Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          e2nm9eWi5/6lgzcb8wS8lFZBe2GoyZYxfKd2mDi5gSA=
Subject key identifier:   A4:A3:14:8F:24:04:35:5D:09:8C:48:6B:06:F2:64:69:7D:43:7B:68
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       075B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          075A
Signing time:             Fri 25 Sep 2026 02:22:38 +0000
Manifest this update:     Fri 25 Sep 2026 02:22:38 +0000
Manifest next update:     Sun 27 Sep 2026 02:22:38 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: fnmvDt18bwKo0Rycb43OOtAoOKaP3GZNJb8BvE0IXrw=)
                          2: C93FE84E002211F184675EEADAE4EC9C.roa (hash: TnE7/LRtwIE2mvtxTz48ANwLuGsO5DbiYWo+sAJoECs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Sep 25 02:22:38 2026 GMT
            Not After : Sep 27 02:22:38 2026 GMT
        Subject: CN=6ab5daee-7b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:ce:4e:9a:3f:bd:2d:1c:cb:46:43:8e:b9:
                    63:b8:1a:05:ee:87:96:60:08:90:f0:e6:bb:f7:48:
                    a6:0d:01:18:55:72:66:24:4f:cd:26:c9:98:b0:74:
                    f8:e9:e0:1c:f3:37:f4:af:4c:0f:98:b2:a8:8d:f9:
                    dd:ed:59:ab:d8:1d:2f:9e:ea:ac:76:d7:2b:3a:ed:
                    0c:49:8b:52:63:03:a5:64:bc:9e:70:8b:8f:9a:bd:
                    17:4e:09:5c:6a:33:cd:76:b2:b0:1b:df:ad:01:22:
                    a6:72:c4:62:b0:94:29:b4:04:ad:f0:d6:0e:ad:89:
                    bf:d6:23:0f:a9:58:1e:9f:2c:ec:57:36:c7:74:19:
                    c4:c7:0e:ee:aa:ec:d7:08:d0:7d:29:97:b0:c5:b5:
                    d0:91:a4:3a:99:d4:57:f6:46:fd:eb:64:0b:d3:d9:
                    f8:9a:af:9e:cd:55:02:6c:23:b2:02:45:ab:d1:3c:
                    c6:c6:99:34:96:b2:86:7a:84:53:bc:08:77:bc:55:
                    a4:4a:c0:3d:9b:67:c1:8f:3b:0b:d6:33:c7:01:a1:
                    aa:f1:b7:15:03:76:95:84:3e:fa:2a:10:55:9a:46:
                    47:61:54:83:0f:53:12:f3:ba:25:f3:ab:cf:ab:5e:
                    6e:cb:6c:af:25:fb:e6:3a:0b:d0:d7:53:4b:c3:6a:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:14:8F:24:04:35:5D:09:8C:48:6B:06:F2:64:69:7D:43:7B:68
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:87:60:73:74:c3:93:b3:2d:23:41:ae:4e:da:45:6e:64:11:
         c3:b2:0e:67:55:de:ed:da:a4:bd:1d:47:0a:61:ec:48:ec:3d:
         46:c0:ae:6f:d2:92:21:f5:eb:28:5b:4a:f1:5a:de:0b:4b:7e:
         5d:99:ca:e5:6e:12:3c:f6:e0:e3:27:1d:ac:b3:9e:10:da:f4:
         32:56:7d:87:42:ba:ea:1b:4b:ea:8e:e8:33:21:60:d6:e2:ca:
         ae:61:e1:ff:c8:de:a3:81:e6:d7:15:cb:f9:54:92:64:fb:c5:
         f1:57:be:2b:bb:c3:29:9c:58:20:43:d4:0b:3e:78:26:24:46:
         6c:f5:83:ef:09:61:d5:ab:7b:35:26:10:32:75:f3:cc:67:d6:
         b9:2f:d4:91:c1:fa:d7:fe:5c:ed:64:d3:fd:bc:fd:19:7d:44:
         74:11:3f:0f:8c:be:0f:cd:ed:d6:c8:27:1f:4c:a6:b5:8e:3c:
         7b:89:97:81:6a:cc:69:6c:ed:4f:92:a7:49:ca:b9:73:c0:4b:
         9a:ca:a1:ab:79:c4:9e:34:ad:8a:93:83:f4:dc:52:59:87:26:
         0b:4e:40:8e:70:6b:70:64:69:8a:45:8d:20:b8:57:3e:99:86:
         4d:c5:ec:98:d1:1c:cd:f5:02:24:af:fb:d5:21:85:3f:44:26:
         ec:33:c2:c4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB1swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk5RTBBUjExMC8GA1UEBRMoMjIyQUUzMDE4Mjg3MzcxRDM4Q0FFMzE4NzQwQTFD
QjUyQjA1RDlCQTAeFw0yNjA5MjUwMjIyMzhaFw0yNjA5MjcwMjIyMzhaMBgxFjAU
BgNVBAMTDTZhYjVkYWVlLTdiNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDacM5Omj+9LRzLRkOOuWO4GgXuh5ZgCJDw5rv3SKYNARhVcmYkT80myZiw
dPjp4BzzN/SvTA+YsqiN+d3tWavYHS+e6qx21ys67QxJi1JjA6VkvJ5wi4+avRdO
CVxqM812srAb360BIqZyxGKwlCm0BK3w1g6tib/WIw+pWB6fLOxXNsd0GcTHDu6q
7NcI0H0pl7DFtdCRpDqZ1Ff2Rv3rZAvT2fiar57NVQJsI7ICRavRPMbGmTSWsoZ6
hFO8CHe8VaRKwD2bZ8GPOwvWM8cBoarxtxUDdpWEPvoqEFWaRkdhVIMPUxLzuiXz
q8+rXm7LbK8l++Y6C9DXU0vDao1TAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUpKMU
jyQENV0JjEhrBvJkaX1De2gwHwYDVR0jBBgwFoAUIirjAYKHNx04yuMYdAoctSsF
2bowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5OUUwL0JDRTFENkZDMTQ2MzExRUM4NTIyM0IzM0Q4QTAxNENFL0lpcmpB
WUtITngwNHl1TVlkQW9jdFNzRjJiby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0lpcmpBWUtITngwNHl1TVlkQW9jdFNzRjJiby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTk5RTAvQkNFMUQ2RkMxNDYzMTFFQzg1MjIzQjMzRDhBMDE0
Q0UvSWlyakFZS0hOeDA0eXVNWWRBb2N0U3NGMmJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyh2BzdMOTsy0jQa5O2kVuZBHDsg5nVd7t
2qS9HUcKYexI7D1GwK5v0pIh9esoW0rxWt4LS35dmcrlbhI89uDjJx2ss54Q2vQy
Vn2HQrrqG0vqjugzIWDW4squYeH/yN6jgebXFcv5VJJk+8XxV74ru8MpnFggQ9QL
PngmJEZs9YPvCWHVq3s1JhAydfPMZ9a5L9SRwfrX/lztZNP9vP0ZfUR0ET8PjL4P
ze3WyCcfTKa1jjx7iZeBasxpbO1PkqdJyrlzwEuayqGrecSeNK2Kk4P03FJZhyYL
TkCOcGtwZGmKRY0guFc+mYZNxeyY0RzN9QIkr/vVIYU/RCbsM8LE
-----END CERTIFICATE-----