Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
File:                     h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft (raw, json)
Hash identifier:          RkzGRspPJVwreaJb1pa8epCmzFlYTNgrrmFksCj0SHc=
Subject key identifier:   25:C0:45:77:AF:AF:AC:C7:61:57:67:7C:94:28:A4:85:B6:51:52:30
Authority key identifier: 87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
Certificate issuer:       /CN=F3658AF9AR/serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
Certificate serial:       01C4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
Manifest number:          01C4
Signing time:             Tue 03 Nov 2026 05:06:00 +0000
Manifest this update:     Tue 03 Nov 2026 05:05:59 +0000
Manifest next update:     Thu 05 Nov 2026 05:05:59 +0000
Files and hashes:         1: h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl (hash: XaLVaihV7lxeeHGnrTm6lbwp3Qe0dd5yKyOa6flq/Hs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                          rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AR, serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
        Validity
            Not Before: Nov  3 05:05:59 2026 GMT
            Not After : Nov  5 05:05:59 2026 GMT
        Subject: CN=6ae96bb8-9980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:85:40:dd:1f:75:d7:b8:62:99:81:9c:29:
                    f2:f0:8f:33:47:10:1c:07:4b:e0:36:f4:63:41:18:
                    a4:b7:80:a2:8a:c1:15:fe:81:42:98:49:62:fc:f4:
                    d9:30:bf:0c:77:c3:90:42:e0:65:09:c5:f7:f6:c1:
                    41:5c:01:e6:5d:ba:a0:5b:a9:95:5d:a8:03:8e:b4:
                    b1:ce:4e:06:f9:37:4d:75:1c:01:9c:8f:05:7d:6f:
                    5c:87:98:dd:64:da:41:6b:7f:a6:73:26:e5:18:aa:
                    4d:64:bb:c9:35:4b:ba:9a:bf:72:5e:06:27:44:98:
                    05:3f:26:63:7c:d5:49:73:58:dd:f1:24:81:b6:94:
                    28:02:e2:9f:b7:3f:32:22:64:13:9f:32:f9:47:d8:
                    c8:e3:91:e4:15:ff:33:d0:19:5b:26:1e:fe:7f:33:
                    6e:1f:c8:c0:79:0f:17:f5:87:6a:25:fc:24:01:25:
                    6b:23:07:93:bf:d1:a7:22:2b:f7:1b:6b:7b:56:c3:
                    55:40:ac:82:dc:5e:57:b6:a7:a3:07:b4:71:57:37:
                    63:14:72:75:4b:56:99:b1:aa:9b:d0:29:d5:1e:6e:
                    26:35:2d:ed:60:bb:e4:8d:30:93:f5:6e:5e:7a:2d:
                    ad:88:e6:7b:f2:41:84:19:9c:13:ee:69:c4:62:31:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C0:45:77:AF:AF:AC:C7:61:57:67:7C:94:28:A4:85:B6:51:52:30
            X509v3 Authority Key Identifier:
                keyid:87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d2:d2:00:4f:9d:fd:1b:48:83:da:7c:56:90:d9:65:7a:a7:
         7f:33:66:9c:0b:ca:7c:21:6e:ed:2b:39:69:09:6b:18:d5:b0:
         95:69:36:dd:f8:e5:94:ba:73:d0:ca:7e:3c:3e:f5:15:a8:cd:
         05:35:d3:8e:60:2d:2e:df:da:16:a0:ec:df:e8:c6:18:1e:ec:
         7b:89:90:13:d3:75:09:be:a4:97:e5:e7:c6:0b:f8:d7:51:d4:
         a0:fc:ce:7f:7d:d8:d4:55:20:e4:fe:fb:88:6c:39:11:d2:85:
         77:20:1b:a0:4f:b5:c9:dc:e5:0a:8d:18:e6:cd:33:a6:4a:42:
         c5:6f:b2:5e:5a:1c:02:b0:5e:46:56:de:27:87:83:db:9c:24:
         44:a3:75:35:27:fa:cd:26:45:b6:2e:e1:cc:d0:a3:39:46:50:
         f5:39:a9:59:17:b5:f4:76:42:89:5c:9b:a6:ad:38:af:64:4a:
         1a:48:e9:e7:d1:06:72:af:49:71:97:fc:4b:c1:81:0f:01:00:
         2d:d5:cb:85:d6:03:af:0e:5b:f7:20:53:fe:59:c9:d4:5e:fa:
         b4:84:24:89:ff:9f:ed:09:08:82:42:ee:6a:03:05:73:99:70:
         8a:38:93:9d:52:bc:3c:38:6a:d1:39:c9:30:26:55:ed:d9:e4:
         5f:80:c1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----