:97:0e:38:ac:2d:ec:01:67:b2:a2:
         bc:3b:08:ee:7c:85:37:0b:7b:f1:47:9e:69:a4:14:b1:80:50:
         7b:a4:3d:8e:cf:f3:c7:2f:e6:93:fc:37:e5:43:65:54:f1:46:
         ad:cd:52:b2:b7:38:8b:30:e0:f3:30:14:28:bf:1b:e8:9f:ec:
         b3:ef:5e:63:c6:de:e4:8d:9d:7c:ad:d7:df:05:a9:ad:c9:d2:
         09:b2:68:4c:f1:5e:1a:38:e4:35:54:c9:94:d4:55:cc:1b:f3:
         18:97:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----