Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
File:                     CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft (raw, json)
Hash identifier:          IHpLlkeQ7vdvS+guWS5Cow5LjuU1aHio/sDxu04MtwY=
Subject key identifier:   C9:BE:D9:57:AA:00:F1:BD:1B:D3:A5:5F:4D:8A:0D:5D:9E:76:BF:21
Authority key identifier: 09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04
Certificate issuer:       /CN=F36C89CDAR/serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
Certificate serial:       4E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
Manifest number:          4D
Signing time:             Mon 21 Sep 2026 05:44:19 +0000
Manifest this update:     Mon 21 Sep 2026 05:44:18 +0000
Manifest next update:     Wed 23 Sep 2026 05:44:18 +0000
Files and hashes:         1: CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl (hash: zysRfekPCtf7b5uKBwGabRyGzv5cBEIUdYp+2Q4UVyc=)
                          2: 80B35B167DBC11F186B53FF6CE1D38B0.roa (hash: mp9WTiiEl564d5f5b3Mt3Uat+rXqCkk3Pof9oq0Krno=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C89CDAR, serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
        Validity
            Not Before: Sep 21 05:44:18 2026 GMT
            Not After : Sep 23 05:44:18 2026 GMT
        Subject: CN=6ab0c433-ca82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:b9:93:03:78:78:9b:35:57:73:75:f5:e1:
                    1b:19:d2:f3:4b:33:d1:da:96:9f:d1:c6:e5:2f:82:
                    f2:9b:d7:96:0a:41:ec:43:ea:48:da:94:8d:fe:f1:
                    e1:b7:7e:0f:eb:33:93:bf:79:fa:1b:87:c2:6d:f6:
                    16:61:91:e0:c0:59:a7:99:32:4b:d4:b9:6f:cf:23:
                    66:94:77:09:33:54:7a:fa:c7:73:5b:f6:2e:c9:98:
                    29:ac:1d:52:25:a3:e4:da:1b:3f:22:53:04:1b:2b:
                    e1:c3:93:40:7e:b8:39:d5:10:bb:1c:d9:a9:91:f0:
                    7f:fd:fe:59:93:19:56:3c:95:2a:e5:fd:da:80:da:
                    ac:d6:17:f5:92:7c:1d:0f:cd:a0:c7:d0:a6:2c:55:
                    d8:e1:69:34:d0:3c:8b:fa:65:ee:1d:68:98:56:3d:
                    47:d6:08:cd:f1:b7:89:07:1b:6e:c4:da:72:43:d5:
                    a9:45:2b:e9:db:e0:dc:d8:59:26:44:33:ba:2b:7c:
                    74:6f:79:68:64:88:69:5a:33:df:b6:72:1c:3b:73:
                    7e:15:99:73:3f:34:24:30:44:45:bd:4f:fe:76:fa:
                    27:f0:d0:f0:92:8c:35:93:c6:a6:03:93:6b:5d:6d:
                    5e:a0:d4:37:ef:46:5c:cb:19:b8:71:d4:8e:5f:30:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BE:D9:57:AA:00:F1:BD:1B:D3:A5:5F:4D:8A:0D:5D:9E:76:BF:21
            X509v3 Authority Key Identifier:
                keyid:09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:38:c5:cc:1a:2e:fa:b3:94:3a:e5:4f:1a:5f:29:76:89:
         67:1f:ad:d5:73:af:b5:1e:47:75:36:2f:cf:93:04:1c:03:07:
         84:6d:cb:09:58:0d:b4:ce:12:d2:b8:f7:de:6c:dd:fc:75:76:
         85:56:6a:8c:59:47:b8:d4:84:ea:a1:13:71:5f:d7:fc:ec:72:
         f5:8e:af:51:05:22:6b:ec:27:03:cf:7a:b4:a5:44:83:c4:65:
         d2:3c:df:7d:6e:26:4e:88:7f:41:42:d6:76:9e:9a:2e:8a:b3:
         99:94:6a:80:df:c0:37:7f:53:25:ea:2f:39:3a:6f:c9:4a:d8:
         89:6d:29:2d:b6:68:75:27:f1:f6:6d:b9:f2:b2:5a:13:ca:6f:
         c3:31:1a:1f:40:7e:48:7c:50:f7:4b:fb:80:2e:8a:88:01:9f:
         c8:af:ff:3c:91:bd:05:05:31:f4:22:e9:3f:1b:d5:89:da:75:
         e8:d3:f0:8f:a7:08:c3:b0:17:1e:96:b7:79:bc:91:31:39:96:
         1a:44:7f:9d:cc:03:d0:ac:dc:5a:3c:fd:88:13:f5:25:4a:d1:
         9c:6d:5c:b7:65:49:52:99:48:d8:53:c1:17:6f:23:0b:0a:c7:
         10:c0:4c:d7:8b:c4:2e:6d:ea:4d:c4:df:5b:f0:e9:7b:83:9e:
         a2:21:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----