Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
File:                     iNIzyaKwFij9KfyxIJhpkPWebZs.mft (raw, json)
Hash identifier:          y+DY3ARUT/0Dom6ztIjs8e4Qdja8XoR6y5FO+QQlwrw=
Subject key identifier:   DB:FC:37:6D:65:79:EA:6B:54:B6:D6:3D:E5:C1:A9:6B:0C:25:10:F4
Authority key identifier: 88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B
Certificate issuer:       /CN=F3636791AR/serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
Certificate serial:       AC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
Manifest number:          AC
Signing time:             Sat 26 Sep 2026 05:32:38 +0000
Manifest this update:     Sat 26 Sep 2026 05:32:37 +0000
Manifest next update:     Mon 28 Sep 2026 05:32:37 +0000
Files and hashes:         1: iNIzyaKwFij9KfyxIJhpkPWebZs.crl (hash: jMQxPrMkpmqATFjMEAbkbpfWzKu+1bAoJqZn6iMWiSo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                          rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AR, serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
        Validity
            Not Before: Sep 26 05:32:37 2026 GMT
            Not After : Sep 28 05:32:37 2026 GMT
        Subject: CN=6ab758f6-d355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:b1:32:e2:05:d2:77:db:74:74:e6:81:93:
                    ed:33:df:2d:f3:82:37:fc:16:2f:5b:72:19:c6:29:
                    94:a3:77:f8:4a:88:d6:11:a8:f0:59:cb:8f:8e:8e:
                    3a:81:46:56:31:5c:f9:05:50:7b:a8:d1:24:d9:3b:
                    2c:ee:b4:f7:c7:40:04:3f:f5:3d:ea:57:23:33:ce:
                    2b:5e:5c:d2:a2:ec:e3:d7:83:98:d0:2f:48:cf:82:
                    50:13:d5:70:53:51:5e:f3:d4:04:d6:0f:d1:ad:b9:
                    4f:e0:0a:11:eb:55:a1:da:1e:e0:f8:3d:66:bc:31:
                    11:48:f1:19:0a:1b:9a:79:e0:c1:65:42:5e:de:42:
                    d0:28:ff:8d:c2:93:77:57:45:34:d5:7b:73:20:03:
                    ae:d4:4d:df:eb:14:73:79:2e:6f:83:76:42:e2:8f:
                    aa:bf:54:ff:29:9c:0b:9b:cb:6b:fd:f0:96:75:bd:
                    b8:82:56:bd:d6:a8:30:7c:ee:b6:12:17:18:db:ac:
                    30:6c:9d:25:3c:eb:20:fc:ca:8d:e8:e9:55:97:f7:
                    1c:ad:83:b9:0f:53:f6:1a:ee:0b:b3:af:ed:2e:7b:
                    90:a4:48:c4:06:b4:3b:b9:ea:f5:a3:ba:e5:49:b6:
                    e0:02:84:a0:f0:8b:f5:22:86:83:fd:c1:dc:8c:5d:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FC:37:6D:65:79:EA:6B:54:B6:D6:3D:E5:C1:A9:6B:0C:25:10:F4
            X509v3 Authority Key Identifier:
                keyid:88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:0d:a3:c4:0a:c4:12:5d:a2:74:9d:2c:3a:07:45:fe:8f:
         8d:1b:42:f0:87:b3:80:b0:25:43:59:91:7a:26:f9:9b:ee:eb:
         74:5e:ba:36:c2:4c:e3:55:d8:eb:c0:62:e9:36:44:e1:37:c7:
         56:6a:3b:e9:86:a5:46:78:06:e2:85:20:11:18:11:65:48:54:
         d3:51:04:4a:52:87:ea:8b:92:47:51:75:38:43:6b:07:5e:56:
         35:a4:2e:e3:c6:39:81:f1:1f:09:8b:e3:e1:5d:59:a5:b7:7f:
         2d:c9:37:d0:08:a2:b7:67:d3:04:3c:eb:65:cd:97:36:12:6b:
         2a:eb:c9:df:4d:91:6b:eb:e0:67:14:2a:3f:b1:f1:02:8d:98:
         a5:8b:50:a7:68:3e:50:13:50:76:6c:b8:f1:b1:d8:a3:7a:7f:
         11:b4:15:8f:c3:ad:63:29:64:67:3a:ee:ae:13:c7:18:b3:f0:
         2a:3a:72:83:b6:a0:e0:d1:57:db:fc:2f:13:be:4f:bd:82:49:
         9a:f5:d2:33:f7:ff:3c:19:05:89:dc:29:d8:5a:ba:e6:e8:ed:
         68:14:5e:75:b1:88:2a:b8:46:58:bf:47:66:da:72:80:73:5a:
         5a:9c:3b:c9:4c:cc:30:92:a3:ec:19:18:ef:40:c5:ab:92:bc:
         f6:53:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----