Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          27Ttttri4O0IzCPiFSvO/RBxxpJlWnxOxmu1vTMzHiM=
Subject key identifier:   E0:63:EE:C8:BE:A7:C0:84:78:87:44:AC:63:49:CA:8B:85:E4:8B:11
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0F21
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0F20
Signing time:             Sun 11 Oct 2026 01:01:36 +0000
Manifest this update:     Sun 11 Oct 2026 01:01:35 +0000
Manifest next update:     Tue 13 Oct 2026 01:01:35 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: FtriWca3tp+nz+ZPDpZ4OtRnK9rDcLRGx1qEjkfevMM=)
                          2: 1295CBCCD9A811F0B3211388DAE4EC9C.roa (hash: DtFf09bSwD3ukrw7d5JjXz1lpk12BRaVOODR5baCUSE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3873 (0xf21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Oct 11 01:01:35 2026 GMT
            Not After : Oct 13 01:01:35 2026 GMT
        Subject: CN=6acadff0-2b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:05:e1:64:86:09:12:21:89:c6:7e:68:6c:
                    86:0d:5e:32:68:9b:2b:72:b2:ea:4e:0e:36:64:54:
                    56:18:4d:1d:19:0d:5e:bd:f9:cd:83:3d:7e:af:32:
                    f6:11:cf:1a:23:5d:3d:31:bb:16:0f:54:6a:d3:da:
                    59:f2:85:9c:b5:b7:aa:92:f7:c6:e3:72:51:74:f8:
                    6c:f5:c2:d0:38:b8:16:1d:eb:18:9f:20:f1:50:ec:
                    4f:33:4a:d2:9e:8a:aa:2d:a1:48:01:23:f6:80:aa:
                    35:2d:4c:79:e9:7a:b9:f3:c7:42:64:01:e6:bc:d4:
                    18:ed:51:bf:8b:8e:27:72:03:a5:57:d6:e8:74:7d:
                    3e:01:19:e5:94:10:f9:c0:e5:46:a3:26:6e:80:53:
                    bb:6c:29:59:85:44:ca:5e:9f:d8:fc:5b:b0:aa:b5:
                    c5:17:fe:61:7b:b6:58:94:59:fd:65:c4:db:be:3a:
                    a9:52:2b:54:36:3b:cc:61:86:7e:e9:4a:9f:5f:d7:
                    81:43:8d:ef:e4:77:f4:fc:8d:7f:5a:87:97:e8:97:
                    22:9c:06:35:21:db:e1:b2:5b:06:fb:c5:d7:4e:2e:
                    25:ba:9f:6c:17:21:f8:05:d5:3f:95:c0:11:09:a2:
                    0c:60:c6:29:4f:fb:b4:2e:73:1c:b4:7a:04:0f:c0:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:EE:C8:BE:A7:C0:84:78:87:44:AC:63:49:CA:8B:85:E4:8B:11
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:79:f1:9c:3d:27:b0:2b:dd:92:b6:4a:56:f4:89:37:38:2f:
         d7:46:55:9b:de:33:e3:2e:52:ff:1b:e9:47:fc:7d:35:f5:5f:
         aa:9c:ec:4c:dd:dc:aa:3a:01:9f:c5:48:35:b8:52:59:bc:26:
         3b:41:50:1e:d4:69:c0:55:f7:8a:1e:6b:66:d0:2d:30:b5:0d:
         2f:49:d6:10:76:72:32:77:b8:09:7f:c6:8b:5d:4b:da:eb:91:
         08:f2:58:a1:2f:a7:9a:99:30:6f:68:85:ff:c7:74:a7:30:8c:
         4d:7a:f5:2a:3e:ef:1a:73:e4:b0:74:13:00:50:13:16:96:95:
         dd:06:7f:f1:54:64:ed:aa:18:13:a2:db:d6:a5:ea:50:f5:70:
         51:34:98:b4:5c:50:b8:e4:df:4e:57:69:ea:8e:86:11:31:1c:
         72:ef:9d:39:37:1a:fd:3b:26:b7:1b:54:f1:42:0b:98:93:43:
         c9:a2:ea:94:0c:51:d4:cc:45:6a:11:7e:61:03:b8:72:ef:cf:
         e7:f1:e9:52:02:78:57:0f:68:9d:f0:db:1c:c0:9f:d6:ca:86:
         96:b6:3a:9b:f7:72:04:b9:6b:76:30:da:da:8f:fd:af:3f:35:
         a4:2e:1a:db:42:b5:a8:38:5c:d9:29:f5:fd:52:33:49:2c:e1:
         b7:47:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----