Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          TtTgOAUJxtf/G0Mt+baZY62UfkoLL5e/CGnIXnQTsmg=
Subject key identifier:   C7:1E:BE:DE:C9:87:FB:5D:19:BB:B6:26:66:76:55:EE:B3:CF:1E:19
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       05E7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          05E6
Signing time:             Mon 28 Sep 2026 03:00:27 +0000
Manifest this update:     Mon 28 Sep 2026 03:00:26 +0000
Manifest next update:     Wed 30 Sep 2026 03:00:26 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: Tjimy89SJjJh74hZelGAiUJ3iLRot2NOEBaVFgsclX8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Sep 28 03:00:26 2026 GMT
            Not After : Sep 30 03:00:26 2026 GMT
        Subject: CN=6ab9d84b-7b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:f9:d7:17:bd:35:bb:56:53:9e:48:f8:33:
                    16:33:5f:b9:c3:a9:ca:2b:b5:35:e7:6d:b0:c9:d7:
                    b6:35:0e:00:2a:dd:3c:59:cf:e7:8f:6f:2a:4c:47:
                    41:20:9b:e0:6f:74:3c:a9:d3:07:71:f5:16:ff:63:
                    48:7c:07:5c:c9:a2:65:45:76:2a:2e:77:c0:ca:50:
                    d9:3a:bf:86:82:57:6c:11:63:93:f7:de:7b:87:35:
                    72:fe:1a:4e:ef:6e:79:d7:4c:de:17:5c:45:c1:ad:
                    25:26:2a:d2:08:f6:65:3a:35:59:48:d5:a1:6d:83:
                    38:19:c6:30:31:a1:6e:fe:b1:53:9b:30:a0:d4:dc:
                    ee:69:4b:eb:4a:ee:0c:12:70:55:78:50:c1:f4:73:
                    96:b9:1d:d3:ab:ba:ec:93:d6:35:da:f5:97:dd:21:
                    5e:c6:85:1d:5f:c2:42:15:ef:6d:02:fa:49:ce:19:
                    13:3e:49:90:db:fb:a7:18:f7:b5:f9:ea:21:48:48:
                    27:b7:fc:dc:35:aa:6c:af:0f:b8:d9:79:17:3f:71:
                    9e:4f:55:36:c1:f5:33:de:5f:8e:c7:e6:61:76:3c:
                    b0:65:69:f4:c9:56:7a:a4:45:b9:40:96:7a:2e:dc:
                    e2:60:6c:1c:1e:42:e8:19:fc:52:85:53:2c:ce:e8:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1E:BE:DE:C9:87:FB:5D:19:BB:B6:26:66:76:55:EE:B3:CF:1E:19
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:55:2a:bb:f1:e4:cd:59:b8:49:03:c5:30:00:0d:42:bf:
         ee:4a:5e:51:4a:41:63:b7:20:59:18:ab:31:73:d3:91:c5:1c:
         bb:60:1c:0b:39:22:38:2f:a2:82:a3:fd:83:4f:62:ee:27:62:
         d4:74:36:12:1c:af:5b:a5:03:3e:60:24:2d:7a:79:54:1c:6f:
         c2:23:19:00:fb:bc:86:c3:01:fc:c1:79:1f:63:9e:41:8b:76:
         15:8b:cd:6c:a9:45:af:72:10:c0:32:ed:b7:ff:b8:7c:ae:33:
         24:67:e6:d0:9b:aa:46:81:22:a2:b9:c3:39:b9:fa:23:2c:27:
         78:2e:9e:fa:cc:93:43:b2:4d:f4:0e:41:05:ef:a7:8d:4c:bc:
         d2:e7:40:04:09:2a:00:44:62:5e:e0:77:5b:a6:e7:fc:30:e6:
         4e:de:e8:e9:5f:35:ad:7d:b7:f9:cd:f7:17:2d:7e:ca:1e:c1:
         f1:8e:a1:37:81:17:93:3d:62:e7:d2:80:54:93:86:af:f9:e0:
         bd:a9:fa:bb:fb:49:8c:d5:3f:e7:54:0e:75:8a:20:63:06:1b:
         53:12:2f:16:fb:26:f8:dc:43:63:41:e9:57:9f:b8:1e:b6:2e:
         56:8b:8a:6e:ef:3f:ef:b7:c1:1a:ac:2d:2b:38:1a:f0:c3:b2:
         d7:bf:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----