Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
File:                     iNIzyaKwFij9KfyxIJhpkPWebZs.mft (raw, json)
Hash identifier:          YzLY4TBNO1/moGqCJYz3mdY1T3QqLDyhOW72eZKQV2Q=
Subject key identifier:   ED:BE:F2:B7:6C:5B:AB:11:87:9C:E1:D7:2C:C0:C7:AB:AE:F3:8F:DF
Authority key identifier: 88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B
Certificate issuer:       /CN=F3636791AR/serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
Certificate serial:       D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
Manifest number:          D2
Signing time:             Tue 03 Nov 2026 05:33:44 +0000
Manifest this update:     Tue 03 Nov 2026 05:33:43 +0000
Manifest next update:     Thu 05 Nov 2026 05:33:43 +0000
Files and hashes:         1: iNIzyaKwFij9KfyxIJhpkPWebZs.crl (hash: fIGqvLHj2C7eNzcfLVO88XiGJaxJuOsQJ2AL6UbGVdc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                          rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 05:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AR, serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
        Validity
            Not Before: Nov  3 05:33:43 2026 GMT
            Not After : Nov  5 05:33:43 2026 GMT
        Subject: CN=6ae97238-9f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:ce:99:2f:26:6d:ea:70:4b:be:4b:81:33:
                    58:8b:36:72:26:24:06:96:19:d6:9c:be:db:5d:4a:
                    5c:f0:e7:31:2f:17:58:6d:9d:d7:d5:cf:02:8e:7e:
                    b4:ee:3c:ae:12:ae:49:ae:84:c9:42:b8:a8:e0:d3:
                    dd:01:e2:b5:4e:4c:1a:42:d9:80:86:7a:79:58:3d:
                    8d:70:35:33:04:33:e1:88:10:db:58:75:81:e3:fb:
                    e1:2b:b8:29:64:09:e9:6a:d0:0e:2c:80:f6:e7:80:
                    ff:3f:28:9e:8f:69:e3:3a:e8:e4:2b:98:cd:77:53:
                    f8:b4:83:6c:64:e5:af:3f:45:6b:bd:ce:7f:06:85:
                    95:f0:11:2e:70:6e:33:31:15:aa:d6:8b:a0:b7:e3:
                    67:70:0f:66:5c:b1:60:8a:3e:e0:aa:5c:5b:c0:94:
                    14:0d:fe:ca:15:e6:69:a4:57:dc:fa:d1:87:8e:6f:
                    c6:ce:6d:00:48:90:46:6e:63:61:de:00:71:47:65:
                    3d:2e:72:89:3d:2d:a4:1b:d2:0b:26:ab:6a:1e:d8:
                    7b:6c:61:0c:3d:23:49:83:f9:83:87:d2:f8:e3:d7:
                    41:fa:47:cf:18:0c:33:73:72:31:65:bd:e9:83:32:
                    d2:ba:c9:7a:13:02:7d:24:03:9c:ca:23:8c:50:74:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BE:F2:B7:6C:5B:AB:11:87:9C:E1:D7:2C:C0:C7:AB:AE:F3:8F:DF
            X509v3 Authority Key Identifier:
                keyid:88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:e0:12:ea:cf:d1:0c:82:5a:be:68:e0:5b:34:0a:5f:50:
         3d:0a:95:87:f2:2a:7c:47:2f:d1:45:45:1e:02:4f:85:1e:70:
         ff:87:a7:14:a9:02:99:f8:38:c7:36:86:36:94:13:f4:4e:92:
         19:1c:8a:54:8c:e9:18:7d:a0:58:d0:f6:3c:03:40:7e:29:66:
         24:6c:2f:21:77:a9:c8:47:55:a1:31:cc:58:a5:f5:37:42:cf:
         2b:95:20:03:cd:5b:af:ce:c4:ea:06:5f:74:5a:49:52:70:e5:
         03:b6:ff:c3:22:d5:15:04:fc:b9:4a:77:44:21:11:0d:eb:b0:
         fe:ed:ec:67:d3:b7:f7:e9:e3:76:76:2d:ef:5e:cf:a3:52:24:
         4a:17:3d:d8:80:5e:0b:43:87:8e:a9:6c:aa:c7:a2:5a:62:6d:
         a2:34:c5:f7:72:9a:57:e1:35:3d:ae:01:b2:85:92:e0:f0:63:
         04:38:ad:6d:ac:43:aa:b8:d6:fd:fa:4e:2e:c4:a6:0a:89:47:
         2c:50:f2:f3:0c:97:5d:45:85:84:e9:5d:0e:da:58:3f:42:7d:
         16:0d:96:f6:ec:8b:70:36:7d:7e:c3:71:9c:ff:a5:63:ed:0c:
         11:ee:ac:34:a8:12:f6:c7:3c:84:8a:75:c1:06:7b:a4:d4:32:
         12:e8:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----