Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
File:                     0sTzVYe07S0EZPKfkswmt10TiZE.mft (raw, json)
Hash identifier:          pWZxeFhMmnGyChYbBV4wHNI12bRXFZ6ZLGREAqvFUio=
Subject key identifier:   BB:7D:B1:F8:54:74:03:94:3C:C0:0C:56:BF:60:C6:9E:12:A3:69:48
Authority key identifier: D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91
Certificate issuer:       /CN=F369859BAR/serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
Certificate serial:       0358
Authority info access:    rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
Manifest number:          0358
Signing time:             Sat 26 Sep 2026 04:13:33 +0000
Manifest this update:     Sat 26 Sep 2026 04:13:32 +0000
Manifest next update:     Mon 28 Sep 2026 04:13:32 +0000
Files and hashes:         1: 0sTzVYe07S0EZPKfkswmt10TiZE.crl (hash: ghL4n6C5gTDjqAKwUhTHXmm9T1bHIeUmUfYMOTBkthc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                          rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAR, serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
        Validity
            Not Before: Sep 26 04:13:32 2026 GMT
            Not After : Sep 28 04:13:32 2026 GMT
        Subject: CN=6ab7466d-e923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:81:bc:23:b7:f4:98:3e:41:06:47:29:08:
                    1c:1c:b8:17:78:e5:38:97:68:46:42:e5:91:b2:62:
                    da:f6:15:14:68:ce:e2:49:a8:80:ce:23:fc:88:fb:
                    9a:19:6b:a3:6e:47:bc:6d:3b:53:84:d8:5d:16:2f:
                    10:9d:f6:81:d9:98:2b:aa:77:77:e2:f1:4c:97:d3:
                    3c:94:27:28:0b:3d:e8:80:76:47:6a:74:63:7a:4f:
                    8c:07:b1:5b:1f:1c:f2:71:e8:24:14:c0:ba:a1:bb:
                    df:86:d6:4f:c5:21:61:b1:9e:8c:8c:e4:36:5f:6b:
                    c4:af:b7:9d:ac:30:6d:dc:01:4a:39:6d:70:01:9c:
                    88:fe:34:8f:36:5e:a2:8a:48:fe:64:03:c7:c6:6e:
                    fd:04:57:71:35:85:2e:03:0f:6a:06:9a:fd:69:b3:
                    05:76:12:9f:bd:b3:a7:c8:fd:da:b8:05:6d:e3:1a:
                    5e:a4:ec:5d:74:c2:39:ae:be:ec:d2:b6:c5:3f:0a:
                    53:b2:fd:d3:da:cd:d4:b0:8e:d6:83:65:04:a9:51:
                    bc:fb:17:a3:0f:69:ca:68:03:47:2f:a8:ed:cf:be:
                    ec:0d:a6:f8:17:9d:b9:ac:65:4c:5b:27:94:98:67:
                    e5:df:53:fc:a1:ea:50:b1:9f:71:98:97:5c:51:c9:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7D:B1:F8:54:74:03:94:3C:C0:0C:56:BF:60:C6:9E:12:A3:69:48
            X509v3 Authority Key Identifier:
                keyid:D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:69:4d:c8:77:6c:57:cf:6b:65:20:aa:eb:67:78:58:f3:c5:
         ca:22:9a:15:19:b0:93:43:09:84:93:f0:17:d1:73:fc:1d:ff:
         99:dc:3d:c7:34:39:53:c7:9d:f1:e8:d8:5d:ad:67:85:28:14:
         04:33:5c:9a:be:ff:d2:75:67:7f:8d:74:cf:7a:fd:10:c2:cf:
         64:f8:f1:c8:f9:d2:c6:5b:35:c4:25:d7:89:10:38:0a:e6:47:
         7f:8c:49:fe:b2:55:4e:3a:cd:1b:97:80:0b:91:35:a0:f9:99:
         06:85:dc:6f:9e:e7:f2:ae:b1:54:8d:15:f7:89:a0:64:a4:cd:
         9c:0f:2e:a3:11:86:f9:63:a3:9a:df:f4:25:cb:21:d3:40:29:
         51:91:39:39:b2:4c:f1:4c:e1:c8:4c:5d:6d:17:d4:a6:7f:a3:
         d5:34:21:32:10:67:55:5d:c5:fa:4e:42:82:6a:86:8c:19:28:
         3c:40:06:0c:6f:82:40:eb:c6:d5:09:42:07:7a:bf:eb:32:c9:
         48:ff:a6:fc:09:d0:1f:96:7a:ec:3a:a0:24:bc:45:4e:15:2b:
         75:ef:2e:82:53:fc:79:46:69:bd:f8:67:56:9f:f6:d4:88:7f:
         aa:13:01:62:02:0d:c5:b4:28:34:dd:5d:37:3f:e7:18:76:0d:
         ce:86:b1:de
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTg1OUJBUjExMC8GA1UEBRMoRDJDNEYzNTU4N0I0RUQyRDA0NjRGMjlGOTJDQzI2
Qjc1RDEzODk5MTAeFw0yNjA5MjYwNDEzMzJaFw0yNjA5MjgwNDEzMzJaMBgxFjAU
BgNVBAMTDTZhYjc0NjZkLWU5MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGtYG8I7f0mD5BBkcpCBwcuBd45TiXaEZC5ZGyYtr2FRRozuJJqIDOI/yI
+5oZa6NuR7xtO1OE2F0WLxCd9oHZmCuqd3fi8UyX0zyUJygLPeiAdkdqdGN6T4wH
sVsfHPJx6CQUwLqhu9+G1k/FIWGxnoyM5DZfa8Svt52sMG3cAUo5bXABnIj+NI82
XqKKSP5kA8fGbv0EV3E1hS4DD2oGmv1pswV2Ep+9s6fI/dq4BW3jGl6k7F10wjmu
vuzStsU/ClOy/dPazdSwjtaDZQSpUbz7F6MPacpoA0cvqO3PvuwNpvgXnbmsZUxb
J5SYZ+XfU/yh6lCxn3GYl1xRyUV1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUu32x
+FR0A5Q8wAxWv2DGnhKjaUgwHwYDVR0jBBgwFoAU0sTzVYe07S0EZPKfkswmt10T
iZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4NTlCLzlFMUZERjlDMjQxNTExRUZBRjQwQUEzNDdEREMyNEMyLzBzVHpW
WWUwN1MwRVpQS2Zrc3dtdDEwVGlaRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzBzVHpWWWUwN1MwRVpQS2Zrc3dtdDEwVGlaRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTg1OUIvOUUxRkRGOUMyNDE1MTFFRkFGNDBBQTM0N0REQzI0
QzIvMHNUelZZZTA3UzBFWlBLZmtzd210MTBUaVpFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLaU3Id2xXz2tlIKrrZ3hY88XKIpoVGbCT
QwmEk/AX0XP8Hf+Z3D3HNDlTx53x6NhdrWeFKBQEM1yavv/SdWd/jXTPev0Qws9k
+PHI+dLGWzXEJdeJEDgK5kd/jEn+slVOOs0bl4ALkTWg+ZkGhdxvnufyrrFUjRX3
iaBkpM2cDy6jEYb5Y6Oa3/QlyyHTQClRkTk5skzxTOHITF1tF9Smf6PVNCEyEGdV
XcX6TkKCaoaMGSg8QAYMb4JA68bVCUIHer/rMslI/6b8CdAflnrsOqAkvEVOFSt1
7y6CU/x5Rmm9+GdWn/bUiH+qEwFiAg3FtCg03V03P+cYdg3OhrHe
-----END CERTIFICATE-----