Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
File:                     HScudZNWWso9tIbvvdAfGXRUyYM.mft (raw, json)
Hash identifier:          J7Jnrf0nE+qJinUCvda93KAb4/2ObKJxlwfhVlfMWo4=
Subject key identifier:   B2:7B:8A:47:C3:43:27:AD:18:E5:18:DC:84:94:4F:30:6C:94:2C:B5
Authority key identifier: 1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83
Certificate issuer:       /CN=F36C11E4AR/serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
Certificate serial:       0434
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
Manifest number:          0430
Signing time:             Sat 26 Sep 2026 03:50:15 +0000
Manifest this update:     Sat 26 Sep 2026 03:50:14 +0000
Manifest next update:     Mon 28 Sep 2026 03:50:14 +0000
Files and hashes:         1: HScudZNWWso9tIbvvdAfGXRUyYM.crl (hash: 7vf55abshF1EkLDzgNCkwpOZXK4InNGu4ldgcD5ePA8=)
                          2: 8A3B9A02D43611F0ABE21CE3DAE4EC9C.roa (hash: g6+393n0LLnjFEWhxP4PpmEZk2YkvC9IrbPAjflCtNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                          rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AR, serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
        Validity
            Not Before: Sep 26 03:50:14 2026 GMT
            Not After : Sep 28 03:50:14 2026 GMT
        Subject: CN=6ab740f7-6ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:60:8c:e1:d9:e9:d9:8d:4b:34:18:51:ea:
                    f0:45:49:80:fc:e5:76:bc:bd:7f:99:a1:1e:9b:da:
                    11:9b:1d:2b:91:d5:ec:15:e2:ef:bc:f9:32:14:77:
                    7a:cc:08:b5:70:78:4f:7f:a3:7a:cb:e6:fd:bd:21:
                    02:4f:d3:e1:c1:db:29:19:f2:55:36:29:89:00:dd:
                    33:14:45:93:54:ac:43:49:1d:01:f8:5f:7f:c6:ec:
                    a3:a5:e0:7b:59:bd:24:da:2a:28:62:19:6d:92:8b:
                    1a:f4:00:73:d6:2f:fc:2a:d2:66:c4:13:c4:64:ac:
                    64:bd:df:47:1d:0a:bd:55:08:16:da:e5:c4:f6:3e:
                    b0:be:c4:14:15:8c:c8:4f:1d:e7:2c:08:36:4d:db:
                    8f:3c:31:86:df:5d:10:ab:73:18:92:a8:63:6a:04:
                    69:7b:47:65:29:77:d3:5f:f9:dc:b6:0c:b0:64:4e:
                    b4:bc:2f:43:6a:81:14:76:8c:eb:5a:09:b9:7d:8f:
                    18:62:ce:0e:b9:69:3b:3e:57:d9:68:f2:21:fc:b2:
                    b6:58:d6:ed:12:17:d3:8a:e3:98:e7:22:7a:25:26:
                    68:13:42:24:66:96:c0:3e:7f:20:d3:14:9c:63:41:
                    bb:df:2f:e2:e9:56:0f:74:af:1b:ad:ab:9c:10:f3:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:8A:47:C3:43:27:AD:18:E5:18:DC:84:94:4F:30:6C:94:2C:B5
            X509v3 Authority Key Identifier:
                keyid:1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cc:e4:46:be:94:1e:f3:7f:58:79:7c:88:20:de:19:10:30:
         64:6d:42:b9:db:e7:94:05:52:e0:81:3d:0a:e5:ef:b2:e9:ed:
         45:d8:73:0c:91:f3:b3:ed:71:f4:ba:57:bb:c6:f9:24:92:ce:
         87:fd:cd:f3:c5:a6:c8:89:84:e6:0a:78:75:7d:ca:ac:5d:5b:
         85:02:3c:a3:df:e9:60:4a:bb:27:d6:b0:b7:f0:bb:f2:ac:f1:
         aa:35:87:75:d5:9d:8a:e9:00:7a:0f:af:9c:7b:53:e6:ce:e1:
         50:89:19:90:a7:17:2d:4d:0a:a2:43:18:ca:f9:1b:3f:c2:f5:
         71:43:05:37:c2:09:6d:90:bc:9f:bd:69:09:6a:a5:f2:ad:e9:
         d4:ee:7a:b1:6b:3c:04:ed:de:70:a0:13:66:b0:16:9f:3c:98:
         ae:07:77:b7:da:a5:97:41:f4:77:e8:35:cc:b7:4f:2b:0d:7e:
         de:9c:61:a9:99:66:a8:3e:b9:c8:01:8a:02:9c:87:3d:8b:09:
         2f:c5:bf:5d:f3:0d:30:c4:b4:b1:18:38:bd:b7:2c:eb:48:1f:
         40:cb:8b:69:25:d3:44:a0:a8:f4:3e:00:b6:36:5f:66:f9:99:
         3d:17:2b:75:3e:27:82:dd:75:1a:61:96:81:6f:7c:ba:b1:95:
         b3:ec:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----