Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          858L8BuKL/2HV3Lr9QMcVFSk+0M8BclYj5r+XvkAn0Q=
Subject key identifier:   CB:A9:F7:36:AC:44:B4:95:61:DD:E3:76:26:9E:A0:D2:99:52:E8:B4
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       0356
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          0354
Signing time:             Wed 23 Sep 2026 04:14:15 +0000
Manifest this update:     Wed 23 Sep 2026 04:14:14 +0000
Manifest next update:     Fri 25 Sep 2026 04:14:14 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: b9bitLJJr1aow0MUnZ7y5ZiIY0PUgyLtucs8PIYQtFY=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
                          3: D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa (hash: 1WlQj4309rmMEuDFbG4TCzXscQ6wxxa2/yO0H6jLRvo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Sep 23 04:14:14 2026 GMT
            Not After : Sep 25 04:14:14 2026 GMT
        Subject: CN=6ab35217-589b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:e8:e0:1c:58:16:6d:80:cf:da:5e:d1:7d:
                    d5:57:04:9d:e1:94:07:16:7e:9d:d9:e7:aa:4d:37:
                    ee:87:8d:b4:bd:d3:ac:d8:6c:59:4d:fc:69:da:66:
                    ef:be:90:e7:e8:bd:f2:10:4e:ef:e3:ea:c8:99:84:
                    6b:1c:4c:3f:ec:fb:22:d0:22:98:cd:15:df:b8:d0:
                    b7:1d:a2:21:b1:11:71:0c:0e:d8:aa:7c:54:75:a8:
                    21:16:cb:77:ff:ed:c0:07:59:2a:eb:48:10:0b:87:
                    fa:f9:d6:e6:c6:23:14:e6:a1:71:39:60:e7:da:ec:
                    75:a4:21:6c:64:bc:9e:a5:b8:07:8a:71:26:a2:c1:
                    95:da:7a:1b:28:8b:bc:fc:9a:d2:66:9b:8a:b1:14:
                    98:50:28:06:08:e9:71:c9:b9:48:e6:18:14:28:65:
                    fa:27:af:6f:9e:63:a0:3b:4a:ba:e9:4d:60:5b:b9:
                    5e:33:43:e8:e9:30:3b:c7:b5:3b:81:8a:0a:47:36:
                    a3:f5:e8:d6:0c:2d:57:52:5d:c1:64:3f:3f:08:8b:
                    61:20:6d:67:57:89:f6:9c:6d:6d:35:88:b5:0b:df:
                    e8:39:37:00:80:ca:d6:7e:77:58:38:da:a2:cf:73:
                    d3:ce:9d:d6:a6:ac:cd:30:af:47:ba:9f:89:47:79:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:F7:36:AC:44:B4:95:61:DD:E3:76:26:9E:A0:D2:99:52:E8:B4
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0d:92:0a:ce:bb:c5:3b:a6:68:7c:95:a2:5d:54:ec:82:c6:
         d2:e4:f6:ec:1d:40:1f:6c:27:26:d5:5d:13:8e:b9:42:9e:82:
         5f:aa:0d:a8:6d:05:6f:64:6b:81:10:74:fe:9b:99:4a:5f:06:
         86:50:7f:d2:28:ee:84:33:fd:1b:6c:ee:34:62:41:cc:f5:65:
         9e:e2:c9:72:11:90:6d:d1:7f:dd:52:9d:8d:7b:8e:42:af:c2:
         89:bb:68:7d:0d:8e:83:48:52:44:b2:ba:2a:c9:db:b7:11:7e:
         0f:14:70:4a:d2:d8:1b:16:eb:19:72:7b:ce:e6:e7:b1:c1:ac:
         17:18:23:81:53:04:0e:63:01:2a:cb:c3:bc:ee:9e:e6:88:db:
         4b:67:86:77:e6:11:d6:83:02:f1:19:18:b9:95:73:6a:92:fb:
         38:18:e2:12:a0:24:93:54:39:70:98:0a:99:17:f2:e1:58:0f:
         88:2a:4d:17:ea:4d:0a:12:1b:46:6e:ae:3f:fd:99:eb:8c:7e:
         c8:c8:eb:d9:ca:e6:7e:95:6a:01:f8:e0:d5:af:51:53:fd:89:
         d5:cb:28:8e:ba:9c:26:23:04:b2:6f:78:1c:11:68:20:89:fd:
         a7:55:15:97:e6:ba:89:0d:43:2b:7a:3f:09:98:d3:79:51:64:
         ac:c6:14:26
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1OTBBUjExMC8GA1UEBRMoQjM4QUUwRDg0MzY3REY0MDgyMkZCRTU4NTA3MEY2
OTgzQ0QxODA1OTAeFw0yNjA5MjMwNDE0MTRaFw0yNjA5MjUwNDE0MTRaMBgxFjAU
BgNVBAMTDTZhYjM1MjE3LTU4OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGpOjgHFgWbYDP2l7RfdVXBJ3hlAcWfp3Z56pNN+6HjbS906zYbFlN/Gna
Zu++kOfovfIQTu/j6siZhGscTD/s+yLQIpjNFd+40LcdoiGxEXEMDtiqfFR1qCEW
y3f/7cAHWSrrSBALh/r51ubGIxTmoXE5YOfa7HWkIWxkvJ6luAeKcSaiwZXaehso
i7z8mtJmm4qxFJhQKAYI6XHJuUjmGBQoZfonr2+eY6A7SrrpTWBbuV4zQ+jpMDvH
tTuBigpHNqP16NYMLVdSXcFkPz8Ii2EgbWdXifacbW01iLUL3+g5NwCAytZ+d1g4
2qLPc9POndamrM0wr0e6n4lHedE1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUy6n3
NqxEtJVh3eN2Jp6g0plS6LQwHwYDVR0jBBgwFoAUs4rg2ENn30CCL75YUHD2mDzR
gFkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTkwLzc2MUEzMjIyMjdGODExRUY5NjhGQzIxNTdEREMyNEMyL3M0cmcy
RU5uMzBDQ0w3NVlVSEQybUR6UmdGay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3M0cmcyRU5uMzBDQ0w3NVlVSEQybUR6UmdGay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDU1OTAvNzYxQTMyMjIyN0Y4MTFFRjk2OEZDMjE1N0REQzI0
QzIvczRyZzJFTm4zMENDTDc1WVVIRDJtRHpSZ0ZrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCDZIKzrvFO6ZofJWiXVTsgsbS5PbsHUAf
bCcm1V0TjrlCnoJfqg2obQVvZGuBEHT+m5lKXwaGUH/SKO6EM/0bbO40YkHM9WWe
4slyEZBt0X/dUp2Ne45Cr8KJu2h9DY6DSFJEsroqydu3EX4PFHBK0tgbFusZcnvO
5uexwawXGCOBUwQOYwEqy8O87p7miNtLZ4Z35hHWgwLxGRi5lXNqkvs4GOISoCST
VDlwmAqZF/LhWA+IKk0X6k0KEhtGbq4//ZnrjH7IyOvZyuZ+lWoB+ODVr1FT/YnV
yyiOupwmIwSyb3gcEWggif2nVRWX5rqJDUMrej8JmNN5UWSsxhQm
-----END CERTIFICATE-----