Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.mft
File:                     d-2LslFXM7Uek5FCoNvXKt2t_I4.mft (raw, json)
Hash identifier:          h524wk5PQUPRyn2drRhTVit49YhuAoU0/xPIDGc6AZY=
Subject key identifier:   9A:AC:BA:BB:47:C4:FA:34:3A:05:41:B2:0A:94:71:DF:12:90:99:7B
Authority key identifier: 77:ED:8B:B2:51:57:33:B5:1E:93:91:42:A0:DB:D7:2A:DD:AD:FC:8E
Certificate issuer:       /CN=F3642481AR/serialNumber=77ED8BB2515733B51E939142A0DBD72ADDADFC8E
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/arin/d-2LslFXM7Uek5FCoNvXKt2t_I4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.mft
Manifest number:          20
Signing time:             Sun 01 Nov 2026 05:58:25 +0000
Manifest this update:     Sun 01 Nov 2026 05:58:24 +0000
Manifest next update:     Tue 03 Nov 2026 05:58:24 +0000
Files and hashes:         1: d-2LslFXM7Uek5FCoNvXKt2t_I4.crl (hash: q5/skwSYk+HpESD++2W271802iU3OIyrNrTetSQpz7g=)
                          2: DA14890CBE5111F18095F3AACE1D38B0.roa (hash: 0+yei3Xs4ULiwrkHPgwJYkCbJi13KqGBkzRNvSn6k4Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.mft
                          rsync://rpki.afrinic.net/repository/arin/d-2LslFXM7Uek5FCoNvXKt2t_I4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 05:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642481AR, serialNumber=77ED8BB2515733B51E939142A0DBD72ADDADFC8E
        Validity
            Not Before: Nov  1 05:58:24 2026 GMT
            Not After : Nov  3 05:58:24 2026 GMT
        Subject: CN=6ae6d501-29ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:ca:2b:14:fb:f2:90:aa:aa:fd:08:fd:3f:
                    c3:63:8d:0b:00:65:21:8c:16:d4:b2:70:94:3c:94:
                    6d:26:c7:2a:93:8d:8c:64:4c:80:a8:e6:85:09:3b:
                    8d:2f:b5:e7:7b:c0:50:99:67:d6:59:7d:ac:ba:30:
                    df:6b:b3:52:39:13:02:cf:92:dd:a6:1f:1b:90:b5:
                    12:87:a2:49:75:be:8a:d6:a0:16:f0:9f:3f:8e:76:
                    69:56:a8:ab:4f:b8:78:56:85:41:8c:b7:53:08:0b:
                    fb:24:aa:52:53:1f:d5:95:2a:78:ae:26:f1:65:7b:
                    cf:1f:13:ef:ef:a3:0f:38:a7:cd:c9:98:fd:f9:a1:
                    a2:1e:07:57:ff:79:76:3a:aa:fb:6a:0e:7e:ee:4a:
                    a9:b2:52:a2:85:1f:4c:8a:6c:12:b5:0e:37:0f:75:
                    44:0e:4e:4c:8b:5d:ec:a4:55:04:f7:65:37:60:ee:
                    8c:69:56:25:fd:ea:b0:8a:01:5d:f3:bf:3f:27:4c:
                    7b:40:2d:16:32:bd:1b:03:31:f8:a5:40:9c:a1:11:
                    46:60:9b:a3:17:88:d5:1d:d8:e2:b9:e4:cc:7b:ce:
                    e9:cc:b6:b5:40:7b:21:fa:be:eb:75:71:67:49:7a:
                    3b:ba:d1:c0:65:f0:58:40:2c:21:90:72:0f:32:4a:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AC:BA:BB:47:C4:FA:34:3A:05:41:B2:0A:94:71:DF:12:90:99:7B
            X509v3 Authority Key Identifier:
                keyid:77:ED:8B:B2:51:57:33:B5:1E:93:91:42:A0:DB:D7:2A:DD:AD:FC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/d-2LslFXM7Uek5FCoNvXKt2t_I4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e3:15:7c:21:ef:d1:59:1d:1d:ca:9b:2e:47:a3:b3:40:a0:
         be:f7:32:0f:80:81:c2:9e:16:b3:94:1d:89:1e:85:54:62:2d:
         0e:1b:76:68:7a:13:a9:ec:f9:27:0f:7b:c4:ba:35:ce:11:09:
         d4:34:73:f5:4e:dd:69:f5:0e:db:7d:86:8e:8d:8f:ae:73:ed:
         9a:49:1b:34:7c:2e:c5:89:a6:37:a1:2c:54:02:93:20:8f:a4:
         cf:4b:2e:5b:ae:55:fd:1b:85:80:24:90:e7:c6:14:cf:0c:4d:
         1c:04:46:01:8f:3f:38:5b:20:9e:f0:94:b0:8e:49:79:6e:fc:
         31:4e:0e:7f:4f:31:53:cb:0a:75:dc:7a:97:cd:e4:26:a0:64:
         77:04:7e:88:05:d1:11:b2:7f:c1:e0:11:34:47:1b:8c:e8:3a:
         68:0b:45:e2:af:02:93:14:c4:01:05:c1:15:03:46:dc:6d:bc:
         89:c3:42:d8:e0:c2:4d:31:d1:87:2d:3a:28:17:4d:41:3e:19:
         d2:42:e7:07:df:95:14:c7:6b:ba:8b:ba:d9:5c:73:0a:01:0e:
         62:9e:d9:42:2a:b6:af:73:8a:01:90:9f:5d:dd:37:b3:53:ca:
         b0:58:a4:77:27:a3:14:fe:7f:da:ca:e3:1f:c2:d8:d8:1e:5c:
         b4:d5:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----