Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          7sFgDMpE0+9znsa+ESif5y3wC4QHBANgtPl16tYAFcQ=
Subject key identifier:   02:98:22:BB:FE:87:C4:4A:EE:2B:AB:05:D8:D7:FF:8B:BE:FF:4B:C1
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       0321
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          0320
Signing time:             Sat 10 Oct 2026 04:26:30 +0000
Manifest this update:     Sat 10 Oct 2026 04:26:29 +0000
Manifest next update:     Mon 12 Oct 2026 04:26:29 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: 8Fi7lWJz+vcZBFfX0KwNvLZnXYi3mIFau5yFigUbxPo=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Oct 10 04:26:29 2026 GMT
            Not After : Oct 12 04:26:29 2026 GMT
        Subject: CN=6ac9be76-bedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:8e:73:61:bf:bc:a7:1e:9d:0e:8a:c9:fe:
                    44:c4:23:f4:44:e1:06:05:f5:f4:02:7b:5d:27:83:
                    75:7d:d3:91:fc:c0:24:8f:72:bb:60:a0:3e:3f:56:
                    b7:7e:f9:30:eb:13:9e:27:e9:3a:95:dd:68:fc:bd:
                    dd:4b:c2:ef:09:04:52:cf:15:58:b9:f4:d8:29:62:
                    78:19:6a:e5:86:09:f7:9d:49:cb:ba:bd:10:42:86:
                    be:86:b7:8d:7f:b7:03:c9:ce:34:a5:87:a0:0e:3b:
                    1e:46:b8:e3:b9:f2:2a:bc:e7:5c:3a:e0:92:24:1b:
                    37:82:3a:6f:36:8b:2d:ba:43:74:db:58:9e:22:81:
                    19:31:8b:51:11:a2:0d:b2:40:f1:b0:c6:db:d8:94:
                    6e:5f:fd:54:24:fe:31:1b:de:d1:3c:3f:92:9e:c3:
                    ac:92:dc:68:aa:5c:88:9a:c8:57:c1:4f:da:ae:7f:
                    f2:11:0f:25:ca:24:e9:77:69:a3:24:2e:b4:b1:0a:
                    f9:23:99:66:68:0c:78:11:5e:af:99:df:6c:d0:81:
                    c8:0b:21:a9:50:6c:0c:a0:ed:01:93:3b:d4:5c:a8:
                    3b:5f:ce:37:9d:60:15:59:f8:c2:19:e6:a2:40:63:
                    fd:75:61:90:80:2c:59:34:f4:cd:35:88:37:df:a1:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:98:22:BB:FE:87:C4:4A:EE:2B:AB:05:D8:D7:FF:8B:BE:FF:4B:C1
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:01:8d:9d:27:b2:7d:2a:9c:c5:cc:8f:53:66:8f:fc:b8:22:
         e5:0f:5e:99:70:fc:88:c4:79:97:d9:1d:59:8b:9b:e3:f8:df:
         cd:51:e9:4a:97:0b:25:32:21:c8:12:2a:44:e8:6f:a4:14:2d:
         04:98:5a:59:2f:12:7d:0e:62:b5:05:ed:f5:22:67:18:c5:eb:
         64:63:0f:54:20:2f:41:85:21:91:11:77:de:03:fe:f2:e9:7d:
         bf:1f:dc:80:2f:a9:dd:33:2f:4f:e6:0a:b7:cb:4d:04:b6:1f:
         d9:ca:26:6c:5e:85:8c:e6:c0:0e:a8:fc:6f:3f:41:04:dc:d2:
         11:d6:72:ff:77:54:1e:db:ba:24:63:42:c9:db:ab:8b:d2:c1:
         ec:35:a9:0a:a8:fd:77:a5:0b:9f:04:92:af:9e:95:2c:a4:88:
         a9:ce:dc:64:f4:4c:f1:99:1c:15:83:1d:67:53:d0:1a:bf:dc:
         6b:83:ee:60:39:7f:ed:33:dc:67:88:00:44:78:60:26:dc:00:
         f2:52:d3:55:a2:43:b9:22:c4:52:48:6f:a3:9d:f0:a6:58:6f:
         ef:1c:80:8c:9b:80:26:a0:50:93:0f:75:e4:75:80:23:97:db:
         4e:4c:6d:d1:62:d0:f1:6d:7a:56:e7:5a:31:8a:6c:b9:5a:20:
         3c:80:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----