Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          GfyCbLnjRAdcKACMyn18NiG5guFvW1bjiLttwkIeKfQ=
Subject key identifier:   26:43:FE:21:51:C4:8F:44:A6:C8:9E:EC:86:DC:E4:A4:06:07:56:EA
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       0618
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          0615
Signing time:             Tue 22 Sep 2026 02:52:38 +0000
Manifest this update:     Tue 22 Sep 2026 02:52:37 +0000
Manifest next update:     Thu 24 Sep 2026 02:52:37 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: uqkvxHhg9CxZWOeiV9ha1Rys3Uztr1dXNHy4NHQXCnw=)
                          2: 3786E1E6875411F1AB4D1CA6CE1D38B0.roa (hash: c5g+zlY8gSNebtc8+UVgbZSk+dgTpqbWRZq27v61klg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Sep 22 02:52:37 2026 GMT
            Not After : Sep 24 02:52:37 2026 GMT
        Subject: CN=6ab1ed76-e2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:60:5e:ff:f8:22:90:2b:cf:61:43:fd:f3:
                    2b:79:5f:29:a1:a8:50:68:b8:b6:4b:90:d8:43:d6:
                    dc:2b:22:83:16:6d:a6:d1:45:59:bd:9e:85:b9:8c:
                    71:b3:45:95:d6:3c:3a:14:32:aa:63:62:73:1f:ca:
                    b8:9c:76:5b:ca:74:50:11:37:97:0a:87:2a:78:8e:
                    08:4f:23:f2:07:bf:30:82:d0:85:d7:64:58:f5:db:
                    9f:1f:8d:b7:6a:a6:5e:ef:71:04:4e:b8:d2:06:d0:
                    25:6e:fc:ff:8d:d3:bc:f1:cc:a7:87:96:30:99:5c:
                    a5:b0:22:88:e0:55:1c:3c:cb:ec:1f:1e:95:d8:9d:
                    7d:01:38:49:4a:1b:d7:59:08:f3:55:aa:c9:81:fa:
                    fa:87:3e:e2:8a:91:aa:67:3f:fb:62:c7:f2:52:44:
                    c8:92:c3:51:6b:2b:37:6d:38:66:f2:f4:fc:fa:3e:
                    b1:a9:7d:a8:6c:3d:d6:b0:f2:2b:ff:97:7b:f6:83:
                    62:a5:32:74:7a:9c:1a:d2:92:76:1a:e6:33:32:cb:
                    b9:6f:3b:69:f3:65:3e:b0:e0:32:13:28:ac:a1:3a:
                    2d:b4:1b:dc:9a:3c:c4:d5:8c:ad:c6:9d:9b:4f:5d:
                    e9:44:39:28:04:d1:5c:ad:40:4b:d8:bc:eb:0a:7a:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:43:FE:21:51:C4:8F:44:A6:C8:9E:EC:86:DC:E4:A4:06:07:56:EA
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:01:0e:e8:32:3a:5e:0e:50:01:fc:a0:bb:e0:f9:f4:55:45:
         35:7f:a4:69:a0:5f:1e:96:6f:0f:96:78:52:fc:60:60:f8:19:
         e3:5d:4b:e8:e1:1e:cd:9c:8d:94:7d:e6:d6:f7:d0:53:4e:df:
         a2:01:57:09:d2:d4:aa:84:3c:6b:ac:a8:f6:07:b3:d3:9c:2a:
         38:57:81:ed:69:82:83:f2:2a:1f:c9:80:c1:10:41:b2:62:61:
         ba:1c:74:4f:d5:98:d7:d3:a5:70:1a:cc:ac:76:ce:5d:14:88:
         a7:1d:76:1a:54:b7:87:53:0e:4e:5b:17:04:3b:82:4a:03:d3:
         f6:68:42:52:be:d3:50:ad:2d:dd:c4:a8:30:4e:37:29:b8:f2:
         b1:c9:c4:a9:28:d6:9d:0f:97:c7:ac:e1:05:1e:42:a6:23:0f:
         9c:9d:06:98:17:47:3f:e2:2c:48:ff:aa:dd:91:00:1e:24:4d:
         f2:4e:b4:63:d6:0a:33:83:c3:9e:5a:d6:b8:5b:8f:5c:05:78:
         1a:51:da:08:46:fb:21:8e:7d:97:2c:07:67:f3:ab:7a:d7:4a:
         4f:a7:60:45:1e:72:06:b9:1d:95:b8:de:91:e6:2d:e5:ec:86:
         38:88:fb:13:6f:b4:29:84:4c:95:6c:7d:c5:28:93:fb:51:9c:
         0f:aa:72:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----