Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
File:                     TpKdLt9gOvd04YalOhkf_QUMzgY.mft (raw, json)
Hash identifier:          YxCoz0oI06wjPSxKnIGeeHw/7+QXyvL19RrHmsMtXBc=
Subject key identifier:   B5:F8:3D:4C:2B:5A:7B:42:47:44:1F:EB:89:50:97:B3:23:1E:4D:A6
Authority key identifier: 4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06
Certificate issuer:       /CN=F362E4AFAR/serialNumber=4E929D2EDF603AF774E186A53A191FFD050CCE06
Certificate serial:       71
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
Manifest number:          71
Signing time:             Mon 02 Nov 2026 05:44:45 +0000
Manifest this update:     Mon 02 Nov 2026 05:44:45 +0000
Manifest next update:     Wed 04 Nov 2026 05:44:45 +0000
Files and hashes:         1: TpKdLt9gOvd04YalOhkf_QUMzgY.crl (hash: XBTQeQavoEi8e440Zv95dYYb7HP4EQVbrWoon2E7gZM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
                          rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E4AFAR, serialNumber=4E929D2EDF603AF774E186A53A191FFD050CCE06
        Validity
            Not Before: Nov  2 05:44:45 2026 GMT
            Not After : Nov  4 05:44:45 2026 GMT
        Subject: CN=6ae8234d-5dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:0b:21:fc:06:23:17:61:f2:4f:ff:ee:71:
                    8b:b0:4e:db:28:6c:cd:16:67:54:a9:2c:53:f4:d2:
                    50:98:b3:c1:28:19:01:74:3e:a7:2a:5d:9f:31:0b:
                    aa:b6:f4:5c:bb:63:48:51:a2:ea:80:89:60:be:db:
                    d3:bb:4b:9d:20:cf:d1:ed:8a:59:e3:55:43:e1:ef:
                    b4:69:7d:5c:df:65:14:6d:19:00:8c:85:f0:1d:a9:
                    78:de:ec:9a:d3:9e:3d:f5:c0:e8:9c:c6:c0:6c:de:
                    51:ff:47:27:7a:1b:a9:ef:18:c8:bd:eb:44:02:38:
                    40:38:2e:83:ba:70:f4:a0:45:08:58:79:a0:f3:28:
                    be:9f:52:4b:d9:0a:7b:29:22:bc:68:a3:86:80:e0:
                    01:26:f8:20:18:b5:11:06:9d:3c:ba:53:b2:5c:06:
                    36:61:79:c6:2e:bd:57:33:88:c6:f1:e6:61:06:67:
                    79:83:a9:81:67:fa:bc:12:57:3f:e6:f9:96:1f:f6:
                    2c:df:a3:07:90:fe:18:9f:3f:de:36:7a:58:fd:bb:
                    aa:9e:23:b7:95:4b:e0:0d:97:3e:a8:ad:c5:0f:26:
                    4f:22:5d:7e:03:d8:fe:09:c3:0a:41:99:a2:09:0a:
                    19:fe:0a:d8:65:2c:86:78:86:57:52:10:57:04:d4:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F8:3D:4C:2B:5A:7B:42:47:44:1F:EB:89:50:97:B3:23:1E:4D:A6
            X509v3 Authority Key Identifier:
                keyid:4E:92:9D:2E:DF:60:3A:F7:74:E1:86:A5:3A:19:1F:FD:05:0C:CE:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TpKdLt9gOvd04YalOhkf_QUMzgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E4AF/0D5EA672805311F1B94B32AACE1D38B0/TpKdLt9gOvd04YalOhkf_QUMzgY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:38:d9:bf:73:d4:d5:b8:f7:9e:4c:2b:f0:ff:50:4f:c5:2e:
         68:a5:3b:73:36:7d:6a:59:84:cf:36:fc:13:6a:04:7c:10:b4:
         1a:6d:d4:1c:a6:39:89:6e:d1:fb:f3:81:6c:32:7b:16:fd:5b:
         95:ad:1a:2a:c7:41:d4:1a:b1:7a:d2:8f:9b:3d:c3:ce:29:d1:
         02:08:4a:a0:a5:23:65:63:dc:77:d4:07:87:60:c8:85:38:d3:
         60:ab:b1:39:ad:8c:22:6c:65:19:a7:45:08:b7:08:6e:d5:65:
         37:ee:4e:f0:92:5a:f6:85:55:0a:6c:8e:20:85:07:db:41:a0:
         57:6f:d0:37:94:0a:17:cb:09:f8:fc:3d:22:de:d1:80:40:07:
         26:d5:bd:ba:b7:ab:49:01:70:32:cc:5d:1e:5b:c2:08:73:e8:
         18:a2:1d:5c:ee:13:b1:d3:70:1a:bb:fe:19:6f:3a:c7:7d:46:
         3b:ef:4e:a0:9f:23:c3:48:28:f1:2d:ad:2e:5b:b7:f4:99:d8:
         80:98:2a:c9:a9:e6:e8:63:ac:93:f1:71:ef:2d:46:c7:bf:30:
         b5:d8:c3:54:66:44:96:5a:fb:96:a4:f7:1c:a3:54:8c:22:51:
         86:0b:bb:0f:35:03:7b:33:8e:80:05:b6:3a:de:c0:1a:c3:19:
         62:2d:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----