Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
File:                     HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft (raw, json)
Hash identifier:          E/CMtgZAWG97EZR8U//YEHhsQ1QLnyMvPCXw7C28JSo=
Subject key identifier:   A3:C0:B7:07:93:AB:CF:6E:DA:63:29:50:DF:3D:1C:20:CE:82:38:39
Authority key identifier: 1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09
Certificate issuer:       /CN=F362D462AR/serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
Certificate serial:       0146
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
Manifest number:          0144
Signing time:             Fri 25 Sep 2026 05:14:56 +0000
Manifest this update:     Fri 25 Sep 2026 05:14:56 +0000
Manifest next update:     Sun 27 Sep 2026 05:14:56 +0000
Files and hashes:         1: HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl (hash: NLqyO7xGhL6TUDpuHBRpb8XUw8ZvvDTsGDAyQBJVq8I=)
                          2: 4040C74AC52E11F0B05A368DDAE4EC9C.roa (hash: g29ZcN62OuQIybrymKKsA2XNqXJfFk2KbrGYZddauWU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                          rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AR, serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
        Validity
            Not Before: Sep 25 05:14:56 2026 GMT
            Not After : Sep 27 05:14:56 2026 GMT
        Subject: CN=6ab60350-481c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:25:75:68:b6:f5:6f:15:30:64:b6:3b:07:
                    ff:df:11:cd:1f:02:8b:b7:dc:d9:03:ea:6a:59:3e:
                    01:74:ca:37:48:74:d6:14:65:a4:35:54:9e:51:b2:
                    13:11:42:ba:35:89:58:27:e9:68:b9:86:41:92:d6:
                    d2:f0:a1:ec:7a:a1:fa:99:3e:0f:b2:15:6e:85:84:
                    66:31:ce:ac:1a:1b:ff:9c:2c:2d:e9:66:9f:7c:90:
                    71:a3:78:72:64:e7:b1:72:5f:26:5f:5f:10:e4:b1:
                    2b:48:b6:10:41:71:de:88:ac:d1:b0:3c:67:93:1a:
                    db:e1:df:f5:6e:07:45:07:2c:c6:d4:5d:9d:93:99:
                    ed:60:80:b0:a2:13:09:5a:14:4b:95:0f:99:8d:5d:
                    3d:c9:b9:55:f9:bf:50:2f:82:7b:bd:ff:19:05:b1:
                    a1:4c:8e:6d:7a:33:50:3b:08:6c:cf:26:c1:a7:ce:
                    1e:81:0f:81:1f:47:c2:8f:88:7d:fc:01:95:5a:f7:
                    f9:e9:a6:13:0e:68:2b:d0:6c:81:74:97:b6:71:95:
                    a2:90:94:59:cf:1b:12:ab:c8:8f:08:39:5f:a3:89:
                    32:28:59:2c:dd:4f:0c:0e:f2:b9:90:c5:e7:f6:cb:
                    82:c6:19:f9:a3:3f:ee:ae:59:50:f4:1f:3a:9e:21:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C0:B7:07:93:AB:CF:6E:DA:63:29:50:DF:3D:1C:20:CE:82:38:39
            X509v3 Authority Key Identifier:
                keyid:1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f4:8c:75:0d:74:d6:39:cc:df:85:8f:c2:69:2c:07:3d:8b:
         e7:fa:ef:8f:84:ea:01:e6:58:e1:09:5c:10:68:d5:56:41:96:
         7e:03:a4:39:00:2e:e2:14:16:7e:9c:f5:45:04:94:fc:19:55:
         e9:ff:fc:76:1e:74:3a:95:da:20:d5:12:a1:b6:54:24:79:d8:
         97:a3:03:77:24:fc:ec:ea:af:fd:57:5e:84:f4:e9:d8:b2:d3:
         49:43:0a:06:19:9f:13:39:a1:b9:35:d5:fb:57:c4:e4:72:9f:
         ad:e1:5a:67:37:ac:9c:a5:d4:e3:4f:26:0e:af:c8:60:a0:28:
         ec:6d:2e:8b:64:1c:95:61:d8:e8:e7:3f:22:e4:3a:cb:a7:4c:
         05:d4:c6:e6:c4:3f:87:82:ea:19:87:19:b7:ae:7b:2b:f1:1c:
         ea:ef:79:58:4f:13:dd:1e:b8:a4:7f:eb:69:8a:46:28:d4:57:
         16:ff:6e:4a:b9:a2:20:5c:23:40:e5:c0:a2:26:a0:88:6f:e1:
         27:be:9f:00:8b:4d:36:bc:f3:44:82:39:26:c7:4e:fa:f5:37:
         66:91:5f:6d:a3:bd:7c:11:c9:a7:32:a7:9f:ea:d4:bc:65:d9:
         de:b8:30:81:75:94:0c:b8:70:b7:4d:34:03:74:27:9f:8c:24:
         c4:0b:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----