Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          bNOPzF3kroIBhi3RhwG6gD/XP8Q7RrJJzcxvJ47rs6M=
Subject key identifier:   7C:27:72:4C:B4:D9:E5:7D:AD:92:08:18:5F:6E:5A:79:25:48:90:DC
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       0353
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          0353
Signing time:             Sat 10 Oct 2026 04:16:44 +0000
Manifest this update:     Sat 10 Oct 2026 04:16:44 +0000
Manifest next update:     Mon 12 Oct 2026 04:16:44 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: 0NOeSb2rzWzbHXvadsBDytzwkXH/C5lx09nwPio/I70=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: Oct 10 04:16:44 2026 GMT
            Not After : Oct 12 04:16:44 2026 GMT
        Subject: CN=6ac9bc2c-5cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:ca:76:ec:c3:d5:d8:83:d5:b9:4d:3e:d7:
                    d6:a7:1d:08:8b:fb:a5:cf:b0:b5:33:f2:1e:73:92:
                    cb:83:72:78:7d:19:e7:ca:c9:30:77:d2:b5:93:a4:
                    2d:2b:83:70:e7:7b:41:e5:65:d1:c3:ee:22:11:0f:
                    65:01:f6:d5:e8:e4:c2:d4:3e:04:3f:91:66:bd:4d:
                    f1:14:53:5d:bc:7d:c4:1c:75:6e:37:fa:bc:92:f6:
                    64:02:e0:b9:aa:7c:12:2d:59:1b:23:7f:a3:ed:66:
                    5a:d9:e3:22:3b:2f:c3:e7:f7:53:e6:82:62:b9:17:
                    73:ec:a9:96:42:73:89:bd:ef:74:c4:fd:c4:e2:1d:
                    97:f0:fc:de:2d:9f:f1:d4:3b:f9:76:fe:b7:af:b5:
                    96:77:f6:cc:00:0f:55:c2:00:f6:31:73:b6:57:ac:
                    f1:d1:bc:b2:d5:6c:de:14:ed:05:5e:6d:41:0a:7e:
                    2c:08:03:d5:f5:50:cc:6d:f8:d8:33:58:f1:27:68:
                    4b:f6:20:7d:97:f7:f3:64:72:4b:c0:1a:48:79:d5:
                    4a:6a:98:e5:81:bf:ad:ee:12:96:c0:33:7b:d4:27:
                    ed:9b:56:24:9b:44:78:47:12:1b:5c:05:a4:25:e6:
                    b5:d2:ae:0c:0a:09:1e:30:08:69:fc:fc:48:6f:cf:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:27:72:4C:B4:D9:E5:7D:AD:92:08:18:5F:6E:5A:79:25:48:90:DC
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:64:f8:be:4f:fb:0e:c9:21:80:13:dd:a3:79:83:24:43:0d:
         6a:1b:6e:a6:3e:ea:81:82:40:24:dd:44:d4:d3:dd:e0:27:94:
         d9:91:46:63:cc:3d:43:ba:93:b2:a0:c6:f3:6c:87:b1:ce:e4:
         7f:9c:a7:79:bb:34:98:56:41:75:d5:3e:d4:19:ac:38:e3:f1:
         e2:7f:f7:4f:81:e3:b1:5a:30:42:b3:65:8c:7f:62:cc:ae:73:
         f8:4c:9d:0b:86:75:09:6c:d4:cb:a8:bf:d6:9d:50:4a:27:a2:
         26:9a:46:0a:d0:50:12:07:f1:50:86:60:f7:44:6d:eb:74:e4:
         9b:ff:2b:7d:07:e1:7e:01:ea:cc:a1:b7:8c:bc:26:d7:48:e6:
         52:96:1b:99:21:a4:4a:e6:be:4f:e1:fd:a8:d2:1a:56:dd:e9:
         de:29:6e:67:57:77:0c:2d:f7:75:6c:0a:1d:c4:17:21:65:4c:
         e6:11:54:3b:5f:e1:88:87:6a:a9:4b:e5:2c:07:ef:9e:d4:7b:
         93:81:02:c5:3e:89:6c:70:78:01:e7:0a:33:67:12:09:91:09:
         19:f5:b8:bb:5d:6a:ed:9a:e9:5f:54:4d:70:74:3b:a0:ca:65:
         bc:01:e3:7c:df:dd:d6:03:c9:c8:89:15:d1:a8:11:8f:97:ae:
         af:ab:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----