Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          wSSXfimmzLIxY+76fgebwbPlW+QvJu5mwjPQLfJiWlA=
Subject key identifier:   46:B7:7B:9E:8A:5F:12:30:F5:8D:6E:41:2B:C6:2A:C1:B9:55:99:2D
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       05E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          05E2
Signing time:             Thu 24 Sep 2026 03:00:46 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:45 +0000
Manifest next update:     Sat 26 Sep 2026 03:00:45 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: Yc2zV7qOX+aN3U7MCp6G+OZ9Ct7UVVY2riQxea4mEo4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Sep 24 03:00:45 2026 GMT
            Not After : Sep 26 03:00:45 2026 GMT
        Subject: CN=6ab4925e-1000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:f0:ac:0f:e0:63:be:0f:78:94:02:b7:4e:
                    38:8b:c1:3d:67:e4:f6:fc:93:a8:62:8e:f1:71:be:
                    12:2b:08:8c:70:b2:38:86:22:7e:a9:29:3d:67:62:
                    42:53:17:41:53:35:3f:37:e0:ab:34:46:b8:c1:19:
                    16:78:01:c9:93:1d:e0:9d:0b:e3:16:03:bf:a7:0b:
                    c4:44:27:ad:76:29:61:7f:b1:49:1b:05:1a:b0:63:
                    d2:f4:93:01:a7:5c:04:65:b6:e3:62:ef:00:90:22:
                    32:e7:21:d2:bb:57:94:51:e4:9c:88:ec:c9:fd:7f:
                    92:04:08:14:bf:41:37:e2:88:3a:62:79:be:0b:42:
                    f9:4b:b1:a1:cc:5f:86:df:3b:65:19:d3:ed:f4:fb:
                    67:a1:28:1b:71:47:4b:9c:25:ce:22:20:7a:25:ae:
                    95:a1:43:0f:85:1f:f2:6d:b0:2f:2f:b2:63:69:04:
                    af:69:f5:4e:5a:23:ba:20:13:fc:b0:c4:88:18:92:
                    12:a3:5f:9e:7b:6a:43:c2:5c:22:a4:21:4f:41:18:
                    4d:68:b1:7b:d0:99:1f:55:2e:21:35:52:01:fc:8c:
                    ef:7a:82:87:dd:ad:19:a0:0b:12:14:d2:56:f9:09:
                    20:09:ff:c7:a2:82:86:f3:86:a5:30:7a:62:3d:be:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:7B:9E:8A:5F:12:30:F5:8D:6E:41:2B:C6:2A:C1:B9:55:99:2D
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c1:75:be:55:c4:f2:be:c9:d5:11:88:5c:cd:dd:42:e9:28:
         b4:9a:0c:b8:17:99:b8:5e:61:32:4b:37:b3:70:12:d0:55:a0:
         5d:be:5b:93:47:54:3d:97:8a:32:a8:fd:b0:35:37:2d:75:d1:
         ba:74:11:69:1c:98:90:d0:94:ee:07:1f:84:b6:5d:4c:d5:1f:
         44:b5:a0:bb:4a:7f:df:e5:43:1c:29:12:22:7a:24:7c:e5:f7:
         d8:5f:19:72:79:54:6a:99:5c:5c:e7:23:29:a0:93:ed:8c:da:
         05:84:b1:21:79:2c:eb:ec:4b:3f:db:69:93:b8:92:c3:06:8c:
         28:5f:db:fe:ad:ba:6b:25:7c:b1:02:9c:b0:47:79:33:ec:03:
         5b:60:5b:93:5d:f8:6d:fd:bf:2a:7f:fa:62:59:3f:3b:f3:91:
         93:15:b2:4b:81:4d:0b:86:8b:3b:9f:1c:9d:c3:43:0b:03:0f:
         b8:79:24:12:da:ff:ff:6f:e1:da:e1:74:9c:f7:48:41:65:e5:
         07:9e:df:2f:13:85:26:b4:43:52:e6:cc:80:ae:27:54:37:5e:
         bd:d4:74:ca:ae:bc:da:6b:72:48:82:f8:f1:74:80:eb:39:bd:
         90:fb:2b:a9:93:77:c5:ae:81:63:95:34:ee:ac:be:eb:44:24:
         65:71:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----