Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.mft (raw, json)
Hash identifier:          dLKvlus1OEozYzfhuVzVh33SKUMb6MrHkU22O47VN+o=
Subject key identifier:   A7:45:D4:CC:51:BB:3F:17:B2:87:C2:CD:AC:05:61:76:B7:64:7E:15
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Certificate issuer:       /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial:       0A48
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
Manifest number:          0A47
Signing time:             Sun 15 Nov 2026 01:37:15 +0000
Manifest this update:     Sun 15 Nov 2026 01:37:14 +0000
Manifest next update:     Tue 17 Nov 2026 01:37:14 +0000
Files and hashes:         1: 9zORrduc3mc6pJF07KjUMLSfGcM.crl (hash: dVvecJOh/oWCBTXV+3V/gmcOqHDQ7dDz5Gj8axEu3E8=)
                          2: FBB32E86FC8111E9BB7F292CF8AEA228.roa (hash: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                          rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AR, serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Validity
            Not Before: Nov 15 01:37:14 2026 GMT
            Not After : Nov 17 01:37:14 2026 GMT
        Subject: CN=6af90ccb-c2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:65:16:52:03:d0:c9:a8:cc:88:b9:9c:77:
                    ba:a0:20:83:2d:ca:1f:a9:d9:d5:9b:71:d7:1c:f9:
                    50:51:a3:0f:e5:45:d7:ab:99:f8:51:a2:2a:45:b8:
                    3f:29:60:4b:01:c3:b8:00:fc:d2:f8:5b:c4:72:31:
                    5f:a6:75:0e:63:97:3a:8a:f8:9a:18:85:68:db:cf:
                    3e:2a:2e:1a:cd:72:22:f7:99:da:34:92:a3:4b:05:
                    d7:6c:9d:c6:80:80:e0:d9:08:6d:8c:c9:7b:31:33:
                    2e:c0:36:cd:c5:a9:2d:13:f5:f0:c0:09:b4:2e:57:
                    1b:dd:9e:5d:58:91:af:20:db:a1:50:41:a8:35:19:
                    18:d6:9a:7b:92:c8:73:8d:29:75:3c:54:25:77:2a:
                    c2:3d:ae:a1:b8:45:ba:e9:f2:db:b9:d7:21:80:28:
                    74:21:4a:c2:8f:85:2b:e9:25:22:41:3e:82:07:81:
                    f5:8a:63:30:49:fe:cd:e7:fc:6e:ba:28:53:7b:86:
                    6d:1c:76:44:8f:aa:ac:c1:99:cf:4e:eb:fb:20:60:
                    af:7e:54:35:32:e7:4a:64:66:b3:63:09:20:23:da:
                    48:4f:55:5c:e7:6f:dc:b2:b3:41:2a:c5:a9:9e:51:
                    13:f8:80:27:91:ad:17:b1:0c:83:86:c8:0d:8f:87:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:D4:CC:51:BB:3F:17:B2:87:C2:CD:AC:05:61:76:B7:64:7E:15
            X509v3 Authority Key Identifier:
                keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:58:2c:35:ef:85:98:c9:77:0c:9b:2c:7a:f4:a2:4f:45:04:
         25:8e:9a:88:e3:b1:66:51:63:ab:23:c9:2c:fa:70:a1:97:e6:
         25:ed:88:c5:6d:84:93:b7:b2:99:24:74:1a:f5:2c:7f:ad:dc:
         3a:42:bf:cb:c7:49:04:cd:2d:06:28:ce:a4:4e:6c:fe:4b:66:
         ca:be:cd:d9:b8:b5:01:0f:32:1c:4c:c9:81:20:27:4b:5e:05:
         69:e9:f6:ed:17:b6:4c:6b:88:20:73:e7:bb:84:5f:39:66:50:
         57:68:11:49:be:c5:89:e0:58:41:9a:f3:2a:e3:b7:50:70:3c:
         b2:9b:48:3e:a6:6b:7d:11:d0:38:23:09:a8:16:a1:14:ba:ba:
         f7:b7:5a:d0:29:63:98:36:82:54:12:b3:56:4d:92:05:e8:a8:
         9d:c8:04:5b:c6:1e:3c:ee:44:33:b8:2b:d4:cb:8e:96:59:12:
         7e:7b:a2:cf:d4:2a:ea:a3:fb:1b:49:37:63:30:f2:8f:61:40:
         a7:02:1c:e4:c1:00:fc:af:68:a5:58:7a:53:09:f1:65:ab:21:
         d8:51:b0:e6:f9:cb:79:d2:bb:aa:a2:38:2d:ab:3c:9c:50:ea:
         92:78:a8:93:20:3f:7e:91:42:57:cf:dd:0c:71:35:af:8b:8a:
         aa:8a:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----