Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          a2fM62+UTLFUniSDcaxDWvSU2Ey4oSE0IQ2Ct/+pyuM=
Subject key identifier:   70:0C:F6:40:BC:A9:B0:B0:E2:70:C2:CA:EA:40:52:D9:87:88:70:DB
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       0B11
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          0B10
Signing time:             Sat 05 Sep 2026 01:17:08 +0000
Manifest this update:     Sat 05 Sep 2026 01:17:07 +0000
Manifest next update:     Mon 07 Sep 2026 01:17:07 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: jYm2VXa+lKWQKpGodZyznI71wCDu/rgXAgXRBXACZbs=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2833 (0xb11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Sep  5 01:17:07 2026 GMT
            Not After : Sep  7 01:17:07 2026 GMT
        Subject: CN=6a9b6d94-f032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:89:06:f9:fc:7f:c0:bb:12:6e:06:20:3a:
                    be:23:e3:b3:72:ad:9b:42:98:8d:3d:bd:46:2f:d4:
                    0b:f9:3b:88:a2:e9:a5:61:4b:5e:c4:7e:13:65:c6:
                    eb:87:44:c9:49:fb:f2:4e:4c:a0:de:36:9b:24:dc:
                    be:fb:24:8a:fb:52:58:42:93:c0:d7:fa:1f:05:c2:
                    90:b7:a3:b3:6c:d1:19:75:07:bd:4e:74:78:84:39:
                    d6:6b:cd:24:d4:7c:7e:ab:ff:c1:d9:b7:0f:02:a7:
                    0d:ec:92:04:b1:3c:57:9f:e6:30:df:18:a2:5f:a2:
                    78:af:53:5a:a2:e3:b9:16:e0:82:98:36:1b:8b:3f:
                    5f:8b:d1:6d:ab:36:fe:1f:d9:97:da:c1:18:74:db:
                    0a:b1:52:fd:67:56:c9:39:85:aa:ac:15:94:79:24:
                    a6:9b:d0:78:bc:7b:61:d4:13:0e:df:a8:ed:0c:04:
                    1c:8a:74:62:96:29:cb:be:4d:4a:9f:1e:27:83:81:
                    30:7c:ed:4f:34:97:34:c4:c2:55:c7:c3:fe:f2:f7:
                    fc:bb:fd:61:e8:af:7e:48:57:b1:31:6e:66:28:6e:
                    1a:07:c2:e7:35:d3:6f:43:0d:07:46:a2:9c:32:2f:
                    1f:40:eb:f0:ff:ac:09:d2:b7:67:1b:b1:8b:b0:fb:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0C:F6:40:BC:A9:B0:B0:E2:70:C2:CA:EA:40:52:D9:87:88:70:DB
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:28:58:fd:a7:2e:87:da:39:a7:d9:0a:1c:9a:4d:9a:a0:de:
         e4:08:5b:1a:22:c0:8a:df:f7:c9:9e:3d:87:45:50:a1:14:eb:
         1d:53:2d:0b:f6:09:d5:7d:14:e7:45:ab:46:3f:78:e6:f3:a0:
         b2:24:7b:ab:8f:b7:54:c3:66:d3:2a:c3:19:2d:98:74:d2:09:
         72:28:51:92:ee:12:44:ff:de:21:1f:9b:cf:82:a8:5c:28:94:
         4d:2e:4d:cc:88:ae:73:4b:c5:93:80:e7:c0:c9:64:4c:6b:55:
         29:2f:96:3e:ed:8a:0e:60:2f:02:7b:14:39:a3:61:e0:8e:1c:
         bc:4c:9b:d8:e7:24:72:f7:2b:21:72:86:b5:59:79:0d:9f:1a:
         cd:b7:ae:c1:e8:c8:50:82:2c:9d:39:83:b4:ed:79:4a:73:82:
         80:7a:9e:ab:54:be:13:48:89:56:d1:b2:60:a8:2e:58:6f:4a:
         7b:ec:3a:ed:c9:2e:ce:3a:39:74:d7:e0:1a:07:17:72:da:8d:
         33:0e:e7:be:8e:34:8a:f5:15:48:06:5b:1f:7b:9b:03:0b:96:
         fd:df:32:39:7e:6f:aa:b5:42:4e:3d:1a:ee:d7:58:27:da:08:
         59:1a:9b:57:98:1a:d6:01:09:e3:48:00:34:37:a1:44:a2:c7:
         78:1d:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----