Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File:                     3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier:          KlKJF227K36HEJKpxJXN15PuOn0o8ThqLUFwl18wBmY=
Subject key identifier:   38:98:A3:9B:0F:69:A8:25:8A:7C:03:04:84:1A:77:3A:5E:C1:CF:C9
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer:       /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial:       0844
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number:          0840
Signing time:             Sat 26 Sep 2026 02:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:28 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:28 +0000
Files and hashes:         1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: q9chTVrzn3TSTpoKcOEc3aFQGd6Xmp2A2fZFqyaN8n0=)
                          2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
                          3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
                          4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
                          5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                          rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
        Validity
            Not Before: Sep 26 02:01:28 2026 GMT
            Not After : Sep 28 02:01:28 2026 GMT
        Subject: CN=6ab72778-61d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:c1:96:e4:cf:33:b6:e9:ca:3d:77:fb:2d:
                    4a:a4:25:a4:d1:68:43:a1:d1:c2:79:79:3e:42:5b:
                    ce:96:ff:94:69:97:3e:04:ab:16:ea:ff:85:be:f6:
                    2f:9a:e9:74:74:9c:e0:19:44:16:cf:9d:0e:7c:48:
                    32:92:6e:bb:2b:b0:07:f5:97:38:57:38:22:89:26:
                    52:cb:5c:ef:1e:c8:44:19:fc:77:f5:2d:4d:dd:0e:
                    aa:15:52:51:18:95:22:1c:db:61:c1:f1:73:f5:46:
                    8f:1b:d8:45:7d:c2:db:05:bc:7e:35:4c:7e:92:8f:
                    10:c6:12:bb:cb:bb:6f:80:fa:6a:c8:8f:58:c0:ce:
                    a4:bf:50:74:ff:3f:dc:c3:4d:a8:73:15:58:5f:ee:
                    a4:23:36:e3:bb:17:d6:17:35:0a:8e:d0:a2:31:d8:
                    18:cc:b0:93:d3:2c:2f:cf:13:e9:f2:bd:a0:18:58:
                    51:e2:5a:85:5b:de:48:c7:3f:65:37:da:86:9c:bd:
                    3e:80:be:5e:cb:0d:23:ea:71:f4:44:63:a4:2d:30:
                    2d:86:3b:71:3c:a1:3e:83:35:46:14:e2:16:63:63:
                    71:84:c6:a7:ce:ff:d1:d5:ed:71:35:a5:77:09:5a:
                    96:65:1c:33:11:75:af:0b:1a:e3:37:11:c0:8a:91:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:98:A3:9B:0F:69:A8:25:8A:7C:03:04:84:1A:77:3A:5E:C1:CF:C9
            X509v3 Authority Key Identifier:
                keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:75:9f:ab:3c:79:06:06:76:98:1d:bc:53:38:82:db:5d:07:
         21:d9:d7:2b:78:8a:7c:a4:9f:75:19:cc:f8:5b:b6:f7:71:e3:
         47:eb:89:b4:1f:ae:fa:4a:f3:13:5f:5a:52:03:ea:b3:eb:e2:
         84:33:7d:f4:bf:32:fc:15:24:64:f1:91:d3:3b:b1:e8:a7:7d:
         4b:fc:a5:7a:69:38:06:4d:c1:db:49:e5:0a:f7:6d:26:62:7b:
         7c:e2:43:bb:29:d5:54:c5:1b:9f:f7:3d:90:76:0e:43:29:4a:
         b1:40:0f:1e:c7:f8:93:14:08:e8:09:aa:ee:c8:06:72:0f:40:
         87:b8:3b:e9:e1:0d:b6:03:3d:ba:32:36:fa:73:af:cb:9d:26:
         a7:4f:04:8b:28:f8:b5:c1:4a:6f:64:1e:f4:c9:da:72:8a:09:
         ad:ea:da:eb:38:25:d5:74:5c:9a:35:96:10:05:17:ff:43:10:
         58:7b:1e:66:01:67:f8:8f:fa:62:87:68:b3:8d:ea:6f:0d:07:
         a6:8c:5f:95:54:1b:46:88:83:05:82:d8:2a:bc:f4:c9:73:dc:
         85:c8:91:63:73:c8:21:a2:ce:19:91:41:91:7e:e1:44:f0:60:
         ca:64:e9:96:33:64:dd:2b:65:78:9a:0d:2d:b9:f7:11:33:c6:
         25:b8:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----