Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          SG7MrzOKO762D+40TwNl5/KKF0d6NZj23jnNMc5JPhw=
Subject key identifier:   1D:74:89:4A:53:B8:B3:7B:BD:8A:D4:C0:C6:90:65:5B:02:D4:E5:5D
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       038D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          038C
Signing time:             Mon 02 Nov 2026 04:12:13 +0000
Manifest this update:     Mon 02 Nov 2026 04:12:12 +0000
Manifest next update:     Wed 04 Nov 2026 04:12:12 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: IITDI9YM2aMw6UGBebtPgwCCVulvXYIi+rAf0BaMftw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Nov  2 04:12:12 2026 GMT
            Not After : Nov  4 04:12:12 2026 GMT
        Subject: CN=6ae80d9c-504e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:9d:46:68:90:aa:e5:ee:1b:4c:e9:da:92:
                    42:e8:20:36:db:bc:cb:20:33:d4:f4:52:54:6f:5e:
                    5a:34:10:ca:6f:ee:25:a5:82:a2:d6:ed:2b:1d:3c:
                    c2:bb:c4:16:e8:ee:87:6a:47:16:49:8f:64:97:15:
                    32:35:e0:79:96:8e:58:56:fb:c9:03:a7:18:78:63:
                    df:8f:49:d0:8d:8f:70:8e:cf:04:1a:da:d2:48:6f:
                    5b:11:7c:b9:9f:f2:7f:98:1e:58:a6:83:7a:c6:e7:
                    8c:a7:89:79:10:6b:08:b1:30:6d:93:36:61:1d:51:
                    71:dd:5d:7a:9f:3a:65:f0:af:df:ac:f3:84:25:74:
                    68:0e:05:ea:22:b1:33:43:d6:0c:3a:41:d9:c4:00:
                    b2:f9:db:e5:a3:68:5c:7e:b4:56:45:d1:2a:02:26:
                    05:7f:4d:29:97:18:34:38:1a:4a:1b:14:07:e6:fd:
                    28:9d:71:13:38:f2:08:dc:45:9c:2e:a7:74:36:df:
                    98:a9:ca:9b:95:38:36:18:f9:18:ef:b1:e4:cc:2e:
                    80:80:42:3a:f1:26:3f:f5:38:76:ca:46:00:61:da:
                    d3:10:19:06:c3:0a:95:87:7c:7b:13:13:ad:fa:c7:
                    13:12:21:4e:a2:c9:69:4a:bd:a8:23:da:55:1e:36:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:74:89:4A:53:B8:B3:7B:BD:8A:D4:C0:C6:90:65:5B:02:D4:E5:5D
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:77:c7:78:a4:93:42:32:e0:e2:94:03:5c:91:b8:e9:28:a2:
         67:a4:e1:ca:04:44:a5:1c:12:cc:fe:ae:8f:aa:df:72:6c:6d:
         cf:0b:11:23:a1:99:cf:63:5f:94:67:1e:f3:ea:7c:24:37:07:
         f2:44:45:ee:fe:0d:6a:d6:2c:48:e6:66:e6:f5:6f:ad:0b:a5:
         34:18:ec:a9:11:b2:a7:2f:bc:69:cd:f1:08:62:90:7d:6f:13:
         1f:ec:9c:91:c0:f3:49:cf:83:39:41:f1:8f:38:e5:a9:e1:18:
         11:d2:49:18:16:c5:79:27:99:71:9a:b0:a4:3b:0a:18:1e:03:
         9c:6e:ae:d3:e9:25:f2:40:9a:fa:68:59:e9:08:bc:d1:b8:a8:
         5a:01:29:a7:93:09:cc:95:7f:80:9a:37:62:a2:4e:d6:89:70:
         53:46:e3:6c:49:72:2f:96:0d:3e:3d:af:06:cf:62:ea:02:a2:
         6d:93:50:f8:c6:53:02:cb:74:ae:84:06:20:e4:92:4b:2e:5c:
         d1:26:7e:3c:4c:38:d2:7b:a7:02:5d:51:f1:2a:f4:a8:0e:b2:
         2b:44:b8:ae:5f:4f:d3:5a:b4:de:00:ba:a7:e9:eb:a4:4b:74:
         f0:e8:42:34:c9:a2:8f:21:42:ae:77:12:2d:94:96:f1:69:b6:
         6a:b3:c9:ec
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA40wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzJCRjJBUjExMC8GA1UEBRMoMjIzNkZGQUI0Rjc4QTA3QTE5QjgyRThGREU2REMy
REIwNjRBREJCRjAeFw0yNjExMDIwNDEyMTJaFw0yNjExMDQwNDEyMTJaMBgxFjAU
BgNVBAMTDTZhZTgwZDljLTUwNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZd51GaJCq5e4bTOnakkLoIDbbvMsgM9T0UlRvXlo0EMpv7iWlgqLW7Ssd
PMK7xBbo7odqRxZJj2SXFTI14HmWjlhW+8kDpxh4Y9+PSdCNj3COzwQa2tJIb1sR
fLmf8n+YHlimg3rG54yniXkQawixMG2TNmEdUXHdXXqfOmXwr9+s84QldGgOBeoi
sTND1gw6QdnEALL52+WjaFx+tFZF0SoCJgV/TSmXGDQ4GkobFAfm/SidcRM48gjc
RZwup3Q235ipypuVODYY+RjvseTMLoCAQjrxJj/1OHbKRgBh2tMQGQbDCpWHfHsT
E636xxMSIU6iyWlKvagj2lUeNiXrAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUHXSJ
SlO4s3u9itTAxpBlWwLU5V0wHwYDVR0jBBgwFoAUIjb/q094oHoZuC6P3m3C2wZK
278wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyQkYyL0YxN0E0OThBMTlFQzExRUY5QzAyODkyQzAxNzAwMUIxL0lqYl9x
MDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0lqYl9xMDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzJCRjIvRjE3QTQ5OEExOUVDMTFFRjlDMDI4OTJDMDE3MDAx
QjEvSWpiX3EwOTRvSG9adUM2UDNtM0Myd1pLMjc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKd8d4pJNCMuDilANckbjpKKJnpOHKBESl
HBLM/q6Pqt9ybG3PCxEjoZnPY1+UZx7z6nwkNwfyREXu/g1q1ixI5mbm9W+tC6U0
GOypEbKnL7xpzfEIYpB9bxMf7JyRwPNJz4M5QfGPOOWp4RgR0kkYFsV5J5lxmrCk
OwoYHgOcbq7T6SXyQJr6aFnpCLzRuKhaASmnkwnMlX+Amjdiok7WiXBTRuNsSXIv
lg0+Pa8Gz2LqAqJtk1D4xlMCy3SuhAYg5JJLLlzRJn48TDjSe6cCXVHxKvSoDrIr
RLiuX0/TWrTeALqn6eukS3Tw6EI0yaKPIUKudxItlJbxabZqs8ns
-----END CERTIFICATE-----