Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          +DRERKiHkviXd13ofehi2UZ9O7/TkyYLul4IZlhhNU4=
Subject key identifier:   59:05:A7:0B:28:56:F2:50:02:4F:AB:D2:2E:62:09:73:B4:C0:55:95
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       064E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          064B
Signing time:             Sun 15 Nov 2026 02:51:29 +0000
Manifest this update:     Sun 15 Nov 2026 02:51:29 +0000
Manifest next update:     Tue 17 Nov 2026 02:51:29 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: TA17VmGCZirsIvpuZezc1124KY996mhgZIdifNl34pg=)
                          2: 3786E1E6875411F1AB4D1CA6CE1D38B0.roa (hash: c5g+zlY8gSNebtc8+UVgbZSk+dgTpqbWRZq27v61klg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Nov 15 02:51:29 2026 GMT
            Not After : Nov 17 02:51:29 2026 GMT
        Subject: CN=6af91e31-565a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:53:a2:5a:f5:cc:6f:4f:54:5c:6c:b6:84:
                    20:20:9b:43:9c:bb:9b:7b:44:28:b8:88:45:ab:4d:
                    1d:9d:d9:6c:1c:86:6c:36:78:9b:b3:49:b0:8e:ba:
                    ab:5a:12:38:68:80:e1:1c:58:7b:e7:23:ff:ac:cb:
                    cc:1e:26:75:b6:42:50:ce:f0:36:ad:8c:a7:6a:39:
                    72:0a:51:d0:46:2f:12:6e:68:55:64:52:2b:ca:c9:
                    e4:f5:82:9c:d7:8d:71:ba:da:66:6f:76:42:02:2e:
                    02:06:93:cb:86:80:b8:95:71:08:39:d0:ea:40:32:
                    3a:0f:ef:42:fd:19:e3:51:60:43:2c:63:6a:85:25:
                    d6:85:19:72:32:c3:da:b0:24:4b:7c:d3:0d:a8:d3:
                    da:f5:44:fb:9a:46:a6:9f:26:90:aa:d6:c5:f5:7f:
                    0b:85:67:92:96:b5:64:e0:5c:cb:00:51:2c:cf:6a:
                    88:cf:35:95:04:1c:bf:c3:a2:e5:35:34:36:c1:e1:
                    6c:fb:18:1e:36:6d:ba:35:80:d4:0c:7a:e1:a7:54:
                    44:be:87:a6:c9:f8:03:a7:44:9d:e1:b1:da:81:7d:
                    1e:7c:07:53:25:57:6b:94:87:45:96:05:eb:b6:e4:
                    b4:5f:f8:86:fd:f4:5b:d8:71:9b:75:60:eb:5a:74:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:A7:0B:28:56:F2:50:02:4F:AB:D2:2E:62:09:73:B4:C0:55:95
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:95:d1:80:0c:01:56:2a:01:ae:8d:43:67:c2:ca:be:99:ef:
         a6:59:9c:7f:45:a4:79:e9:82:be:0a:77:6b:b1:0d:01:01:02:
         8d:c9:cc:0c:f5:d9:13:15:5c:98:ab:7c:38:e1:45:51:4c:f2:
         5d:79:39:33:7d:e8:82:d2:3b:0c:2e:b7:ca:b0:77:bc:50:21:
         2e:26:48:61:58:0a:01:3d:48:b8:f6:3a:8a:be:de:7d:50:1f:
         eb:94:5b:15:75:ce:0d:6e:26:94:3e:6d:b8:25:b4:20:de:41:
         59:ad:ba:92:9e:9b:ca:22:04:94:b6:72:5a:a1:93:0b:f5:4f:
         46:36:c5:a1:ba:1e:e3:b0:95:d5:6e:a6:dd:8d:13:47:92:18:
         6c:b4:3f:6d:6f:ae:89:a4:39:a8:84:c0:5a:83:10:3d:e8:be:
         01:c1:4f:a5:b9:81:67:e1:06:35:9e:4b:0e:25:ea:e1:03:d1:
         66:b2:60:77:1b:32:17:d7:ed:a0:b8:8b:85:fc:df:6e:42:23:
         96:f2:09:d6:8c:51:d1:40:56:45:31:d9:a8:38:1e:d5:77:2e:
         1c:80:ab:a4:14:e5:6b:79:6e:6d:db:aa:5d:f0:43:00:5e:3e:
         9d:46:1e:05:8b:3c:a9:3a:24:b2:f1:e3:2d:4d:3d:99:a5:5c:
         f6:6a:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----