Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
File:                     9ghiikaC9VOASvOrLlihnDCordI.mft (raw, json)
Hash identifier:          O9qfqlFj7bZK/4n87mOmPGFXFE25kJ9pE21V2yhV9kY=
Subject key identifier:   A7:41:40:30:54:AE:DE:B8:8F:00:A6:8D:A9:D7:E0:E7:6A:7A:C7:E0
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       0325
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
Manifest number:          0317
Signing time:             Sun 11 Oct 2026 04:32:41 +0000
Manifest this update:     Sun 11 Oct 2026 04:32:40 +0000
Manifest next update:     Tue 13 Oct 2026 04:32:40 +0000
Files and hashes:         1: 9ghiikaC9VOASvOrLlihnDCordI.crl (hash: ntHp3tmZOwwIKdqAj7mvO8ezUfKM5nK/RoC5d2nChhY=)
                          2: B5C0EA4AB64111F1946E6910CF1D38B0.roa (hash: fNFmQEHhuMHsod69TyrLA7ubSqMj3XIMoenaPvug/jM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR, serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Oct 11 04:32:40 2026 GMT
            Not After : Oct 13 04:32:40 2026 GMT
        Subject: CN=6acb1169-e275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:08:17:76:6b:ae:f6:fb:33:ed:32:87:06:
                    a7:32:e6:16:8f:0c:0f:e2:14:30:fa:01:4b:83:d6:
                    9d:6d:6e:56:c9:ef:49:ac:56:fd:2b:ec:3a:0a:68:
                    04:7b:9e:8b:d4:41:58:fe:7f:04:72:ac:97:9d:75:
                    82:3e:e3:5c:e6:38:e2:09:15:7d:c0:34:63:b0:75:
                    e6:d5:91:ac:40:55:65:5d:a6:9e:a6:31:e9:54:10:
                    c4:1d:e9:c7:85:65:ab:0b:86:66:f4:d7:40:98:fe:
                    20:4d:90:50:8b:e2:4b:5f:c5:d3:ac:5a:f1:a3:03:
                    64:ff:66:41:f6:ce:78:0b:2a:13:ea:af:8c:b8:e5:
                    c7:70:db:ed:64:56:f8:0f:f7:de:db:d9:e5:f5:65:
                    77:71:ee:50:3c:b3:8d:ce:01:ca:b6:90:ff:0b:0f:
                    2e:1e:4b:e3:bd:26:63:2d:2b:cc:06:92:b4:9a:b9:
                    f0:f1:04:b6:68:fd:98:08:39:0b:3b:95:d8:39:c3:
                    af:29:5c:7d:15:1f:df:a5:dd:33:46:7d:f2:bd:b7:
                    f2:02:f4:63:58:a8:45:11:5b:86:aa:e9:b9:1c:40:
                    14:72:5a:8a:0d:5f:ca:ec:7b:9e:43:8b:48:81:bf:
                    94:3b:77:d6:ff:34:8a:9c:b0:a3:f4:4b:eb:8c:1b:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:41:40:30:54:AE:DE:B8:8F:00:A6:8D:A9:D7:E0:E7:6A:7A:C7:E0
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:50:3f:bd:b0:58:3c:2f:93:25:1d:23:e6:d5:d4:eb:41:51:
         44:29:c8:8e:cf:e8:1e:42:43:28:f2:4c:5c:85:15:f1:2d:9a:
         61:b3:5e:4b:9e:0f:d2:30:24:77:5a:fa:13:9c:d9:6a:d1:2d:
         90:b1:4a:06:c4:34:f3:e8:42:11:36:2d:d3:9f:e5:8e:2a:59:
         c2:24:99:f3:9c:4f:f4:9b:62:e8:76:d4:45:37:36:0e:7d:df:
         b4:fd:1b:65:86:c3:dc:13:c8:dd:30:31:bc:3b:44:74:0e:63:
         9d:16:58:f7:b0:50:17:73:57:0f:9f:ae:89:44:fd:a2:85:39:
         b2:dd:26:53:8e:02:83:ed:9b:90:76:35:f3:0f:79:d3:e0:24:
         95:11:51:72:9b:0f:dd:6e:7e:00:31:8d:86:04:fb:d1:d2:32:
         d0:a1:84:3b:e1:24:b7:fb:a5:fd:b4:86:e0:70:d8:45:af:dd:
         2b:00:9a:83:ec:ff:b1:0e:6c:36:78:41:00:35:5b:29:ba:c8:
         06:d9:8a:d6:8a:64:40:e0:c3:b9:11:5d:0c:56:68:18:80:a4:
         3d:15:d2:a7:0a:d4:19:77:94:07:da:7b:a7:51:5b:d3:a1:1d:
         88:38:72:93:12:6a:d0:38:93:91:61:3f:17:1b:a7:f6:c9:19:
         57:fc:ce:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----