Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          63VbTCm9NFBj+a44BCTsBDj+OGz+KpOA+n2C3cgrPJ0=
Subject key identifier:   46:C9:47:A4:9A:F4:04:19:7E:2F:56:24:61:67:65:70:57:69:FC:52
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       0BCC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          0BC5
Signing time:             Tue 22 Sep 2026 01:16:01 +0000
Manifest this update:     Tue 22 Sep 2026 01:16:01 +0000
Manifest next update:     Thu 24 Sep 2026 01:16:01 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: hMJbVl42mBpdzO1F+5h/qa40IVp70Gq0Cj4Fj8osgMQ=)
                          2: 0B137878847E11F1928E0FC8CE1D38B0.roa (hash: qfqFQsOXT0JK/QxiaE+cs9hsoJFXY0fQqzicfQ5U3lA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: Sep 22 01:16:01 2026 GMT
            Not After : Sep 24 01:16:01 2026 GMT
        Subject: CN=6ab1d6d1-d0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:18:04:73:29:03:13:66:57:cb:74:89:40:
                    58:ce:09:9c:27:1b:18:ad:40:e6:19:12:9a:ea:11:
                    3f:57:ac:6f:0f:a2:60:69:9b:f8:9d:c4:d5:02:45:
                    1e:e9:34:ca:f3:4d:c1:8b:9e:fe:75:85:92:86:26:
                    3d:b5:a0:11:0d:fb:6d:63:41:d6:80:e8:d4:e3:a4:
                    d1:7f:3b:41:a1:b6:92:38:67:c0:fa:91:57:de:f5:
                    40:10:9d:66:f6:00:0a:b3:6b:22:7f:37:36:3a:ef:
                    89:53:a5:cc:45:d5:2e:7d:8d:35:b3:d0:61:c1:8f:
                    bd:af:32:39:db:32:70:d3:76:8a:fc:65:e5:62:1f:
                    94:5b:c5:45:ea:b4:37:bf:cf:84:c6:d1:ab:7e:3e:
                    72:47:86:e0:35:84:a3:85:e5:44:5a:02:73:28:38:
                    59:f3:09:f0:02:36:b0:2e:d1:dd:c1:79:6b:01:05:
                    81:29:9a:89:5f:15:c0:90:c7:9f:9f:20:55:71:42:
                    ef:10:a8:3c:77:7e:86:4c:53:26:3f:03:32:22:34:
                    89:7d:a2:01:4e:ea:2e:80:44:db:45:84:71:e7:41:
                    8d:e6:0f:48:98:df:79:ac:80:5f:8b:c4:f8:95:07:
                    17:74:09:f0:1a:a1:54:97:c9:7f:2e:eb:d4:f2:e8:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C9:47:A4:9A:F4:04:19:7E:2F:56:24:61:67:65:70:57:69:FC:52
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:14:fe:01:6a:a1:7c:24:bd:d5:63:67:ae:98:1f:f4:d5:
         4c:ed:d0:40:ae:1b:0c:a8:e6:74:27:a0:70:00:54:03:b7:73:
         f8:3c:1c:44:fa:bc:ea:a7:b8:32:76:98:65:07:1e:b5:79:0c:
         cc:0f:25:71:a6:71:6b:73:35:d4:91:3b:90:cc:d1:87:c2:77:
         90:b3:4b:1f:9c:92:47:f3:90:ab:77:35:bc:6d:15:f1:cc:7c:
         23:80:bd:39:20:54:6c:15:42:f4:5f:c8:c7:af:58:21:54:ea:
         2a:4e:1a:3a:ad:fe:5b:cb:59:2a:bc:9c:9e:46:8a:76:ed:70:
         91:01:84:e1:9a:d3:62:5b:2f:06:46:e8:a5:97:fd:db:3f:be:
         85:7d:9f:a2:8c:76:e3:53:e9:e8:58:17:d6:ef:36:72:c8:12:
         d7:bc:64:f3:c9:d5:5b:fa:23:2f:ed:b1:a2:dd:f6:d1:89:17:
         27:06:11:3d:3e:d2:f8:b9:78:ca:58:3c:4d:00:1f:7b:11:2d:
         f4:eb:e1:95:b2:14:8f:07:bd:be:aa:67:c4:e3:12:8e:f1:d0:
         2a:e0:f2:cf:98:33:6e:9c:0d:54:ee:18:55:c0:99:c0:4d:e5:
         a2:2b:33:2b:85:58:ec:3b:1d:f6:41:c4:68:12:9b:86:ff:7a:
         eb:e4:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----