Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          pS7/1OgIKr1qx956iLA80I8pfpeSHGyvWQGoetpA8kI=
Subject key identifier:   24:C5:A0:9B:4B:B4:AC:30:D5:A0:DD:88:0A:83:26:D2:DE:DD:A4:3E
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       03FF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          03FD
Signing time:             Mon 02 Nov 2026 03:59:59 +0000
Manifest this update:     Mon 02 Nov 2026 03:59:59 +0000
Manifest next update:     Wed 04 Nov 2026 03:59:59 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: ne3G7UgaVeEJ8lvb7wo1hhYiUTCdP5+ZqX0ru4d5w0U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Nov  2 03:59:59 2026 GMT
            Not After : Nov  4 03:59:59 2026 GMT
        Subject: CN=6ae80abf-bb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:50:ea:c4:66:7a:3c:b9:19:b6:25:31:f9:
                    cb:09:b2:67:51:c7:5d:c6:53:93:a0:3a:e6:30:30:
                    dc:e6:e5:b2:3b:40:5e:fb:9d:63:2a:f0:17:c7:4c:
                    69:2e:be:79:75:4c:3c:6c:df:0b:9b:e4:28:71:65:
                    2c:15:43:fa:8c:04:66:48:13:8f:79:28:67:27:09:
                    40:07:7b:a9:d4:b3:62:3f:1e:4b:d7:57:bf:f2:27:
                    a1:45:e6:3b:fa:c3:30:6f:83:b0:c5:4d:6d:0b:25:
                    64:ba:02:e2:58:32:c5:f9:49:06:44:34:bb:13:eb:
                    26:27:60:17:f6:43:52:a0:14:28:3d:6a:87:fc:71:
                    44:93:26:fa:8f:ae:58:80:68:91:3e:8c:80:29:33:
                    e3:7e:d8:97:c4:9b:d1:bb:18:26:e5:9b:ac:07:4b:
                    9b:3b:3f:e2:e8:e6:c9:ef:25:04:57:fb:9a:8a:9b:
                    6c:91:ae:e2:df:94:6b:25:47:6b:0a:9a:2e:1b:9d:
                    d9:4e:c4:a5:07:6d:9c:e9:74:f5:51:1e:03:b0:bc:
                    69:af:dc:9c:eb:07:10:f5:d4:d6:6d:83:26:dd:a2:
                    65:01:da:ad:99:e5:91:cf:76:62:d6:cb:53:f1:9f:
                    cb:cf:51:26:1d:6f:76:72:af:97:93:b1:db:44:42:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C5:A0:9B:4B:B4:AC:30:D5:A0:DD:88:0A:83:26:D2:DE:DD:A4:3E
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:b5:b0:2e:ab:64:6e:e1:f5:f6:7e:be:0b:0d:a3:c6:fe:
         d1:b5:3d:71:a8:96:5f:56:7c:46:b2:3e:72:05:21:1b:53:18:
         cd:ba:d0:79:d5:60:d7:41:27:87:92:b6:f7:f7:43:90:0b:84:
         cb:7a:94:55:a1:c5:29:12:3a:17:40:dd:50:70:e8:94:91:91:
         4c:a3:de:c7:99:6f:2f:38:e8:ef:fa:a8:f6:d2:6d:bd:20:3e:
         04:7c:c6:72:a0:55:cc:e9:ab:72:c4:0d:f8:1c:f8:e1:a6:49:
         e1:20:c6:d5:9e:7a:ff:44:61:a6:85:cb:6c:3a:6e:7b:3a:a3:
         48:3a:09:ca:32:16:8d:54:99:ca:b5:2c:ff:5e:6b:df:80:6b:
         d4:0f:dc:0a:35:ab:8d:20:f4:4f:a4:5a:63:13:f1:5a:e1:95:
         ea:4c:3e:05:e9:e1:b7:00:f1:6f:da:18:0d:a1:d4:60:ea:bb:
         f5:96:a5:ae:15:05:85:24:9b:a2:1d:5d:fb:2c:e2:dc:31:c0:
         8b:4a:bb:da:ed:64:a9:8c:a8:e6:bb:75:ef:e1:be:91:75:5e:
         fa:84:aa:be:29:bd:ba:e7:67:ec:b6:06:e9:93:2a:10:a0:9c:
         25:cf:00:e7:a3:c0:7c:bc:8d:f4:7b:d5:a9:b2:57:97:ef:78:
         67:f0:c7:94
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVBMkFBUjExMC8GA1UEBRMoQzY3NkZGQ0I0MzJDNUI4NTI0MTVGQzYzQjg5NEM1
MjcwNTI5MzlBNDAeFw0yNjExMDIwMzU5NTlaFw0yNjExMDQwMzU5NTlaMBgxFjAU
BgNVBAMTDTZhZTgwYWJmLWJiNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/mFDqxGZ6PLkZtiUx+csJsmdRx13GU5OgOuYwMNzm5bI7QF77nWMq8BfH
TGkuvnl1TDxs3wub5ChxZSwVQ/qMBGZIE495KGcnCUAHe6nUs2I/HkvXV7/yJ6FF
5jv6wzBvg7DFTW0LJWS6AuJYMsX5SQZENLsT6yYnYBf2Q1KgFCg9aof8cUSTJvqP
rliAaJE+jIApM+N+2JfEm9G7GCblm6wHS5s7P+Lo5snvJQRX+5qKm2yRruLflGsl
R2sKmi4bndlOxKUHbZzpdPVRHgOwvGmv3JzrBxD11NZtgybdomUB2q2Z5ZHPdmLW
y1Pxn8vPUSYdb3Zyr5eTsdtEQrx7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUJMWg
m0u0rDDVoN2ICoMm0t7dpD4wHwYDVR0jBBgwFoAUxnb/y0MsW4UkFfxjuJTFJwUp
OaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1QTJBLzhFRjUzNTdDQzQyRTExRUU5OTdBRkQ0Rjc3NTQxMkU2L3huYl95
ME1zVzRVa0ZmeGp1SlRGSndVcE9hUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3huYl95ME1zVzRVa0ZmeGp1SlRGSndVcE9hUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTVBMkEvOEVGNTM1N0NDNDJFMTFFRTk5N0FGRDRGNzc1NDEy
RTYveG5iX3kwTXNXNFVrRmZ4anVKVEZKd1VwT2FRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1xbWwLqtkbuH19n6+Cw2jxv7RtT1xqJZf
VnxGsj5yBSEbUxjNutB51WDXQSeHkrb390OQC4TLepRVocUpEjoXQN1QcOiUkZFM
o97HmW8vOOjv+qj20m29ID4EfMZyoFXM6atyxA34HPjhpknhIMbVnnr/RGGmhcts
Om57OqNIOgnKMhaNVJnKtSz/XmvfgGvUD9wKNauNIPRPpFpjE/Fa4ZXqTD4F6eG3
APFv2hgNodRg6rv1lqWuFQWFJJuiHV37LOLcMcCLSrva7WSpjKjmu3Xv4b6RdV76
hKq+Kb2652fstgbpkyoQoJwlzwDno8B8vI30e9WpsleX73hn8MeU
-----END CERTIFICATE-----