Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.mft (raw, json)
Hash identifier:          7+8A9wei9iiV1bwEJPH7diamGTB69xxOu+OM10NnqlQ=
Subject key identifier:   C9:8D:7C:E7:DC:A1:1F:F8:7A:62:34:3C:9C:16:25:BC:A2:ED:F3:32
Authority key identifier: 98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Certificate issuer:       /CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Certificate serial:       0AA9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
Manifest number:          0AA6
Signing time:             Wed 23 Sep 2026 01:30:21 +0000
Manifest this update:     Wed 23 Sep 2026 01:30:20 +0000
Manifest next update:     Fri 25 Sep 2026 01:30:20 +0000
Files and hashes:         1: mDG4OL4rkAR85SvUJaCCldQ2HvI.crl (hash: nueTGBVOCmCHxH1WTWQA/lxIbVmf32RYTCX/BZ0f00w=)
                          2: 2B42CBB2841C11EA8535FD14F8AEA228.roa (hash: dahsJO63bmsOpbiHiBcDrrEKjGQByqLKcepUunArLEQ=)
                          3: 58068464849811EAA9BC2712F8AEA228.roa (hash: NPwlzjfWgkGmqApnLab/DQv5DjJ9aHzrshBcmsHKY5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                          rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2729 (0xaa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAR, serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Validity
            Not Before: Sep 23 01:30:20 2026 GMT
            Not After : Sep 25 01:30:20 2026 GMT
        Subject: CN=6ab32bac-c904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:e9:27:98:79:9b:df:46:a9:84:31:53:e3:
                    fc:0d:1b:32:90:cf:40:8a:34:a6:d8:11:40:ae:c3:
                    ce:04:c9:7b:8f:8b:0e:7a:a1:9c:ad:00:a1:0e:22:
                    0b:67:2b:b9:1d:ee:e2:bc:f2:52:b3:43:f1:af:4f:
                    c5:47:8d:be:17:46:09:c0:a5:8c:c6:ea:13:b7:d9:
                    81:38:cb:74:c3:b0:d4:b1:e8:04:67:96:66:c3:b2:
                    79:fe:00:93:c3:a2:fe:f2:09:74:5a:d2:74:29:28:
                    01:5f:34:f6:8d:4c:32:64:c1:1b:f7:54:4d:c7:71:
                    a0:77:5a:d8:93:0d:9a:c1:f2:60:f8:9b:c2:7d:65:
                    9f:52:f4:6f:a1:d8:13:59:58:45:70:c3:3d:ee:c6:
                    9a:b9:c1:53:af:7e:43:a1:6f:cc:3c:1f:75:13:a6:
                    7c:6b:63:20:16:02:ae:bf:c6:81:2d:0a:88:30:cc:
                    13:33:b3:9b:3f:cb:9e:f1:b3:b0:fa:04:3f:1b:e5:
                    fa:25:17:fc:1a:86:eb:c0:79:bb:ab:e6:3f:b4:4f:
                    60:bc:10:9f:78:9d:21:fc:fe:51:6d:22:64:cf:ff:
                    27:a6:09:bb:31:29:76:9a:4c:20:ec:40:15:eb:4e:
                    c2:ea:1a:bd:dc:b0:6a:bc:6d:e6:bb:b6:2e:a8:5f:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8D:7C:E7:DC:A1:1F:F8:7A:62:34:3C:9C:16:25:BC:A2:ED:F3:32
            X509v3 Authority Key Identifier:
                keyid:98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:8f:5a:b2:f1:3a:e2:bc:3f:a4:ca:67:ce:54:af:74:2b:
         ab:f4:57:cb:85:74:b5:cd:ec:77:85:2d:f1:45:49:c0:b2:9b:
         18:82:25:d6:e0:07:0c:c9:a2:05:e7:74:5c:f1:68:57:a7:2e:
         f7:60:d5:b3:e1:ab:80:3e:77:de:84:a7:80:6e:bd:fc:79:ce:
         42:ba:8a:0d:fe:66:74:0e:93:41:0d:21:b9:b9:17:64:22:f1:
         2a:f1:7e:47:e7:b5:ea:2b:34:3c:79:0d:76:29:a6:a6:06:42:
         8a:6a:0f:7a:03:df:a9:0f:46:ef:70:0f:11:5c:07:e0:af:f1:
         fc:69:63:b9:08:11:71:73:99:33:22:f3:fe:40:86:f9:e0:f1:
         b5:36:6c:58:e4:56:ed:01:e4:98:4f:77:6b:99:2d:fc:33:9a:
         c7:e4:53:d9:61:4b:dc:87:f1:8b:eb:33:98:b0:69:7b:6f:8e:
         bf:37:f3:bf:bd:77:7b:d1:62:54:d8:39:2c:98:7e:3e:37:83:
         a5:d5:84:4f:ab:bc:a6:ff:48:61:35:fe:be:fe:ad:4c:cf:f9:
         8c:2d:ba:39:f7:42:be:f7:92:a5:39:40:a5:60:06:75:ed:a5:
         57:0f:29:b7:28:02:3c:b1:ea:17:9f:c0:ef:00:2e:cd:2c:3c:
         4b:d2:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----