Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
File:                     epndbb4tFgeKUOWEHlqOilkM3Us.mft (raw, json)
Hash identifier:          83PwKXAJd3ggJX+ily6pALch+fZBi00kglCUnZXInxw=
Subject key identifier:   8B:D3:E9:D4:D1:A8:54:0C:B6:08:D1:9D:65:30:47:35:F6:2E:B5:C9
Authority key identifier: 7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
Certificate issuer:       /CN=F365052EAR/serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
Certificate serial:       0311
Authority info access:    rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
Manifest number:          0310
Signing time:             Tue 22 Sep 2026 04:24:36 +0000
Manifest this update:     Tue 22 Sep 2026 04:24:36 +0000
Manifest next update:     Thu 24 Sep 2026 04:24:36 +0000
Files and hashes:         1: epndbb4tFgeKUOWEHlqOilkM3Us.crl (hash: G9LaPug6tHBSjE3CaywquMWoYmnMdCvgr6HNRSHSBB8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                          rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365052EAR, serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
        Validity
            Not Before: Sep 22 04:24:36 2026 GMT
            Not After : Sep 24 04:24:36 2026 GMT
        Subject: CN=6ab20304-9892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:1b:e1:09:be:03:f2:be:db:85:a6:50:8e:
                    19:4a:ec:a2:36:11:fc:07:b3:c0:3a:0b:28:cc:25:
                    99:18:7c:6f:d9:58:c8:35:81:7f:6c:67:e0:b0:67:
                    0c:ab:5f:ea:ff:73:f5:3f:24:58:c9:a4:a9:ce:61:
                    b7:ed:05:1f:ad:21:d5:5b:e3:cd:59:2c:01:22:5c:
                    75:c0:ee:0f:dd:8b:91:91:de:7f:44:54:1b:6c:a1:
                    16:25:23:8d:2a:34:58:cc:a9:07:10:1a:0c:bd:fe:
                    17:41:db:1d:81:c3:80:9d:48:54:99:06:87:a5:52:
                    04:1c:b1:d6:08:c2:7e:4e:4a:90:a0:c8:3b:d7:4b:
                    e4:a1:92:91:8e:e6:df:76:e7:f9:ba:44:8a:25:13:
                    32:87:67:03:5c:5c:a0:8e:14:2e:f3:0b:e7:46:18:
                    fd:e4:bc:4c:ee:5a:9f:3f:53:e4:eb:a1:b9:2c:ce:
                    d9:80:1b:80:1c:c5:04:c4:e0:8b:7c:e6:1a:d7:34:
                    c8:79:87:00:88:ec:7c:52:bd:13:7c:c3:96:73:fa:
                    b8:4a:82:a4:d3:33:16:29:1d:84:3a:d8:02:9c:d3:
                    68:74:a1:f0:63:c7:b5:e0:cb:26:0e:5f:b9:18:33:
                    91:71:11:98:8b:48:76:a2:b6:32:d8:e6:1e:79:a1:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D3:E9:D4:D1:A8:54:0C:B6:08:D1:9D:65:30:47:35:F6:2E:B5:C9
            X509v3 Authority Key Identifier:
                keyid:7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:72:6e:5b:82:47:b0:b9:cd:b1:c3:46:72:39:cb:af:81:0a:
         93:18:61:96:86:5f:a8:43:a6:03:38:45:35:ce:ca:ed:ff:d1:
         0d:22:e6:0e:30:4e:ab:87:56:d0:19:3f:01:0d:99:4c:f8:bf:
         94:38:75:70:54:b7:12:da:43:72:7d:b0:34:00:6a:b6:ce:ce:
         b0:f3:8d:35:07:50:b8:19:25:6f:45:e1:74:a5:2d:0e:c4:8d:
         8c:aa:e5:2d:f4:a7:e1:49:d9:b9:dc:41:fe:d3:aa:41:07:75:
         18:7e:e6:09:20:9c:3e:6a:a8:d1:3e:56:c3:79:8f:39:34:15:
         46:78:3f:f5:61:cc:84:a5:20:85:a0:33:9b:79:bc:5f:a3:e6:
         63:a3:4c:cf:01:36:8a:d5:d9:fa:b6:f7:43:94:83:51:a4:00:
         5f:0d:6f:6f:3b:d4:8d:8d:56:a4:57:21:98:64:4b:2b:15:e1:
         0f:9d:cd:3f:3c:74:93:d9:9a:37:4a:04:71:0c:d5:dd:ed:f5:
         1f:92:c3:7f:47:14:b8:72:50:64:79:5d:78:38:a3:6c:73:93:
         b2:a7:fe:0a:e7:4b:07:bd:a1:de:db:86:35:15:0a:50:2e:6d:
         f5:a1:57:6e:47:6d:92:c8:2f:2e:f8:b5:07:18:35:85:0b:73:
         0f:44:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----