Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.mft
File:                     v5ni9vfdUUX9VCLngHTL5fRP7ig.mft (raw, json)
Hash identifier:          4AxDKtmMhGbJ/sfAVU8Ks5XbHy+N5P1B5E55HCZg0r0=
Subject key identifier:   17:32:70:66:B9:9F:E2:E3:26:43:9D:5C:6C:75:0E:C7:0A:EA:E7:ED
Authority key identifier: BF:99:E2:F6:F7:DD:51:45:FD:54:22:E7:80:74:CB:E5:F4:4F:EE:28
Certificate issuer:       /CN=F3629FF7AR/serialNumber=BF99E2F6F7DD5145FD5422E78074CBE5F44FEE28
Certificate serial:       14
Authority info access:    rsync://rpki.afrinic.net/repository/arin/v5ni9vfdUUX9VCLngHTL5fRP7ig.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.mft
Manifest number:          13
Signing time:             Sun 01 Nov 2026 06:03:47 +0000
Manifest this update:     Sun 01 Nov 2026 06:03:47 +0000
Manifest next update:     Tue 03 Nov 2026 06:03:47 +0000
Files and hashes:         1: v5ni9vfdUUX9VCLngHTL5fRP7ig.crl (hash: ke2Tw8XA0+ujbInXWwzwdz4xjSrWS52uUwOmCjYkFTc=)
                          2: 570C2BF8CD5311F1BAFBFDA7CE1D38B0.roa (hash: w0ItD5bjnmr7oMXp0G1SFF5ORIj9n6GNyFaQyjYLltw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.mft
                          rsync://rpki.afrinic.net/repository/arin/v5ni9vfdUUX9VCLngHTL5fRP7ig.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 06:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AR, serialNumber=BF99E2F6F7DD5145FD5422E78074CBE5F44FEE28
        Validity
            Not Before: Nov  1 06:03:47 2026 GMT
            Not After : Nov  3 06:03:47 2026 GMT
        Subject: CN=6ae6d643-de24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:ce:b0:f6:87:2d:c1:7b:ff:7b:50:be:21:
                    2d:6d:81:0e:79:43:bf:dd:d5:21:eb:d6:17:4c:2c:
                    8d:c9:4e:06:a5:c9:08:a8:f7:3d:1a:50:3d:aa:d0:
                    fd:4c:53:3d:80:a9:5c:58:f3:09:c3:5a:2a:c3:c4:
                    d9:66:e0:88:07:6c:cc:fb:48:fa:b9:de:2e:1c:5d:
                    63:63:41:f5:d2:06:ba:56:86:84:3b:f1:3e:b2:92:
                    41:08:7a:92:ae:7d:f1:fa:b4:04:8f:a5:aa:a1:a3:
                    79:65:95:f1:38:98:3b:3f:b3:6d:6d:ba:2b:44:c2:
                    cd:79:ea:49:da:49:ba:dc:38:18:05:2e:fe:96:92:
                    40:f4:72:38:17:43:52:d4:d2:8c:69:27:0b:96:c6:
                    4f:65:52:30:da:e3:db:cc:ff:4a:03:cd:7c:aa:be:
                    07:d0:1b:e1:84:b9:0b:3b:74:8b:46:4a:9c:17:58:
                    01:94:44:12:79:98:7d:2d:2b:bd:3d:1a:67:dd:5f:
                    6c:fb:11:d6:3b:f5:13:89:66:30:29:dd:86:c7:95:
                    fb:d2:27:87:1e:f9:d3:5e:6e:3e:23:59:84:64:42:
                    c6:a2:cb:b9:cf:ab:9c:1f:e4:2d:da:4c:69:bf:bc:
                    a8:bc:b2:53:37:8c:3c:e1:56:bc:96:24:01:79:ab:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:32:70:66:B9:9F:E2:E3:26:43:9D:5C:6C:75:0E:C7:0A:EA:E7:ED
            X509v3 Authority Key Identifier:
                keyid:BF:99:E2:F6:F7:DD:51:45:FD:54:22:E7:80:74:CB:E5:F4:4F:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v5ni9vfdUUX9VCLngHTL5fRP7ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4e:c9:07:11:17:5f:bd:dd:aa:08:29:98:54:87:8a:72:c7:
         e7:5e:c4:bc:79:06:aa:70:00:9a:4d:b8:ae:7c:51:20:cc:57:
         cc:c5:4e:a5:1d:67:e8:b9:8a:4f:c4:40:26:03:39:69:39:aa:
         ce:3c:5b:24:9b:86:bb:0e:8a:a9:49:44:82:47:08:51:06:60:
         e2:19:f0:83:98:1f:54:52:49:83:5a:ab:44:ca:c2:55:fc:ed:
         ab:d6:ca:a5:bd:6b:9a:d1:b7:6c:6c:a8:91:fc:7b:23:44:1f:
         bb:8c:d5:eb:d9:27:15:b4:06:be:04:64:35:bd:72:66:b9:82:
         c7:ca:33:85:9d:e0:b0:75:36:fa:90:e3:a7:7a:0f:67:c8:79:
         0a:1e:94:d3:87:cf:ad:f0:00:f4:ff:ef:a8:ce:d2:17:fa:bf:
         ee:63:e8:ad:a4:13:c0:ff:6d:45:29:28:5c:2c:28:f1:ea:b9:
         db:7a:b9:84:8c:a0:84:13:c9:5e:3e:75:b3:5f:21:ce:48:33:
         60:49:78:b9:3a:ea:4b:7e:8f:d6:a8:73:6f:86:f9:b3:55:dd:
         bd:42:4a:1b:b9:99:62:df:af:c8:67:d2:27:63:e9:a0:5f:ea:
         5b:45:88:1f:3c:10:de:59:de:72:74:73:f5:4d:e5:85:eb:99:
         65:e4:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----