Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          HrNAYnOnSRMBbx03HXT0aV2W1mOQh+X4iBGPmf5Sf/o=
Subject key identifier:   D9:A4:D4:FD:E8:76:12:14:40:42:DC:E5:F6:FE:4D:9C:36:9B:3B:55
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       07ED
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          07EB
Signing time:             Wed 04 Nov 2026 02:12:50 +0000
Manifest this update:     Wed 04 Nov 2026 02:12:49 +0000
Manifest next update:     Fri 06 Nov 2026 02:12:49 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: wSOYbCHxLwbyy4u7WPvV1zueGVdb+e7gjH1cFb9R+lA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Nov  4 02:12:49 2026 GMT
            Not After : Nov  6 02:12:49 2026 GMT
        Subject: CN=6aea94a2-bdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:b3:3d:08:d8:6b:d4:12:6a:98:3d:0d:27:
                    25:34:2b:fa:75:c4:b2:b8:69:3d:bf:fe:9a:34:b6:
                    a0:e0:d6:dd:61:56:c1:a3:e9:6a:d9:71:7c:18:d5:
                    e3:2f:c3:a3:b0:38:3d:1f:ac:50:ea:93:9c:68:a6:
                    e0:23:92:64:80:36:29:ec:77:95:d0:18:2b:6c:35:
                    68:97:4d:78:b4:e3:fd:a1:af:5e:29:a7:b6:d7:58:
                    c0:8e:54:46:ae:32:4f:eb:bb:1f:ba:ea:44:f0:5b:
                    aa:3e:ca:f2:09:c5:e2:a5:e5:ec:6b:f4:a4:49:1b:
                    72:3f:a1:0d:69:d5:fb:77:40:22:bf:60:0c:bd:50:
                    de:4d:f8:9e:93:45:61:94:11:37:16:09:b8:96:68:
                    86:0b:84:39:a6:ef:88:80:79:9f:cc:4b:03:91:1a:
                    db:70:4b:8f:a6:df:46:d9:7e:16:fe:76:02:ab:3d:
                    80:14:9e:c2:35:ac:ae:1e:a3:2d:a3:90:49:f5:73:
                    2f:6c:f3:92:55:9c:34:89:e0:be:88:57:5f:b3:b4:
                    3f:09:6f:bc:86:83:65:ed:c4:1f:03:1f:fb:7a:31:
                    19:e2:93:4d:3e:ca:f1:44:a6:4e:e1:92:68:31:fa:
                    ae:b5:18:95:46:bd:21:da:fe:73:21:03:75:08:59:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A4:D4:FD:E8:76:12:14:40:42:DC:E5:F6:FE:4D:9C:36:9B:3B:55
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ba:9d:f3:49:ae:7c:e9:f9:15:1f:d5:eb:b6:6f:c8:aa:94:
         49:16:be:d2:a9:7d:d8:13:1f:31:b0:2f:08:7f:8d:4c:27:3e:
         e8:98:74:2d:ff:7e:38:39:ed:dc:14:54:65:21:36:af:90:a4:
         46:0a:b9:f0:fc:c3:8e:7e:27:27:d8:1c:df:02:16:90:0a:6a:
         90:39:3e:c0:85:33:54:e2:01:a1:60:ad:ca:74:32:62:7b:99:
         88:70:8c:0b:e7:d3:80:29:13:ad:49:cb:9f:de:c1:55:3e:7d:
         0f:ff:5f:86:44:16:fd:b1:07:c4:ee:21:84:f0:47:9b:d1:17:
         d5:bc:34:ea:5b:08:e6:b5:f5:83:b7:15:17:c4:bc:4c:a7:1d:
         c6:db:67:79:48:3e:38:5c:ce:3a:0f:83:54:76:0e:31:b1:60:
         f0:1a:1f:b0:45:02:83:54:1b:f0:58:6d:4c:88:08:02:a7:70:
         13:00:fe:a2:9a:48:2b:58:c1:50:8a:29:77:49:b0:1e:c4:25:
         b5:75:7a:ad:eb:0a:f0:3f:08:d6:70:ce:1a:50:55:5c:fb:93:
         cb:83:46:d5:ba:1f:08:de:3d:0c:ad:c8:1e:da:7a:ed:64:4e:
         d0:a2:a4:59:72:f9:29:59:29:0b:d6:c7:e4:88:0e:b9:5d:4a:
         eb:66:e3:c7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBUjExMC8GA1UEBRMoOTc2MUEyRDI4MURCOTQ3RUZFODdFNUJBOTE1MDI3
OERCQjk4OTZFRjAeFw0yNjExMDQwMjEyNDlaFw0yNjExMDYwMjEyNDlaMBgxFjAU
BgNVBAMTDTZhZWE5NGEyLWJkY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKpbM9CNhr1BJqmD0NJyU0K/p1xLK4aT2//po0tqDg1t1hVsGj6WrZcXwY
1eMvw6OwOD0frFDqk5xopuAjkmSANinsd5XQGCtsNWiXTXi04/2hr14pp7bXWMCO
VEauMk/rux+66kTwW6o+yvIJxeKl5exr9KRJG3I/oQ1p1ft3QCK/YAy9UN5N+J6T
RWGUETcWCbiWaIYLhDmm74iAeZ/MSwORGttwS4+m30bZfhb+dgKrPYAUnsI1rK4e
oy2jkEn1cy9s85JVnDSJ4L6IV1+ztD8Jb7yGg2XtxB8DH/t6MRnik00+yvFEpk7h
kmgx+q61GJVGvSHa/nMhA3UIWbOVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2aTU
/eh2EhRAQtzl9v5NnDabO1UwHwYDVR0jBBgwFoAUl2Gi0oHblH7+h+W6kVAnjbuY
lu8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0I2NjdCODI4QzdDNDExRUI5NzM2Qzc2OEY4QUVBMjI4L2wyR2kw
b0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2wyR2kwb0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODgyQTEvQjY2N0I4MjhDN0M0MTFFQjk3MzZDNzY4RjhBRUEy
MjgvbDJHaTBvSGJsSDctaC1XNmtWQW5qYnVZbHU4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtup3zSa586fkVH9Xrtm/IqpRJFr7SqX3Y
Ex8xsC8If41MJz7omHQt/344Oe3cFFRlITavkKRGCrnw/MOOficn2BzfAhaQCmqQ
OT7AhTNU4gGhYK3KdDJie5mIcIwL59OAKROtScuf3sFVPn0P/1+GRBb9sQfE7iGE
8Eeb0RfVvDTqWwjmtfWDtxUXxLxMpx3G22d5SD44XM46D4NUdg4xsWDwGh+wRQKD
VBvwWG1MiAgCp3ATAP6imkgrWMFQiil3SbAexCW1dXqt6wrwPwjWcM4aUFVc+5PL
g0bVuh8I3j0Mrcge2nrtZE7QoqRZcvkpWSkL1sfkiA65XUrrZuPH
-----END CERTIFICATE-----