Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
File:                     E3S5w_RfdBg91PcrFhAlKt-xJiA.mft (raw, json)
Hash identifier:          8WAXDR8han/KezsF5x2AAJ24ZY/bxI7V0WH8nV/gXjk=
Subject key identifier:   C9:65:FB:AF:86:FD:C0:38:7E:34:29:D2:2A:DA:F5:CC:95:6C:B9:2E
Authority key identifier: 13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20
Certificate issuer:       /CN=F36B2802AR/serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
Certificate serial:       0A1F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
Manifest number:          0A1E
Signing time:             Mon 02 Nov 2026 01:40:28 +0000
Manifest this update:     Mon 02 Nov 2026 01:40:27 +0000
Manifest next update:     Wed 04 Nov 2026 01:40:27 +0000
Files and hashes:         1: E3S5w_RfdBg91PcrFhAlKt-xJiA.crl (hash: tswyA89nry+6tubVGIOBtGxnY2eJnefT+fq29Xk8lPM=)
                          2: 0339DB7E0F8C11EAB91E1463F8AEA228.roa (hash: VEE0Ckp6I2VcUJ5B3ZZaJwDqeoS1pgqeABgMWtZnTH8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                          rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591 (0xa1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AR, serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
        Validity
            Not Before: Nov  2 01:40:27 2026 GMT
            Not After : Nov  4 01:40:27 2026 GMT
        Subject: CN=6ae7ea0c-aaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:d7:a2:d9:93:9e:00:17:64:af:d3:5c:b1:
                    4e:d2:9a:6c:36:68:e6:b4:96:45:8a:f8:55:ea:af:
                    b5:39:3f:5b:0e:16:08:52:60:64:db:7a:f7:d1:b4:
                    26:37:32:34:31:6c:88:8f:43:6b:79:89:04:0f:de:
                    cd:96:0b:d9:d1:0b:72:d7:22:cf:f7:ee:72:83:fe:
                    7f:ab:db:d6:95:88:5f:34:78:7e:0d:ca:07:6f:f5:
                    50:7e:91:30:c1:54:c6:2d:c0:39:01:d7:72:34:58:
                    55:b2:90:35:14:c1:d6:9c:be:58:c1:d5:bc:ee:f8:
                    17:b6:85:3c:dd:26:8e:b8:20:c0:20:8a:a7:03:62:
                    f9:a0:e7:91:42:9d:bc:1b:b2:d3:d0:60:92:aa:cc:
                    12:cc:dd:65:a5:51:7e:18:42:06:47:54:f9:89:40:
                    03:9c:75:8c:6e:89:58:d7:92:01:bd:cc:4f:e6:3d:
                    84:d1:f5:2a:af:f7:87:95:38:95:97:d4:7f:af:90:
                    dc:85:a6:86:13:fc:64:8b:49:ad:cd:88:f6:bf:81:
                    66:fc:27:ce:c5:0b:06:0c:4f:16:1f:61:c2:14:9d:
                    7f:be:0d:83:13:4a:f4:d4:9a:09:2d:16:a6:12:44:
                    69:4b:67:91:c2:77:e1:6a:04:51:d1:11:6a:8f:00:
                    f6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:65:FB:AF:86:FD:C0:38:7E:34:29:D2:2A:DA:F5:CC:95:6C:B9:2E
            X509v3 Authority Key Identifier:
                keyid:13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:af:57:23:5b:7f:62:7c:65:2c:d2:97:e8:0b:4a:69:50:46:
         d9:b7:b6:9a:5b:c1:49:3a:cd:e2:4c:eb:30:85:6d:52:c9:86:
         cc:b0:09:54:d5:51:8a:cf:d5:b7:0e:85:c5:47:bd:b6:ff:f6:
         13:55:ae:6c:1f:e1:cf:d6:16:1e:e6:be:e9:72:b7:35:42:98:
         c5:83:70:5a:a0:cc:c1:2f:6d:bf:15:e7:cf:d6:fe:39:89:7c:
         b1:58:e0:6d:7f:3e:cc:cf:8d:77:bc:6d:c9:a3:46:af:06:a5:
         66:fa:45:0d:ea:70:f2:62:fa:f3:e8:f9:70:93:ab:f4:e4:e5:
         5a:07:64:7f:b1:fa:4f:94:3a:f1:49:69:f5:03:50:88:48:1c:
         45:df:a1:1b:7c:8c:e8:4b:ac:9f:9b:2c:1a:ba:a8:68:ad:05:
         b3:86:10:7d:12:4a:a8:b8:48:f4:f6:50:cb:2a:83:2b:d5:0a:
         62:ac:28:50:4f:99:35:11:df:27:83:ee:47:a9:ca:b2:52:26:
         bb:50:dd:51:00:13:cd:3e:48:a7:f0:6e:7f:42:f7:0c:18:ca:
         f0:58:cc:f0:7d:e8:20:c7:42:2a:75:6e:ae:d3:ff:9a:d5:fb:
         33:75:f7:50:f7:05:d8:63:07:5c:14:9e:de:fe:4b:ec:dc:90:
         80:df:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----