Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          J6+h2ydZLkreKP4j0igZEbAoCyxsNkJjT2AoOR7xxsM=
Subject key identifier:   47:22:17:56:3F:13:D6:D5:D3:80:0A:6D:66:C0:96:AA:B3:3E:3B:08
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0AD7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0AD6
Signing time:             Wed 04 Nov 2026 01:25:01 +0000
Manifest this update:     Wed 04 Nov 2026 01:25:00 +0000
Manifest next update:     Fri 06 Nov 2026 01:25:00 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: C+ZX6QQU/VQ6VkE1veWYTFwdcOF65aBGbCHG5TmFraQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Nov  4 01:25:00 2026 GMT
            Not After : Nov  6 01:25:00 2026 GMT
        Subject: CN=6aea896d-397f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:ef:38:c9:ee:e6:7c:77:01:07:86:c3:10:
                    54:77:21:e0:18:01:90:d1:23:a7:d0:ca:b8:cd:2f:
                    ca:a1:43:d7:bd:ae:b0:db:6a:5f:2b:ac:ba:33:a8:
                    5a:45:0e:26:aa:56:d3:bf:52:02:c9:5d:fa:c2:00:
                    01:40:32:d3:37:ca:bd:9e:b4:63:dd:9d:a3:67:7c:
                    b1:3d:26:0b:45:28:c3:9e:2e:0a:b8:dd:e3:0f:7b:
                    67:21:f8:e8:c3:90:48:c3:b8:13:a2:ad:36:d9:ec:
                    b3:ee:56:4a:cf:5e:2b:6e:71:cb:b0:da:e7:da:19:
                    b2:6d:24:57:4a:ee:2a:bd:b7:73:28:06:ec:1d:ff:
                    e3:6b:20:b9:ce:b2:29:27:cc:80:d9:e2:d7:a3:5f:
                    02:30:ba:d9:24:03:8e:d9:cc:0a:29:ad:8f:36:86:
                    b7:69:70:5e:43:f1:af:09:92:f8:1c:7b:e5:17:12:
                    86:dc:36:15:4e:06:14:a8:83:e6:7b:97:50:8a:4a:
                    d7:13:59:35:bf:97:5a:85:49:c6:d7:36:89:f1:f0:
                    f7:60:db:41:61:84:02:8b:bb:fc:69:77:bc:31:e8:
                    81:b0:08:ad:25:e0:d8:6c:06:3c:09:f4:99:e3:37:
                    6e:aa:1b:09:b1:b2:4f:31:33:cd:36:88:da:2b:37:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:22:17:56:3F:13:D6:D5:D3:80:0A:6D:66:C0:96:AA:B3:3E:3B:08
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:8d:54:43:47:97:30:00:bc:64:c8:a4:bc:ed:8a:c4:c8:5b:
         5f:a9:9c:c5:ed:62:89:b1:eb:7c:69:b9:94:cb:bd:3a:e1:c9:
         b3:32:47:b2:1a:2d:99:e7:a1:80:c3:45:11:39:a2:2e:75:09:
         1e:6b:4b:5d:14:3a:6c:14:80:dd:c9:cf:ec:98:11:6a:00:58:
         2b:1f:03:be:4b:d4:da:3b:b9:65:67:6a:c1:3c:03:12:e4:2d:
         6c:8a:1c:67:9e:67:14:47:1c:32:e3:48:55:b8:59:8b:4b:db:
         a5:ab:3f:23:6b:9f:96:73:94:7c:39:a1:39:fb:dc:56:7b:12:
         91:12:e0:40:50:c0:c3:e3:35:e1:86:b4:86:54:47:0d:2e:60:
         73:16:97:ab:14:2a:0f:cc:1a:a8:9b:49:3a:91:1c:e4:b5:6d:
         4f:11:96:ce:45:b2:11:1a:5b:d9:43:50:8e:61:9c:13:13:b7:
         99:4a:f1:0d:cc:23:3c:bc:b4:7e:67:99:01:18:4d:ef:33:f9:
         99:3f:ff:97:6d:62:1c:3f:c5:73:81:71:e0:f6:24:52:e2:aa:
         7f:0c:fd:68:e8:2b:9a:c3:4c:27:e5:c2:3e:fd:aa:04:99:22:
         49:9c:1f:0e:7f:c5:a0:48:4b:9b:46:4d:2d:3e:f3:9b:6f:58:
         a6:bc:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----