Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
File:                     CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft (raw, json)
Hash identifier:          UpYJqKfXEv53v4wdsMxtz5mVrpfG6LYWeoUFjzVPTwk=
Subject key identifier:   D9:5F:92:DA:21:94:2C:EE:DD:54:1F:0B:E6:19:12:03:36:EC:35:59
Authority key identifier: 09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04
Certificate issuer:       /CN=F36C89CDAR/serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
Certificate serial:       52
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
Manifest number:          51
Signing time:             Fri 25 Sep 2026 05:44:20 +0000
Manifest this update:     Fri 25 Sep 2026 05:44:20 +0000
Manifest next update:     Sun 27 Sep 2026 05:44:20 +0000
Files and hashes:         1: CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl (hash: cUOKGgr0wz4Z7sEeA2PPkyjXOdHtDHxE72Mvl31x68I=)
                          2: 80B35B167DBC11F186B53FF6CE1D38B0.roa (hash: mp9WTiiEl564d5f5b3Mt3Uat+rXqCkk3Pof9oq0Krno=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C89CDAR, serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
        Validity
            Not Before: Sep 25 05:44:20 2026 GMT
            Not After : Sep 27 05:44:20 2026 GMT
        Subject: CN=6ab60a34-753f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:73:c2:b1:f8:11:75:29:19:dc:a8:bf:c1:
                    d0:f8:31:c7:32:18:07:9f:4c:91:b5:32:b3:2d:fb:
                    51:63:ab:58:01:4b:d3:72:cf:78:c5:4d:71:9b:1f:
                    25:9a:31:bf:2b:c2:39:17:fa:d1:0e:a0:c5:ab:1d:
                    94:8c:31:da:f1:74:38:a6:cc:e7:c7:08:30:4c:c5:
                    99:73:1d:50:c9:98:fc:30:40:b0:ae:c4:57:6a:b6:
                    69:d4:a2:55:fc:e7:29:fc:c5:ce:5c:18:ac:3d:be:
                    be:1f:23:2c:f9:2a:77:61:d6:1c:44:0f:14:a7:79:
                    1f:b8:ce:3e:86:ab:7a:a6:e7:3a:90:e9:ec:8f:da:
                    04:86:d0:0c:6c:07:ba:6e:59:21:f2:eb:60:3a:95:
                    a1:f4:4f:63:fc:2a:3b:91:19:06:96:7b:90:25:6a:
                    0d:9d:bd:be:a4:bd:11:74:85:29:f4:48:33:74:b5:
                    ed:9c:d6:a5:28:93:17:6e:5d:8b:08:ac:aa:2a:92:
                    70:d3:d7:f2:3b:84:4d:68:11:d8:15:c0:74:74:86:
                    52:61:48:57:8e:4c:8d:ca:4c:6c:46:d5:2b:cf:f2:
                    77:0b:d6:f9:77:34:4c:ec:db:77:26:f7:58:95:f0:
                    7a:4f:31:de:b3:8a:77:f0:b4:b1:00:b6:54:b9:59:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5F:92:DA:21:94:2C:EE:DD:54:1F:0B:E6:19:12:03:36:EC:35:59
            X509v3 Authority Key Identifier:
                keyid:09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:c5:22:30:73:e9:6e:89:78:c5:02:6c:2d:99:7a:da:4b:
         28:bf:4b:28:c9:c6:18:b1:8a:a4:43:bd:0b:af:3e:16:03:cd:
         3b:dd:05:0b:54:ad:72:ea:b0:77:69:08:b5:45:ee:94:a8:65:
         4b:03:ed:b5:46:f0:96:3a:86:24:51:57:7d:ea:4f:7a:40:38:
         9b:d1:50:9b:90:bd:16:38:0d:b0:56:44:06:14:07:2b:01:ff:
         72:17:dc:f7:16:0c:ea:20:29:86:53:7f:bf:d8:8c:a1:68:16:
         50:8e:9f:7a:87:d1:d6:2b:ed:26:ca:d1:de:ba:ae:ab:88:e4:
         03:33:dc:2e:58:d4:b2:50:f7:f2:d3:d8:42:d0:9c:47:68:dd:
         22:94:bb:17:f8:80:1d:0d:e7:54:30:b9:b7:30:64:f0:be:72:
         f4:f9:db:62:36:e1:cb:e6:67:1d:54:36:4f:97:d5:d1:a5:d1:
         01:77:ee:08:ce:a5:07:7e:76:3e:59:ce:8c:ea:de:6d:23:e5:
         1c:f7:07:d2:3b:9a:74:f9:71:65:cd:fc:26:a8:9c:76:84:62:
         8f:b5:dd:19:36:0a:27:cf:1a:7d:ed:d4:89:0c:63:e6:82:ce:
         87:64:73:f5:8f:8e:33:4e:6e:d3:82:79:cd:50:da:41:e7:e2:
         74:25:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----