Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          Gl98bzQ7j4cUHfR56RkFzSdsSftpMRTTacoi6hML5bk=
Subject key identifier:   C0:FF:D4:82:55:19:6F:C2:7B:96:7B:46:EC:51:72:1C:5A:42:80:C3
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       03E9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          03E7
Signing time:             Sun 11 Oct 2026 04:00:25 +0000
Manifest this update:     Sun 11 Oct 2026 04:00:24 +0000
Manifest next update:     Tue 13 Oct 2026 04:00:24 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: CANCRbyJCnD87jNdQpKOi7mUrl8NS1u97focIYrQ9KM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1001 (0x3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Oct 11 04:00:24 2026 GMT
            Not After : Oct 13 04:00:24 2026 GMT
        Subject: CN=6acb09d8-c0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:33:a9:8d:59:52:6d:1e:4e:65:3f:9f:00:
                    fd:10:84:bb:d3:bd:3d:96:0a:ad:ce:3d:e7:88:74:
                    33:94:69:77:ca:54:9a:e1:cb:0f:a2:7e:69:f8:d0:
                    df:53:11:bd:96:98:26:bd:81:c5:e7:0d:23:3c:f2:
                    65:2f:c1:9c:f6:8a:f3:ce:cd:f6:50:ff:50:72:2f:
                    ce:ae:b5:c3:d0:a6:d8:7f:ae:35:d1:4b:5c:47:e7:
                    c7:ab:53:4e:5d:1c:df:0c:f3:74:75:e1:b5:e0:cd:
                    e3:64:ef:68:d1:c1:69:02:86:ff:f5:d1:53:ba:81:
                    52:38:9a:c8:78:53:e3:00:56:63:6d:83:ce:a7:21:
                    9d:f4:aa:24:5f:16:ba:50:68:73:32:09:85:81:bf:
                    aa:b5:2b:3a:57:15:0c:ce:60:92:56:86:e7:83:06:
                    7a:9d:b4:82:a3:0f:97:50:29:3d:f5:d9:37:b2:92:
                    f2:61:cb:53:b2:0a:fa:7c:0d:38:5f:43:a9:7f:bf:
                    1a:70:00:d8:53:b8:2b:66:4f:b6:a5:32:9f:6b:ef:
                    d1:b9:96:fb:0d:75:b9:c5:37:29:6b:41:21:e3:c4:
                    cd:1a:0a:8a:31:cd:06:45:20:d2:90:56:e2:5a:e3:
                    a5:71:66:93:1f:d7:24:9b:3c:f5:e1:bd:be:ff:57:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:D4:82:55:19:6F:C2:7B:96:7B:46:EC:51:72:1C:5A:42:80:C3
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:f4:35:44:7c:cc:64:c9:79:02:8a:7f:53:b3:ac:9f:b8:
         f4:c4:f8:96:07:07:00:0a:d1:da:fe:64:fe:d1:c3:f6:f6:5f:
         18:0e:5b:c5:24:07:b2:fd:10:f5:e3:34:90:6a:aa:c8:85:70:
         a2:e8:8a:19:26:a8:b3:1b:7c:26:ff:c0:b2:1e:d4:80:f6:a0:
         b2:b7:d1:6a:ef:f0:3a:11:9e:1b:c9:d3:62:7f:5e:17:dd:43:
         0f:1e:f7:2c:f3:ce:8d:ce:be:29:3d:2d:0f:8b:1f:0a:0e:bb:
         0d:f6:41:95:e1:cf:73:50:ee:4e:ae:e4:92:c1:5a:e1:28:66:
         f5:e3:9c:9a:9d:7f:81:94:18:ae:29:0e:d4:7c:70:7c:98:cf:
         78:23:e7:7f:64:3c:e5:7d:ad:fa:79:5c:21:19:0e:05:ed:87:
         a8:59:ff:bf:a9:fe:d6:02:a9:68:98:04:17:0c:04:18:13:a9:
         53:aa:48:fe:19:c4:a2:6a:ba:ca:9a:5a:c5:2f:7d:0b:ed:b8:
         52:3c:e3:f1:69:fb:a6:2a:31:77:6d:38:92:98:ca:37:31:75:
         0e:26:ad:09:12:c8:51:19:52:7b:ea:4b:e1:0e:14:0a:ca:b6:
         c7:93:8d:64:98:3b:be:a0:4e:08:33:bd:63:5f:41:78:8a:20:
         e1:93:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----