Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          DslSB+oTpjBfZ05JbTmOaCTRgVZIzSIaIV0ekNFyuLA=
Subject key identifier:   40:BB:53:6D:F8:66:A0:CE:4C:C2:F5:E9:DA:84:56:15:D0:94:37:A2
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0ED2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0ECB
Signing time:             Tue 13 Oct 2026 01:04:13 +0000
Manifest this update:     Tue 13 Oct 2026 01:04:12 +0000
Manifest next update:     Thu 15 Oct 2026 01:04:12 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: ajGm1hqy66vE1HRjm8q2eTsbke4Hxl/Wsabdu3Be0CM=)
                          2: B740FF2CC48911F0A0A930F6DAE4EC9C.roa (hash: hoHpRJdMZhTG8lW2y+zp3mOTqMaTdX9ouOjQLsrYm70=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                          rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3794 (0xed2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR, serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: Oct 13 01:04:12 2026 GMT
            Not After : Oct 15 01:04:12 2026 GMT
        Subject: CN=6acd838d-7423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:98:4d:97:85:1e:dc:3b:01:2e:73:60:a8:
                    c9:7a:a2:4c:13:43:a9:3e:68:3e:42:7b:0f:6a:4b:
                    aa:c9:bd:9d:67:b3:74:f4:08:79:10:c6:56:32:9c:
                    63:7c:a2:1c:dc:6f:b6:fd:3c:06:2b:2d:23:75:27:
                    55:8c:33:92:79:9c:83:5f:92:98:e8:f9:08:0c:78:
                    39:81:de:87:04:7b:fe:f1:cc:0c:ed:92:d2:a4:fd:
                    6d:52:79:b1:21:0c:11:e5:e1:2a:4b:b4:6e:38:72:
                    51:2f:03:5a:26:2a:2d:dc:05:5e:5f:d0:ef:b4:ad:
                    bb:ed:a9:ee:30:d9:0f:f0:2f:d3:6e:fd:41:f8:2e:
                    9d:6c:24:b6:9e:d4:bf:62:a8:5f:49:48:a1:99:2e:
                    3b:77:9b:49:c3:e5:57:27:ec:ce:74:3d:5e:38:87:
                    a1:f6:e0:a6:0b:6c:38:94:30:45:24:a6:8f:ff:ce:
                    c7:81:0c:c2:64:21:97:5d:da:26:24:a5:4c:c3:76:
                    88:ff:95:70:30:dc:0b:7e:21:57:b4:0c:69:b6:9b:
                    78:54:d0:63:5c:08:4c:5b:e8:06:d9:5e:10:fa:13:
                    34:c9:3f:5d:54:2a:83:b3:46:94:19:0a:f4:8d:9d:
                    cd:08:93:88:0b:be:af:cb:96:c7:ec:30:58:32:20:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:53:6D:F8:66:A0:CE:4C:C2:F5:E9:DA:84:56:15:D0:94:37:A2
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:96:c6:45:a2:4f:95:db:a7:9c:c0:cf:09:a4:db:8c:3d:4a:
         df:67:a2:6e:94:e8:7d:4f:d8:9c:82:83:2e:fd:99:5d:fe:1c:
         d3:16:ac:cb:a5:e4:a1:2e:ac:6a:4a:f4:ae:01:49:7d:6a:21:
         1e:19:f9:f5:89:dc:0f:f6:13:00:1f:6d:c4:77:86:df:5e:70:
         b9:de:07:34:c1:15:d9:0b:06:c9:95:29:e0:ae:c1:d3:9c:1f:
         20:a9:fa:95:40:eb:17:da:a1:cd:2b:c9:07:b5:44:c4:c8:e1:
         8b:06:f9:68:ef:ae:d4:d4:ff:91:df:b7:d1:08:af:fc:ca:b4:
         f5:4c:d5:89:00:a1:4e:9a:9d:8f:4f:45:84:9e:7c:d9:52:6b:
         a9:74:ed:bb:c1:90:a9:47:d9:82:1a:53:04:52:ea:f7:14:d1:
         a0:76:ba:06:63:5c:ab:b1:15:bc:6c:6f:36:04:7f:ca:47:87:
         7c:f6:02:39:b0:37:11:c0:55:49:59:12:50:70:39:31:46:b0:
         52:74:bd:87:16:42:f5:10:26:5e:31:18:5b:f8:b7:c5:01:6e:
         a8:38:24:f1:83:ee:f8:0b:95:42:98:5f:19:62:5a:aa:8c:07:
         e5:51:a3:e4:90:0c:ae:23:13:7b:91:cb:06:f6:de:f1:fc:6e:
         e3:57:9b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----