Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
File:                     rHITs7LocPtTc8MpQCO1C-Vd5gw.mft (raw, json)
Hash identifier:          FkAQ07UV8Y7tr5KfaSirjndgEckjbahtVUykQPs8LTM=
Subject key identifier:   E7:73:31:13:79:15:20:5F:79:EF:5F:AF:60:67:34:B5:24:C2:1C:63
Authority key identifier: AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C
Certificate issuer:       /CN=F36894B8AR/serialNumber=AC7213B3B2E870FB5373C3294023B50BE55DE60C
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
Manifest number:          1C
Signing time:             Sat 10 Oct 2026 05:57:25 +0000
Manifest this update:     Sat 10 Oct 2026 05:57:25 +0000
Manifest next update:     Mon 12 Oct 2026 05:57:25 +0000
Files and hashes:         1: rHITs7LocPtTc8MpQCO1C-Vd5gw.crl (hash: Rns88QhBpDPnUQDFyF16lEiZxhwckzliLdGQ8ya5fR8=)
                          2: FFFD6E52B03411F19F2D32E6CE1D38B0.roa (hash: Va63pqJ3CMpQhpi8Ld4p5aHiyR85A5tdFO5Lva8PMsw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
                          rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 05:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36894B8AR, serialNumber=AC7213B3B2E870FB5373C3294023B50BE55DE60C
        Validity
            Not Before: Oct 10 05:57:25 2026 GMT
            Not After : Oct 12 05:57:25 2026 GMT
        Subject: CN=6ac9d3c5-3df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:78:11:4b:22:92:a9:ed:dc:6c:73:fe:3f:bf:
                    f0:33:a0:94:8c:c3:74:cd:47:71:db:69:4e:3f:19:
                    fa:ef:58:5c:1d:89:38:c8:a6:dd:ae:86:75:af:84:
                    88:86:07:5d:19:b4:c4:90:8b:45:ac:2a:0c:3f:d7:
                    71:fa:14:17:49:6d:aa:a6:9c:ec:a6:e4:c7:0b:44:
                    15:a5:90:37:56:38:6a:ba:05:5e:c2:60:9e:ef:43:
                    c4:04:76:88:7c:fb:e1:04:9c:35:cd:0a:81:81:15:
                    c1:6e:4a:fc:df:8c:e0:b3:bf:7a:37:35:9f:39:8a:
                    e2:6e:d4:e2:94:49:12:17:b2:47:22:80:97:c1:ba:
                    c1:13:ef:18:df:29:b8:cb:36:1a:cb:7e:4e:1f:d0:
                    47:0c:ec:c8:39:7e:28:46:74:92:f7:24:17:f9:5e:
                    91:fb:1e:35:49:7b:20:70:32:36:97:c8:e2:26:3f:
                    c1:72:93:16:de:e9:33:05:ab:64:af:40:38:ae:71:
                    eb:ec:d3:c4:c4:77:89:76:1d:3a:5a:76:7e:b8:09:
                    c3:ea:42:aa:f5:ff:22:0a:b4:69:d2:16:3b:3a:6f:
                    7b:6f:3b:d3:27:31:34:73:16:55:0d:fe:f4:92:92:
                    61:4e:da:f1:a0:9c:87:45:09:13:e4:69:68:26:10:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:31:13:79:15:20:5F:79:EF:5F:AF:60:67:34:B5:24:C2:1C:63
            X509v3 Authority Key Identifier:
                keyid:AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:c4:e7:b4:0d:2c:fb:6d:95:aa:f0:7a:4b:b9:c5:ce:79:
         d7:6d:e1:aa:74:cd:55:87:4c:73:ca:f9:a3:74:83:da:b6:af:
         f4:a8:c6:c7:9c:78:01:72:2f:2d:17:d5:bc:c6:97:f2:f1:71:
         9e:85:f5:84:45:c1:b0:78:8b:de:85:c7:e1:3d:62:a5:fd:7c:
         0b:43:67:71:e2:51:fb:c2:cb:33:ca:43:ad:2a:c2:ef:d1:ac:
         07:3f:cf:11:b4:aa:1c:74:1e:c6:70:07:cb:07:7a:24:67:e3:
         ea:5a:bc:6b:8f:05:28:90:fc:71:d1:75:7b:64:56:57:be:ae:
         fd:0a:2c:db:2a:05:05:43:92:6a:f1:93:3c:ca:77:f3:49:eb:
         c2:0f:0c:3f:de:01:27:dd:a9:38:08:15:3d:9f:8f:8c:a6:ae:
         16:9b:59:23:88:65:3f:15:d8:7d:d4:cb:05:d5:9e:1f:ad:4f:
         7f:8f:60:9b:5a:81:ac:4b:1d:35:ed:83:73:7e:f7:be:63:7a:
         54:e4:6e:bf:e9:61:56:dd:b8:43:51:aa:0a:4c:44:41:04:26:
         ed:cd:2e:f4:e5:1e:0b:19:82:ae:93:12:37:d2:31:ac:16:b1:
         a9:9d:51:a2:d9:8c:b3:a4:42:c3:c9:2e:db:cf:ff:a4:71:da:
         17:f8:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----