Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          euzbyIM50UAzv7818LXe/Pmj+jYx2m0NyyVvWO7k8yE=
Subject key identifier:   99:83:E5:20:02:D5:0F:20:FD:55:31:EC:FE:5E:63:DF:90:9E:9C:E5
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0AB1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0AB0
Signing time:             Sun 27 Sep 2026 01:25:19 +0000
Manifest this update:     Sun 27 Sep 2026 01:25:18 +0000
Manifest next update:     Tue 29 Sep 2026 01:25:18 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: laZW0bECalTSyx7g7n1Atc1mgKnYOgoW1JTVMKJydG0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Sep 27 01:25:18 2026 GMT
            Not After : Sep 29 01:25:18 2026 GMT
        Subject: CN=6ab8707f-5863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:8b:2d:39:93:3f:54:1c:07:27:8a:1e:d1:
                    3f:93:a5:7d:59:3e:42:26:2a:3f:55:1d:93:8f:3a:
                    2b:8e:c9:96:1b:ac:b8:40:46:d6:bc:2b:4c:3b:86:
                    25:97:49:33:05:41:63:a8:6d:a4:de:7b:81:ab:47:
                    6e:46:79:43:29:b5:bb:cb:7a:f9:6d:bb:49:84:f4:
                    b7:b4:f5:0e:78:09:70:3a:27:d6:dd:b4:a8:61:b3:
                    f6:75:51:a5:87:3a:38:7a:74:cd:9e:6c:ff:81:7d:
                    5d:94:9c:6b:b1:ea:4b:9c:40:e9:0d:dd:e0:bf:dc:
                    2f:71:56:01:1a:43:07:77:ce:bf:c1:8c:e2:06:1e:
                    a1:c5:6e:a9:57:b0:e7:b3:52:9c:a7:f1:67:60:13:
                    96:dd:7b:e3:a7:5b:c5:68:46:53:50:26:14:20:2a:
                    48:0b:75:9c:52:cd:4e:39:27:e7:ef:92:64:2c:ad:
                    2e:0a:8f:12:94:60:0c:be:b3:d7:62:1b:8e:59:6d:
                    69:5b:76:46:7a:94:aa:35:c6:33:48:0e:47:57:05:
                    6a:a2:f2:d4:a5:8d:ff:37:b1:37:29:7a:c0:68:57:
                    a2:4b:0e:0c:30:2c:08:32:1b:42:8d:8b:10:bd:18:
                    49:79:9c:79:9e:e1:5c:04:a4:71:7a:ee:32:16:8d:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:83:E5:20:02:D5:0F:20:FD:55:31:EC:FE:5E:63:DF:90:9E:9C:E5
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:88:af:fb:cf:13:64:c9:a5:f0:ac:85:6e:4f:ea:2b:d5:f2:
         82:28:60:8c:50:a2:45:49:90:1e:cc:6f:9e:5a:5a:8b:5b:94:
         05:6b:3a:b8:98:3b:30:ae:16:e3:28:42:4b:fd:e8:8d:f3:64:
         d5:9c:bc:da:8c:ec:23:7e:a4:6e:aa:f0:7d:34:ef:bd:bf:ca:
         9d:4f:34:63:52:59:4e:d6:20:34:4c:d9:2c:9a:99:b9:f1:a0:
         d7:3e:ef:a4:4a:9a:ac:d9:c8:25:37:44:30:04:de:c3:4d:49:
         c1:7b:ba:cc:19:6e:56:6a:83:42:0c:01:0e:fd:de:1c:1a:dd:
         61:b2:d1:17:fd:81:f5:92:b7:c0:ff:db:5b:85:34:d1:a6:24:
         f6:06:68:80:3f:d7:20:4e:da:4a:e0:10:83:12:40:4a:31:83:
         6f:ae:65:d4:48:7e:40:5b:3c:12:df:a1:ea:94:29:15:fe:bd:
         eb:c6:cf:24:5f:de:b8:53:ac:c9:f7:91:59:d3:49:15:15:c7:
         cf:bf:c2:65:6d:6e:7a:ec:67:ba:0e:06:b2:d8:e0:f8:8a:47:
         50:b0:37:28:43:8d:67:f5:af:ad:f2:52:05:d3:92:92:83:65:
         00:80:6a:ed:16:ef:96:c4:a0:01:8f:ed:2a:58:d1:b1:ce:10:
         b0:c6:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----