Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          p2/K8rxeZd/4kS4ztH1xITmhPtmxwAnZRz3s1lVQssY=
Subject key identifier:   2C:D1:88:AE:4A:5E:CB:5A:C2:F7:D3:2B:F2:F4:A1:7D:A0:F6:D6:09
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0F24
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0F23
Signing time:             Wed 14 Oct 2026 01:01:32 +0000
Manifest this update:     Wed 14 Oct 2026 01:01:31 +0000
Manifest next update:     Fri 16 Oct 2026 01:01:31 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: rI0xH8MdiGGVdtiUSwlZtiGd2Rb3aiEPDyBTsqQtL/A=)
                          2: 1295CBCCD9A811F0B3211388DAE4EC9C.roa (hash: DtFf09bSwD3ukrw7d5JjXz1lpk12BRaVOODR5baCUSE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3876 (0xf24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Oct 14 01:01:31 2026 GMT
            Not After : Oct 16 01:01:31 2026 GMT
        Subject: CN=6aced46c-58cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:59:9c:d9:e4:9c:c4:6b:60:08:30:2e:1c:
                    30:ea:7d:3b:50:33:29:a9:9e:44:91:a2:66:49:40:
                    03:d0:1e:24:58:54:de:f8:be:c3:0d:2e:e4:77:5d:
                    83:a1:4c:5e:2d:97:4b:92:e6:63:b5:63:a4:8c:05:
                    e9:41:de:ba:33:af:e2:dc:1f:b2:b7:3c:ee:01:b1:
                    ae:32:96:c3:43:43:17:86:b3:bc:4d:07:dd:ab:4e:
                    7d:bd:b2:13:ae:cb:c8:f5:4f:43:8f:9b:41:a8:5e:
                    9a:09:e0:c8:56:61:84:37:50:64:50:b9:7f:34:8e:
                    a8:be:2c:82:0b:7a:75:5a:c7:ee:5b:a5:80:0a:41:
                    60:8c:1d:4c:4d:77:12:d6:1c:95:d3:9f:dd:78:ae:
                    18:31:0c:f5:56:47:12:cc:b3:5d:aa:85:b4:df:81:
                    73:ed:a0:78:ac:37:92:b8:c1:fb:61:f7:b5:e6:0a:
                    c9:a2:f7:30:ea:f2:8a:19:63:f3:23:da:00:4d:9e:
                    96:bd:6b:52:40:dd:ed:ef:4b:67:a9:32:74:b6:a7:
                    15:66:95:ac:1f:77:93:2a:d6:42:1b:44:a9:b5:7f:
                    e7:21:96:29:cf:f7:e0:6d:41:95:4b:25:41:01:be:
                    07:b1:55:7b:f7:fd:28:3b:32:8e:b6:81:2b:46:e6:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:88:AE:4A:5E:CB:5A:C2:F7:D3:2B:F2:F4:A1:7D:A0:F6:D6:09
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:80:ed:16:9e:b9:05:a9:1c:bb:fd:d3:da:56:2e:3e:ea:30:
         ef:1e:e6:02:98:2b:dc:eb:85:1f:6d:dc:59:ad:f3:1c:76:43:
         9b:ad:9e:c3:af:13:c2:7c:d2:21:8c:4e:a0:78:cf:42:c7:d0:
         97:ed:d5:f6:2b:65:3f:4c:03:60:94:f7:ba:d7:8b:fd:b8:b4:
         08:ac:65:67:eb:fd:97:50:df:6f:95:48:79:ac:50:cf:c1:a0:
         fa:a5:ad:00:b2:ac:8f:34:83:c5:72:4f:4c:b0:a4:5b:f6:8d:
         9b:25:8c:6b:9e:12:02:78:37:04:24:e4:d2:9a:d3:61:06:d9:
         0d:60:36:30:a0:be:ed:75:a5:9d:52:d7:32:82:77:bd:e7:23:
         d7:33:68:17:76:03:99:15:26:a2:af:ee:60:05:33:f6:43:32:
         e4:2b:a9:c3:9e:eb:65:53:31:d3:09:44:57:f4:a9:3a:18:b2:
         2e:04:d1:f0:72:2e:48:57:82:33:18:a7:e0:e3:a4:06:ad:a2:
         57:26:0c:ae:c5:0a:80:4a:64:17:06:a7:78:91:07:8b:21:30:
         3e:10:43:84:3e:b4:7d:28:b6:ec:67:10:7e:37:ae:0e:f3:20:
         bd:34:04:7a:63:c5:33:43:38:8c:cb:e7:ce:72:06:a8:08:89:
         bd:83:b7:fd
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDyQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFBUjExMC8GA1UEBRMoQzRGM0UyRUFCREU5RTM5MDFBREJCQzMxQzlGMjUz
NUNERTNCMUM2RjAeFw0yNjEwMTQwMTAxMzFaFw0yNjEwMTYwMTAxMzFaMBgxFjAU
BgNVBAMTDTZhY2VkNDZjLTU4Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk71mc2eScxGtgCDAuHDDqfTtQMympnkSRomZJQAPQHiRYVN74vsMNLuR3
XYOhTF4tl0uS5mO1Y6SMBelB3rozr+LcH7K3PO4Bsa4ylsNDQxeGs7xNB92rTn29
shOuy8j1T0OPm0GoXpoJ4MhWYYQ3UGRQuX80jqi+LIILenVax+5bpYAKQWCMHUxN
dxLWHJXTn914rhgxDPVWRxLMs12qhbTfgXPtoHisN5K4wfth97XmCsmi9zDq8ooZ
Y/Mj2gBNnpa9a1JA3e3vS2epMnS2pxVmlawfd5Mq1kIbRKm1f+chlinP9+BtQZVL
JUEBvgexVXv3/Sg7Mo62gStG5m5jAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQULNGI
rkpey1rC99Mr8vShfaD21gkwHwYDVR0jBBgwFoAUxPPi6r3p45Aa27wxyfJTXN47
HG8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBL0I1NDQ4NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVBMjI4L3hQUGk2
cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hQUGk2cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvQjU0NDg0NTIxQzFDMTFFNjlGN0M3NTBDRjhBRUEy
MjgveFBQaTZyM3A0NUFhMjd3eHlmSlRYTjQ3SEc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIgO0WnrkFqRy7/dPaVi4+6jDvHuYCmCvc
64UfbdxZrfMcdkObrZ7DrxPCfNIhjE6geM9Cx9CX7dX2K2U/TANglPe614v9uLQI
rGVn6/2XUN9vlUh5rFDPwaD6pa0AsqyPNIPFck9MsKRb9o2bJYxrnhICeDcEJOTS
mtNhBtkNYDYwoL7tdaWdUtcygne95yPXM2gXdgOZFSair+5gBTP2QzLkK6nDnutl
UzHTCURX9Kk6GLIuBNHwci5IV4IzGKfg46QGraJXJgyuxQqASmQXBqd4kQeLITA+
EEOEPrR9KLbsZxB+N64O8yC9NAR6Y8UzQziMy+fOcgaoCIm9g7f9
-----END CERTIFICATE-----