Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          bYtqeD8aYKeLzlz3ex3LtLFRkJuKk1q6CNeCbYSMPIo=
Subject key identifier:   0C:94:9A:2D:B6:19:A5:9D:E6:6D:1E:84:9F:B4:43:A6:D3:18:B3:F9
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       039B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          0399
Signing time:             Mon 28 Sep 2026 04:09:42 +0000
Manifest this update:     Mon 28 Sep 2026 04:09:41 +0000
Manifest next update:     Wed 30 Sep 2026 04:09:41 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: Xrn68b4ckCiB3GTYXVZn0NSd1GuwJdM7eldhzc8bjiU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: Sep 28 04:09:41 2026 GMT
            Not After : Sep 30 04:09:41 2026 GMT
        Subject: CN=6ab9e886-1f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:f3:8b:52:31:f1:68:34:31:17:ca:e3:54:
                    a0:b5:3d:68:42:ee:ae:ea:38:c3:1c:16:14:fc:30:
                    9c:e9:13:3d:c5:22:1e:59:4b:4c:a9:14:d8:97:a2:
                    1c:17:d7:2f:af:07:1a:3c:37:57:37:39:8f:bd:db:
                    a4:93:23:28:11:3e:b8:05:fb:bf:25:b0:a3:39:3b:
                    9b:9a:1d:cf:57:5c:6e:8b:31:24:6a:28:9e:97:48:
                    a6:d3:aa:e3:61:b8:e2:9f:38:81:c2:c6:cb:83:59:
                    f1:07:ba:b0:da:c8:bb:70:05:5a:6d:6e:3b:64:8f:
                    09:ba:41:96:df:2e:fb:5e:5f:3f:2d:b6:90:76:50:
                    97:77:e0:88:0c:90:52:fd:6a:fc:28:f8:a1:86:18:
                    6d:52:11:6d:46:86:08:27:be:b7:d1:8a:57:63:c7:
                    33:93:d6:c6:b5:5e:6f:ce:b2:77:38:75:18:07:2c:
                    f8:85:c3:e6:99:ac:3c:be:5d:d7:05:65:e9:8d:1f:
                    0b:f5:d2:7a:99:a4:d9:1f:89:36:84:81:45:0e:14:
                    91:0a:b1:2d:17:1d:77:ac:db:1d:fb:51:3c:c7:1a:
                    11:5e:dd:18:28:89:84:78:55:62:9a:0c:ef:30:a0:
                    e1:bc:6a:52:82:aa:e0:77:33:02:a9:de:b8:d5:c0:
                    1c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:9A:2D:B6:19:A5:9D:E6:6D:1E:84:9F:B4:43:A6:D3:18:B3:F9
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:ed:7d:0c:11:24:7f:cb:d2:b9:4f:ea:fa:de:ab:e9:f1:
         70:a3:0f:d5:0d:5d:42:22:44:54:6e:0a:1c:c5:77:10:3b:67:
         46:31:6d:be:46:04:71:19:44:d7:55:8c:e2:f5:10:f7:06:3e:
         9e:43:ca:7c:50:ad:2f:08:11:ea:6c:6b:de:72:74:00:44:2b:
         ce:19:18:c7:6f:38:8c:2b:6f:92:6e:21:09:fe:0f:91:4b:c0:
         ca:cb:d3:db:f3:65:44:2e:b4:82:0d:fe:fb:37:65:ee:38:07:
         af:04:08:15:3c:15:93:66:4d:28:0e:07:65:99:3b:7a:3f:a6:
         e7:1d:61:a4:1c:6e:70:ce:b3:59:5d:2f:e7:42:9b:64:8e:29:
         bc:82:c9:06:7f:97:90:2e:55:ba:d1:0e:56:97:85:9e:a6:b0:
         c6:c3:33:2d:da:28:05:e3:f3:c8:a1:36:95:6c:23:5f:cb:f6:
         5a:63:6b:4c:bd:de:8c:1a:c5:39:1f:84:6f:5f:e0:88:a7:1a:
         0a:5f:b2:f0:77:26:39:e0:d8:45:e4:f7:c0:41:08:c9:be:a8:
         ab:de:1f:02:35:76:f1:6c:53:2f:8e:1b:27:14:7c:88:d3:bd:
         d3:6e:c1:89:25:e7:33:fc:0f:5a:98:8f:b2:fd:a4:43:1f:ef:
         ac:e8:7e:65
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA5swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJDNEJBUjExMC8GA1UEBRMoRTEzMUI2RDRGOUMzNDFBQjVDOTEwNkZBNzhBNjlD
OUI4ODA5MkIwRjAeFw0yNjA5MjgwNDA5NDFaFw0yNjA5MzAwNDA5NDFaMBgxFjAU
BgNVBAMTDTZhYjllODg2LTFmNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWMPOLUjHxaDQxF8rjVKC1PWhC7q7qOMMcFhT8MJzpEz3FIh5ZS0ypFNiX
ohwX1y+vBxo8N1c3OY+926STIygRPrgF+78lsKM5O5uaHc9XXG6LMSRqKJ6XSKbT
quNhuOKfOIHCxsuDWfEHurDayLtwBVptbjtkjwm6QZbfLvteXz8ttpB2UJd34IgM
kFL9avwo+KGGGG1SEW1GhggnvrfRildjxzOT1sa1Xm/Osnc4dRgHLPiFw+aZrDy+
XdcFZemNHwv10nqZpNkfiTaEgUUOFJEKsS0XHXes2x37UTzHGhFe3RgoiYR4VWKa
DO8woOG8alKCquB3MwKp3rjVwBzbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUDJSa
LbYZpZ3mbR6En7RDptMYs/kwHwYDVR0jBBgwFoAU4TG21PnDQatckQb6eKacm4gJ
Kw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQzRCLzM1ODEwM0FFRjhBOTExRUU5NkQxQkYwRjAxNzAwMUIxLzRURzIx
UG5EUWF0Y2tRYjZlS2FjbTRnSkt3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzRURzIxUG5EUWF0Y2tRYjZlS2FjbTRnSkt3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REJDNEIvMzU4MTAzQUVGOEE5MTFFRTk2RDFCRjBGMDE3MDAx
QjEvNFRHMjFQbkRRYXRja1FiNmVLYWNtNGdKS3c4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAosu19DBEkf8vSuU/q+t6r6fFwow/VDV1C
IkRUbgocxXcQO2dGMW2+RgRxGUTXVYzi9RD3Bj6eQ8p8UK0vCBHqbGvecnQARCvO
GRjHbziMK2+SbiEJ/g+RS8DKy9Pb82VELrSCDf77N2XuOAevBAgVPBWTZk0oDgdl
mTt6P6bnHWGkHG5wzrNZXS/nQptkjim8gskGf5eQLlW60Q5Wl4WeprDGwzMt2igF
4/PIoTaVbCNfy/ZaY2tMvd6MGsU5H4RvX+CIpxoKX7LwdyY54NhF5PfAQQjJvqir
3h8CNXbxbFMvjhsnFHyI073TbsGJJecz/A9amI+y/aRDH++s6H5l
-----END CERTIFICATE-----