Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.mft (raw, json)
Hash identifier:          VQdTW5VQCX/7oZKQ85t47rxDaMhB9l0UqrZTQnBf2OU=
Subject key identifier:   0E:4C:3D:50:04:B1:CE:7F:64:E2:DD:87:49:A7:DA:11:25:33:43:8D
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Certificate issuer:       /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
Manifest number:          02A4
Signing time:             Tue 22 Sep 2026 04:39:42 +0000
Manifest this update:     Tue 22 Sep 2026 04:39:41 +0000
Manifest next update:     Thu 24 Sep 2026 04:39:41 +0000
Files and hashes:         1: jho3RHX7X1BwyGbGDdVeiurPcXM.crl (hash: yCakroQkVbzMpaqDv1LsGIF3Cie2UtMl4AKoNAVrUvc=)
                          2: 77A53CFAAD8011EF8D542C9E762E951A.roa (hash: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                          rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 04:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AR, serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Validity
            Not Before: Sep 22 04:39:41 2026 GMT
            Not After : Sep 24 04:39:41 2026 GMT
        Subject: CN=6ab2068e-9855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:83:17:4f:15:19:ac:7d:2b:2b:ab:26:c4:
                    51:85:1d:c6:56:a8:91:0c:40:aa:52:ba:a9:de:de:
                    88:5a:b4:2e:24:4e:b0:c1:7a:f4:11:d0:2a:e3:5a:
                    61:0f:32:b2:98:fc:29:96:3e:aa:b9:70:45:9d:81:
                    89:a7:1d:e0:67:08:92:47:59:13:8e:22:78:70:00:
                    36:ee:33:28:d4:bf:b2:f4:74:25:4c:f4:e7:0f:5e:
                    df:1c:cb:cf:66:2c:c1:83:ce:77:b8:0b:9c:ee:57:
                    f7:7c:c5:c9:1c:f3:b6:d0:f2:bb:1d:cf:ee:dd:59:
                    fc:74:00:cd:ef:30:8b:a3:1a:06:8e:80:76:1e:2b:
                    71:30:97:d9:48:c3:b0:28:ee:a1:b8:88:1c:e4:11:
                    d3:e5:89:fc:2f:e0:54:44:45:37:04:f5:cb:31:d0:
                    34:76:c8:ff:bd:32:0f:56:eb:09:be:84:6d:9b:7d:
                    ea:90:cb:e6:13:87:32:39:09:f3:58:9c:32:2c:ad:
                    d8:3c:1b:4b:46:a6:ae:68:53:a0:1c:85:e5:c3:5c:
                    82:ce:f2:16:64:c0:84:0f:e8:11:21:cb:3b:8e:fe:
                    90:7c:46:4b:af:c7:99:c1:8f:3f:83:02:ec:5a:3c:
                    c8:6a:8d:99:9c:53:05:b4:a1:1b:32:ff:4a:c1:0e:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:3D:50:04:B1:CE:7F:64:E2:DD:87:49:A7:DA:11:25:33:43:8D
            X509v3 Authority Key Identifier:
                keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:48:58:d2:17:5b:6b:e1:43:74:6a:a0:bf:10:a4:8a:ed:
         4d:e5:f7:bf:ad:57:bc:d9:b2:ac:54:e9:9c:06:e1:7c:ce:86:
         83:3a:ff:5f:6a:4d:3f:4d:dd:2b:35:f1:9f:ed:24:ff:bb:9b:
         55:40:d5:5e:43:67:1c:90:3d:94:87:c0:3a:52:70:15:f8:1b:
         b2:3e:77:6a:41:08:ae:56:4d:dd:81:86:25:3d:0c:27:a5:61:
         6e:35:25:ff:b3:5e:3f:12:12:0b:fb:cf:fd:18:02:bc:a0:da:
         6b:a2:37:84:62:b7:f0:40:e8:d8:79:52:3f:5f:5b:ec:c6:c8:
         27:4a:23:87:73:f8:53:2e:4d:3a:7d:18:eb:51:46:c7:cb:3b:
         53:04:db:ef:9b:a3:53:f0:63:39:4f:14:2b:5e:a1:d4:77:2e:
         fa:23:02:fa:70:b9:4e:07:b2:29:ea:a5:89:77:36:02:24:a3:
         0a:11:b4:a6:36:9b:85:ab:e2:86:77:c7:49:ed:19:a9:f2:01:
         1b:84:e3:5b:2a:39:99:2e:4f:5c:48:48:2b:b8:80:89:65:6b:
         4d:37:4f:ea:9e:2d:56:dd:1b:fc:6b:79:50:f5:55:83:43:75:
         0a:ba:8e:b0:a4:f3:12:4c:4c:bb:c6:a1:02:ba:6f:90:5e:f8:
         1e:a6:cd:c5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTMxQzVBUjExMC8GA1UEBRMoOEUxQTM3NDQ3NUZCNUY1MDcwQzg2NkM2MERENTVF
OEFFQUNGNzE3MzAeFw0yNjA5MjIwNDM5NDFaFw0yNjA5MjQwNDM5NDFaMBgxFjAU
BgNVBAMTDTZhYjIwNjhlLTk4NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFQ4MXTxUZrH0rK6smxFGFHcZWqJEMQKpSuqne3ohatC4kTrDBevQR0Crj
WmEPMrKY/CmWPqq5cEWdgYmnHeBnCJJHWROOInhwADbuMyjUv7L0dCVM9OcPXt8c
y89mLMGDzne4C5zuV/d8xckc87bQ8rsdz+7dWfx0AM3vMIujGgaOgHYeK3Ewl9lI
w7Ao7qG4iBzkEdPlifwv4FRERTcE9csx0DR2yP+9Mg9W6wm+hG2bfeqQy+YThzI5
CfNYnDIsrdg8G0tGpq5oU6AcheXDXILO8hZkwIQP6BEhyzuO/pB8Rkuvx5nBjz+D
AuxaPMhqjZmcUwW0oRsy/0rBDsHnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUDkw9
UASxzn9k4t2HSafaESUzQ40wHwYDVR0jBBgwFoAUjho3RHX7X1BwyGbGDdVeiurP
cXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzMUM1LzU5MUUzRTg2QUQ3RjExRUZBRjk2NzU5Nzc2MkU5NTFBL2pobzNS
SFg3WDFCd3lHYkdEZFZlaXVyUGNYTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2pobzNSSFg3WDFCd3lHYkdEZFZlaXVyUGNYTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTMxQzUvNTkxRTNFODZBRDdGMTFFRkFGOTY3NTk3NzYyRTk1
MUEvamhvM1JIWDdYMUJ3eUdiR0RkVmVpdXJQY1hNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBB+UhY0hdba+FDdGqgvxCkiu1N5fe/rVe8
2bKsVOmcBuF8zoaDOv9fak0/Td0rNfGf7ST/u5tVQNVeQ2cckD2Uh8A6UnAV+Buy
PndqQQiuVk3dgYYlPQwnpWFuNSX/s14/EhIL+8/9GAK8oNprojeEYrfwQOjYeVI/
X1vsxsgnSiOHc/hTLk06fRjrUUbHyztTBNvvm6NT8GM5TxQrXqHUdy76IwL6cLlO
B7Ip6qWJdzYCJKMKEbSmNpuFq+KGd8dJ7Rmp8gEbhONbKjmZLk9cSEgruICJZWtN
N0/qni1W3Rv8a3lQ9VWDQ3UKuo6wpPMSTEy7xqECum+QXvgeps3F
-----END CERTIFICATE-----