Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          sLrWDeP03J8o1jEqB5nEILlru1l17a0MsSdDqRN1hBU=
Subject key identifier:   EF:45:68:C4:05:5B:0D:46:DB:5A:D6:5F:C8:CB:F3:DC:BA:3F:31:2C
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0AC0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0ABF
Signing time:             Thu 08 Oct 2026 01:24:13 +0000
Manifest this update:     Thu 08 Oct 2026 01:24:12 +0000
Manifest next update:     Sat 10 Oct 2026 01:24:12 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: /49flkYqtXhLjJCyef6yIAoWYmENrGpK+mLPKq2u+V8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752 (0xac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Oct  8 01:24:12 2026 GMT
            Not After : Oct 10 01:24:12 2026 GMT
        Subject: CN=6ac6f0bd-31ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:1c:7e:83:18:0a:f2:51:ff:8e:3a:ab:76:
                    25:7c:52:e5:56:c3:d4:c5:c6:d8:d4:09:b2:d9:b5:
                    37:b9:66:0f:3e:4a:03:f1:ba:86:86:96:a5:0b:dd:
                    31:fa:a7:f1:65:61:31:0f:21:4f:fb:8f:10:12:f4:
                    5d:5c:95:47:64:42:88:e4:2a:90:dc:44:59:a0:9c:
                    f2:6b:bf:63:4b:cc:f4:f9:50:72:b9:99:5a:69:ff:
                    94:3c:00:46:65:88:03:26:32:5c:29:8b:e2:f2:03:
                    44:c5:a0:3b:12:e9:26:20:80:8c:d5:77:85:e2:04:
                    5b:7c:fb:d0:07:d1:cf:33:82:4e:f1:fa:15:a2:9f:
                    c4:de:e1:f1:03:74:52:56:3c:7a:5b:fb:7c:18:3d:
                    18:ea:1c:e9:01:20:b6:96:71:a0:e4:36:1f:b9:04:
                    c0:1e:08:6d:af:d4:38:82:70:75:30:52:19:37:3b:
                    8b:0b:22:ec:71:36:aa:93:90:7a:9f:f8:8c:e1:d1:
                    0b:90:3d:4d:93:b3:67:1d:3c:b9:dd:af:31:86:58:
                    3d:cc:11:38:2f:96:3d:6a:c0:85:39:83:1d:b1:b6:
                    87:66:93:e0:ff:d9:ee:e9:be:14:e9:f9:70:cd:6b:
                    4e:d6:8f:2f:63:72:4b:37:b4:97:0c:ac:b8:9c:13:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:68:C4:05:5B:0D:46:DB:5A:D6:5F:C8:CB:F3:DC:BA:3F:31:2C
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:66:d1:68:37:30:2a:65:ab:36:30:c6:30:63:58:8d:33:19:
         a5:b0:82:c6:d2:54:6d:1a:6c:39:06:a7:fb:a4:8c:75:0a:a7:
         81:ec:a7:7e:de:0f:8f:0a:d8:55:a5:fe:52:ee:ae:ad:50:4b:
         6e:8c:3a:fd:59:75:c1:24:14:3a:44:d5:fa:c0:58:15:cc:b0:
         68:7b:ae:6c:68:ab:7a:1a:b8:bb:88:57:4e:d7:a0:c1:b8:f8:
         10:c5:cf:d6:b6:a7:d4:96:ed:d8:db:10:07:a1:61:6b:0a:08:
         85:58:bc:54:c0:d8:f0:43:22:97:58:28:92:f8:4a:03:1c:eb:
         d3:0b:4b:1c:ed:12:0b:c7:f9:9a:5c:05:1d:2a:74:c5:ac:87:
         29:a3:27:88:22:77:b7:47:53:bb:c8:a3:71:50:63:24:a3:8b:
         e6:8b:e5:6e:20:9f:ac:c6:f4:7a:a7:d4:29:11:3e:dd:56:b6:
         5a:3f:4c:37:84:54:93:e6:e8:8a:df:a4:9e:a2:94:53:e1:3b:
         11:09:3a:0a:6f:a0:f4:57:c1:69:a4:34:2f:65:c8:4d:a8:eb:
         8d:39:90:32:0d:14:ff:49:2b:fb:66:7c:29:1e:bc:8f:e5:fe:
         88:88:f4:2b:42:b3:85:c9:97:f5:40:f4:2c:3d:ad:ea:b7:18:
         bf:e5:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----