Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
File:                     DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft (raw, json)
Hash identifier:          HKJg5Oa7cyXLxLSMl+LtX3Z2XgDciGCIS61J5se9/qg=
Subject key identifier:   53:51:32:AC:5D:94:93:06:2F:8E:B2:C2:D5:02:02:73:51:AF:35:71
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Certificate issuer:       /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial:       0AE8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
Manifest number:          0AE0
Signing time:             Mon 02 Nov 2026 01:28:34 +0000
Manifest this update:     Mon 02 Nov 2026 01:28:33 +0000
Manifest next update:     Wed 04 Nov 2026 01:28:33 +0000
Files and hashes:         1: DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl (hash: JUaxtBhLlRou90lngBJPFsnivYpx5AGJJWzBOcBgn7M=)
                          2: 3303E3CCC96611F1BA3C6107CF1D38B0.roa (hash: D4yoN6hf7Ha2jqtw+W3TBz6MDFQzIzcyNt2EOy2P/NQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                          rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2792 (0xae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAR, serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
        Validity
            Not Before: Nov  2 01:28:33 2026 GMT
            Not After : Nov  4 01:28:33 2026 GMT
        Subject: CN=6ae7e741-0c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:26:a3:93:1e:a6:ce:1e:95:42:1f:01:83:
                    77:03:b7:cc:85:55:a5:5c:02:76:5e:27:38:c4:fa:
                    a3:a1:4e:db:0d:7e:b3:bc:72:16:6a:73:69:d1:39:
                    52:26:fe:0e:33:51:9c:c6:96:a4:1c:4e:d1:3a:69:
                    3d:b7:f8:5c:c0:ed:5b:5f:f6:bb:c2:6c:38:5c:f9:
                    4a:90:70:f8:81:7c:0c:7c:94:25:de:3a:d8:e3:c1:
                    1c:e1:4f:dc:9d:a1:9c:ce:6e:0a:74:80:99:0c:bb:
                    1c:b9:80:6d:f2:0d:b1:c5:ca:ae:ed:8c:ea:a1:68:
                    78:6d:8c:58:96:70:ad:d9:76:ea:27:a0:77:ff:81:
                    68:07:b7:3c:e8:8e:dd:57:e1:87:92:d5:df:d5:f8:
                    7e:59:cc:55:ba:d9:aa:16:af:b7:b1:cc:d7:92:c9:
                    60:eb:50:ed:ed:93:6a:85:d4:48:5c:0b:67:6f:e5:
                    90:df:91:09:a9:8d:df:de:ac:69:79:0b:52:5e:bf:
                    03:f9:3c:ba:c2:8e:b8:66:c7:d4:98:8b:d6:c5:23:
                    33:50:20:8b:8c:74:4e:bd:ba:6d:c0:b0:ec:75:8f:
                    c6:ea:b7:de:4d:71:81:31:d1:9b:43:31:90:5b:3c:
                    3d:27:b4:bd:4f:8f:ff:9f:6f:89:30:f7:b0:7b:f3:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:51:32:AC:5D:94:93:06:2F:8E:B2:C2:D5:02:02:73:51:AF:35:71
            X509v3 Authority Key Identifier:
                keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:9a:d9:2e:39:0c:62:fb:41:76:6a:e6:34:73:c3:ab:9f:
         68:c4:e6:36:a4:13:b5:dd:df:f7:6b:36:b9:c1:26:ba:79:c6:
         83:ad:7f:44:af:4c:c8:fa:ce:8b:d4:77:93:de:65:a9:d1:2c:
         f0:63:53:59:b7:6e:19:b2:f6:1d:c5:59:f9:dc:ca:52:1a:74:
         a1:c4:e5:cb:9d:c0:0a:6c:55:18:40:73:45:d9:0e:fb:df:2a:
         fd:53:c3:3b:eb:48:2f:6b:2e:1c:91:46:27:e4:7a:f7:41:5e:
         5f:a3:9e:f0:8a:65:1e:4f:42:2d:a1:26:d3:21:48:43:a4:ac:
         38:26:ef:d8:93:e6:66:6c:90:3a:a7:ce:53:95:a8:b8:a5:23:
         bd:b5:e2:ee:31:49:2d:64:67:80:5e:08:d6:88:76:e2:55:9a:
         c5:b0:be:45:8e:6a:51:6b:82:40:21:af:61:31:c3:07:49:00:
         0c:4d:b3:10:db:a5:98:f9:07:51:6b:e1:67:49:7c:95:91:9a:
         1c:c7:52:5d:01:59:47:e6:bc:41:73:db:9a:fd:b4:7c:43:61:
         c2:d1:19:bc:3f:dd:de:c3:87:95:36:cf:40:5b:63:92:42:bb:
         a7:4d:b9:64:02:f8:ac:5e:35:6d:af:0d:83:23:ff:c4:29:e4:
         2c:52:8e:2c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCugwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEM4MURBUjExMC8GA1UEBRMoMEQyNzM5NEU5Q0RFOTIxNTVFNDU5OUQ2ODQxMDk5
MkQ3MDhCRjI0NDAeFw0yNjExMDIwMTI4MzNaFw0yNjExMDQwMTI4MzNaMBgxFjAU
BgNVBAMTDTZhZTdlNzQxLTBjOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOcSajkx6mzh6VQh8Bg3cDt8yFVaVcAnZeJzjE+qOhTtsNfrO8chZqc2nR
OVIm/g4zUZzGlqQcTtE6aT23+FzA7Vtf9rvCbDhc+UqQcPiBfAx8lCXeOtjjwRzh
T9ydoZzObgp0gJkMuxy5gG3yDbHFyq7tjOqhaHhtjFiWcK3ZduonoHf/gWgHtzzo
jt1X4YeS1d/V+H5ZzFW62aoWr7exzNeSyWDrUO3tk2qF1EhcC2dv5ZDfkQmpjd/e
rGl5C1JevwP5PLrCjrhmx9SYi9bFIzNQIIuMdE69um3AsOx1j8bqt95NcYEx0ZtD
MZBbPD0ntL1Pj/+fb4kw97B783aTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUU1Ey
rF2UkwYvjrLC1QICc1GvNXEwHwYDVR0jBBgwFoAUDSc5TpzekhVeRZnWhBCZLXCL
8kQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRDODFELzU3MDY5RUNDODkwRTExRTk4RTE1RjA2MkY4QUVBMjI4L0RTYzVU
cHpla2hWZVJabldoQkNaTFhDTDhrUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0RTYzVUcHpla2hWZVJabldoQkNaTFhDTDhrUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NEM4MUQvNTcwNjlFQ0M4OTBFMTFFOThFMTVGMDYyRjhBRUEy
MjgvRFNjNVRwemVraFZlUlpuV2hCQ1pMWENMOGtRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAa0ZrZLjkMYvtBdmrmNHPDq59oxOY2pBO1
3d/3aza5wSa6ecaDrX9Er0zI+s6L1HeT3mWp0SzwY1NZt24ZsvYdxVn53MpSGnSh
xOXLncAKbFUYQHNF2Q773yr9U8M760gvay4ckUYn5Hr3QV5fo57wimUeT0ItoSbT
IUhDpKw4Ju/Yk+ZmbJA6p85Tlai4pSO9teLuMUktZGeAXgjWiHbiVZrFsL5FjmpR
a4JAIa9hMcMHSQAMTbMQ26WY+QdRa+FnSXyVkZocx1JdAVlH5rxBc9ua/bR8Q2HC
0Rm8P93ew4eVNs9AW2OSQrunTblkAvisXjVtrw2DI//EKeQsUo4s
-----END CERTIFICATE-----