Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          Twq/xE2QpKBFvJ/VFOHtA3NtbevjR3mc63ufsrzCNDY=
Subject key identifier:   AE:61:C0:6F:D1:47:DE:40:65:FB:D2:33:E6:8F:79:AF:A0:6E:68:37
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0ABC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0ABB
Signing time:             Thu 08 Oct 2026 01:25:03 +0000
Manifest this update:     Thu 08 Oct 2026 01:25:02 +0000
Manifest next update:     Sat 10 Oct 2026 01:25:02 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: Z+wmQCnnUWOU6tCmXsMTJTcQmvJzdn9jDcouxb0sELY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2748 (0xabc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Oct  8 01:25:02 2026 GMT
            Not After : Oct 10 01:25:02 2026 GMT
        Subject: CN=6ac6f0ef-345c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:93:a6:cb:7a:f0:65:09:0e:0e:5f:57:3a:
                    56:47:e7:0d:c4:25:1b:f0:eb:62:d3:5d:83:03:37:
                    6f:db:07:3c:ec:9c:51:63:73:85:83:ee:94:58:bf:
                    d3:94:2e:0c:0f:47:ba:9c:13:a9:a3:f9:69:bc:ee:
                    13:99:12:0d:25:1d:08:96:4a:72:a2:a9:45:40:61:
                    c4:e9:5b:91:15:50:41:65:52:3c:d5:d4:e9:bf:53:
                    80:2f:5b:db:e6:ae:89:81:8b:25:41:16:e9:75:dc:
                    fd:83:f3:21:51:19:40:cb:24:b3:0b:15:a4:5b:81:
                    be:2d:a3:e6:4c:6b:a2:b6:46:a8:88:51:03:3b:dc:
                    a1:db:56:39:64:3f:f7:11:8c:a3:c3:cf:16:03:80:
                    37:8f:8a:2a:4c:71:04:a3:96:6e:e6:84:df:eb:00:
                    36:8c:b5:70:a2:98:b3:8e:51:c6:8a:56:af:9b:1c:
                    81:00:82:d7:5d:34:fd:0b:33:a5:a0:82:31:bc:ad:
                    7c:56:86:4b:b0:95:3a:c0:a8:b8:32:13:e2:8e:04:
                    ae:0c:8d:32:ae:2b:cd:f9:2c:7e:3b:09:e5:76:84:
                    ec:fc:64:87:67:c1:0f:21:f3:7f:c0:8a:96:1e:52:
                    b4:87:39:44:79:0f:20:ea:85:60:0b:02:44:1a:b1:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:C0:6F:D1:47:DE:40:65:FB:D2:33:E6:8F:79:AF:A0:6E:68:37
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:dc:ff:d5:ee:30:fa:9f:55:3f:d5:74:7d:ac:80:9e:b0:5e:
         e7:86:10:ef:83:53:0b:32:f0:85:7a:d4:18:c0:18:3a:c3:88:
         9e:39:36:e4:82:7b:08:ef:f0:70:ab:aa:54:a0:0f:05:6d:40:
         1d:fb:81:08:5f:4b:26:0b:00:f2:61:df:94:22:a9:6b:3c:8b:
         b8:c5:91:18:96:79:13:f6:9d:a3:4f:02:0a:3e:5d:d9:de:c6:
         66:ef:e2:08:cd:d6:b5:72:99:39:b1:ce:da:73:e2:1f:ed:34:
         1b:ee:07:91:ca:cf:6e:1c:fe:bd:47:fb:59:7b:61:89:72:ff:
         88:0b:72:cb:a7:ab:42:2e:ca:93:46:df:eb:5b:aa:53:dd:6c:
         9a:bc:cc:91:49:b5:8c:ac:ed:da:c4:d0:42:45:01:2c:50:1f:
         8e:e1:8a:42:5c:8d:df:fd:b4:49:d3:9a:de:52:42:d1:86:bc:
         23:7c:3f:f8:06:ba:33:cf:2a:4a:b8:a3:c4:d0:23:71:9a:63:
         72:d8:62:4e:90:8e:f2:02:5a:01:cd:65:4f:42:e0:60:c0:c7:
         3d:33:ca:15:19:7a:35:8a:50:1a:5d:b0:ab:be:af:29:62:90:
         45:7f:07:e4:d5:26:81:a1:29:d0:c7:89:0f:90:9f:49:ac:9e:
         e6:4a:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----