Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          Jz1bW9Rvt8WXo25iHuD3X5qWAX+LzsPbdSY3Uc1EXm4=
Subject key identifier:   C2:B8:94:90:38:84:48:3D:43:CF:68:6C:BB:AA:F2:D8:08:24:BC:24
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       0100
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          FC
Signing time:             Mon 21 Sep 2026 05:23:39 +0000
Manifest this update:     Mon 21 Sep 2026 05:23:39 +0000
Manifest next update:     Wed 23 Sep 2026 05:23:39 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: +pCmtBngtfDjoR1+uSj0jEdx1oj4v6pcYBhftLsAsco=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Sep 21 05:23:39 2026 GMT
            Not After : Sep 23 05:23:39 2026 GMT
        Subject: CN=6ab0bf5b-2874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e5:08:d1:50:f2:9e:f2:14:b9:85:3a:1b:47:
                    7e:5f:c1:e8:a4:a9:48:22:92:8a:09:6d:bf:84:8c:
                    4b:8d:e4:dd:aa:de:4c:22:e5:ce:10:ef:bc:86:0a:
                    9b:bc:ba:56:75:49:1d:af:b1:d8:fe:5b:28:a5:1a:
                    8a:93:92:7d:a6:45:8d:8c:32:32:e7:98:b1:d8:24:
                    17:4c:59:a2:21:55:8c:e9:52:43:5d:a0:85:67:a6:
                    f9:ad:c0:f1:bc:b7:cf:8b:83:e4:57:49:b5:f4:b9:
                    4f:4c:ce:07:b8:d1:45:ef:1f:ba:3d:73:70:d7:c8:
                    c2:d9:15:c1:b6:1c:f6:e8:d9:13:0d:1f:e4:72:ba:
                    20:de:1a:7f:2e:89:23:75:88:e7:fb:e3:2d:2f:ca:
                    3a:4d:8b:57:e3:71:cc:ec:03:38:22:8f:bd:46:7c:
                    c7:29:47:be:33:be:c9:85:4c:a0:11:2d:69:53:f1:
                    78:2d:60:2b:11:93:ba:f2:42:9d:92:47:21:9c:08:
                    8c:ac:bb:7a:26:0c:e2:e6:27:ad:59:58:05:79:87:
                    a3:04:2d:96:82:42:92:69:29:5f:4c:6d:40:ab:16:
                    e7:99:0f:56:e6:01:4d:e5:a3:a1:fd:36:c3:25:1e:
                    29:2b:35:41:05:25:90:92:37:c7:15:7f:98:1a:5a:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B8:94:90:38:84:48:3D:43:CF:68:6C:BB:AA:F2:D8:08:24:BC:24
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b5:1b:42:76:8b:07:7e:eb:c8:b5:4b:7a:df:12:ab:d8:87:
         07:ea:c4:d6:c6:67:66:ca:dc:fe:6d:31:98:96:39:96:01:3b:
         c7:5d:5b:07:9c:87:79:09:e9:9f:58:87:b9:36:c8:d4:02:fa:
         ba:06:93:ff:9b:0b:f3:07:a3:21:a5:af:ac:60:66:15:8d:17:
         3a:72:37:f6:94:09:75:c1:2c:31:97:d3:44:7a:47:86:0f:cf:
         12:2d:1b:26:05:f3:03:59:09:30:df:c0:09:d3:7e:e2:e2:c3:
         25:85:3f:1d:9d:4b:1b:b3:ab:6d:55:bd:ec:4d:3a:6a:c9:f9:
         aa:b0:a4:67:58:51:bb:20:f8:d4:2b:a2:e1:58:e6:f4:7e:c0:
         8d:dd:3d:72:0d:1f:1c:b4:87:17:be:62:e4:9f:20:0b:63:31:
         97:09:68:af:c4:ea:62:47:2b:c5:91:80:20:4e:a9:7a:cc:00:
         36:05:e0:54:b2:38:ae:3b:26:eb:2c:f2:29:31:36:56:52:91:
         19:37:eb:ee:d9:5d:cb:d1:42:2a:86:f1:4a:e6:15:78:3c:c8:
         47:31:54:4e:0f:d6:42:50:a8:a7:c1:4e:c7:ba:2e:dd:22:db:
         e4:15:f2:3e:f3:4d:40:76:ad:d8:7e:10:08:52:cf:c5:8f:b6:
         48:24:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----