Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
File:                     htscudi9_Ntk5yx843BiWWXoPT0.mft (raw, json)
Hash identifier:          D7k7ShR0XQF6C52ejqfLlFcDPFqMcqZ8j2rC4U7b0Ek=
Subject key identifier:   BD:5D:5C:49:5A:75:7B:81:0F:8D:E9:76:0D:CA:32:23:86:EF:FE:FB
Authority key identifier: 86:DB:1C:B9:D8:BD:FC:DB:64:E7:2C:7C:E3:70:62:59:65:E8:3D:3D
Certificate issuer:       /CN=F3664D8DAR/serialNumber=86DB1CB9D8BDFCDB64E72C7CE370625965E83D3D
Certificate serial:       0C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/htscudi9_Ntk5yx843BiWWXoPT0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
Manifest number:          0C
Signing time:             Sun 01 Nov 2026 06:04:23 +0000
Manifest this update:     Sun 01 Nov 2026 06:04:22 +0000
Manifest next update:     Tue 03 Nov 2026 06:04:22 +0000
Files and hashes:         1: htscudi9_Ntk5yx843BiWWXoPT0.crl (hash: iwwqv2CH6cPtmw2/pNg2g9QnsyO6pZZDzewqtSHrOsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
                          rsync://rpki.afrinic.net/repository/arin/htscudi9_Ntk5yx843BiWWXoPT0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 06:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664D8DAR, serialNumber=86DB1CB9D8BDFCDB64E72C7CE370625965E83D3D
        Validity
            Not Before: Nov  1 06:04:22 2026 GMT
            Not After : Nov  3 06:04:22 2026 GMT
        Subject: CN=6ae6d667-007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:c3:ca:73:8e:28:92:c3:85:01:4a:5f:9a:
                    87:bf:f7:ac:33:59:cf:78:25:5a:f6:98:4b:0b:45:
                    9c:3d:cf:a6:9a:79:34:50:8d:8e:ec:dc:34:e1:12:
                    3b:48:df:3c:7f:18:8f:22:fb:18:ff:19:34:0a:5b:
                    83:0f:a4:ec:d2:52:76:58:3f:f2:b3:ff:c6:3b:a1:
                    30:e6:f4:51:ce:a0:97:a5:f0:62:5d:9d:26:60:c2:
                    e3:67:33:eb:aa:2b:27:28:d9:6a:14:8c:c4:36:b0:
                    a6:fe:84:13:f1:83:39:03:f2:98:26:19:2b:17:5e:
                    d9:05:91:04:e8:57:93:44:ac:3f:18:0f:1d:f7:b9:
                    b8:0d:d2:64:e1:94:19:4f:17:b2:6f:93:63:0b:52:
                    2d:24:12:04:89:49:eb:69:f4:8f:3d:9c:bf:1f:25:
                    ca:87:7d:4f:f5:73:79:cc:18:cc:38:cb:a3:71:5a:
                    9a:d1:91:49:b4:da:e2:7c:57:94:46:78:66:c6:ff:
                    e9:59:1a:d3:aa:2b:dd:86:a9:e6:23:b6:25:f8:94:
                    34:6d:14:80:8e:7c:2b:61:2c:6f:dd:3e:68:a6:0b:
                    d1:72:db:aa:91:0f:ef:ce:4d:c3:de:0f:6a:c4:f0:
                    cc:c5:51:88:94:53:4a:63:5b:a6:80:6c:a7:ec:41:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5D:5C:49:5A:75:7B:81:0F:8D:E9:76:0D:CA:32:23:86:EF:FE:FB
            X509v3 Authority Key Identifier:
                keyid:86:DB:1C:B9:D8:BD:FC:DB:64:E7:2C:7C:E3:70:62:59:65:E8:3D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/htscudi9_Ntk5yx843BiWWXoPT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:fb:00:78:cd:de:9f:d9:42:e1:34:1a:af:91:20:6a:a7:
         4d:c8:fd:fe:9a:62:08:34:16:a5:01:59:38:fa:c3:4f:45:2e:
         75:be:96:d8:60:06:c7:61:bf:3e:7a:1b:a6:39:6f:2b:00:fe:
         90:99:cd:da:50:54:e4:58:7e:a5:0d:12:64:d8:7d:55:46:40:
         67:de:9f:01:4c:31:9a:eb:ef:ba:39:2d:25:69:6f:fb:ca:d5:
         eb:bc:43:1b:91:58:fc:48:3b:0d:d8:45:1d:22:a5:7a:ee:f8:
         69:2b:bd:8a:fb:ef:56:e4:cf:03:b9:75:be:bd:6c:36:d7:6c:
         11:68:06:fb:95:48:47:6f:e3:3c:24:1b:02:62:33:f4:69:06:
         77:4c:e3:95:8b:b3:f8:8a:3a:54:d1:ba:55:c4:64:ee:5f:59:
         94:5e:c6:9b:0e:3b:37:bc:9a:44:ea:ce:4f:36:93:ea:26:87:
         45:be:a8:5d:c2:2c:0e:c1:2f:2f:3c:d4:ae:4d:8c:88:5c:cf:
         6a:30:c1:54:17:14:4c:43:9a:9a:44:59:4e:90:74:5d:04:a8:
         14:05:63:23:62:dd:88:40:5c:2c:82:b4:60:bb:8b:f7:bd:cc:
         48:55:9d:0b:b2:af:bc:3e:2f:ff:32:ed:36:8c:8e:d5:21:20:
         68:a6:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----