Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          b/qKGmg7cWHYBDqhT+xspK/b1RJ35ImE/2gQnXTYAiQ=
Subject key identifier:   F4:4F:30:B6:E1:7E:E7:75:83:F5:60:B6:AC:42:F0:89:A7:F0:D6:B1
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0AD9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0AD8
Signing time:             Mon 02 Nov 2026 01:25:14 +0000
Manifest this update:     Mon 02 Nov 2026 01:25:13 +0000
Manifest next update:     Wed 04 Nov 2026 01:25:13 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 2Ixe1RJ38iP6W3jF7263FopV23ZbXYnFSTO7gvdhoWc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 01:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Nov  2 01:25:13 2026 GMT
            Not After : Nov  4 01:25:13 2026 GMT
        Subject: CN=6ae7e67a-cb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:cd:68:38:a8:99:ab:25:e2:4b:86:1c:35:
                    7a:fb:38:df:37:18:26:76:ea:f8:41:99:23:b7:b3:
                    4c:88:85:db:3b:e5:0e:a1:f3:1d:2b:88:7c:51:ca:
                    da:45:ab:25:55:be:92:ab:30:c3:d5:d9:7d:7b:8d:
                    5b:77:eb:6a:07:c0:95:2d:d1:64:32:55:fc:1b:6d:
                    69:3c:4b:49:30:23:cf:78:1f:be:df:0b:89:e7:1b:
                    de:ed:c0:2a:e2:09:6b:8b:d2:e9:1d:d9:f6:14:45:
                    7e:11:b6:b0:b0:96:ec:8a:2c:4a:ca:9b:53:b1:25:
                    a8:4c:6b:0f:6e:41:df:b7:29:4f:60:5b:6a:d1:27:
                    f2:fa:a8:41:98:4a:47:7f:c1:82:94:b9:f7:54:93:
                    3b:ff:fc:57:5f:cc:f6:9f:41:b8:b4:10:b2:c2:43:
                    db:d6:53:66:cc:4e:e3:fb:ed:75:7c:93:85:a5:be:
                    d2:b9:ec:f4:b6:35:70:4c:2b:89:9c:d9:68:54:ff:
                    a7:fb:d8:a6:ea:84:f9:6d:ba:b0:98:8d:0e:98:80:
                    b4:b7:26:46:a0:8b:d9:b2:91:12:be:12:f8:1c:90:
                    22:90:a1:03:30:09:57:2b:65:f0:35:78:40:31:03:
                    db:6e:9e:3a:a1:40:99:41:10:c4:5a:f8:8a:df:b8:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4F:30:B6:E1:7E:E7:75:83:F5:60:B6:AC:42:F0:89:A7:F0:D6:B1
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:6d:7a:cb:59:16:19:5a:52:fc:80:bb:2e:2a:f9:f0:bd:
         99:53:3f:fa:5c:10:16:d7:72:41:14:ab:95:ec:a8:8e:32:4c:
         f0:64:ae:cb:2d:d4:18:46:c2:bb:89:fa:12:39:e2:a7:5d:cc:
         a2:e4:46:dc:14:5c:75:90:36:3e:68:25:0c:35:db:56:39:5c:
         14:17:96:6f:69:c2:f9:42:59:2a:4a:45:dd:72:ba:f8:00:75:
         7f:24:02:d0:3b:ec:d5:e6:00:33:33:e1:fd:fc:5a:bf:8d:66:
         b1:4e:99:c2:64:a2:27:df:77:61:cb:d0:ed:7c:c5:90:7a:17:
         27:56:14:91:4c:00:61:cd:18:bd:f4:a2:1c:b7:5b:6a:8e:45:
         45:e7:c4:e7:2c:2e:ee:7f:ab:e7:0d:be:7c:14:cd:58:69:8a:
         01:bd:69:f6:30:ae:00:68:98:b2:0c:cc:c2:fd:a0:9d:2d:75:
         96:0d:13:1c:65:85:ad:53:3c:01:7e:dd:42:25:e8:ef:d0:79:
         15:21:8c:3b:89:a7:bf:b2:a6:1a:e4:82:77:48:f8:3f:7d:78:
         b7:3b:54:b4:3e:81:bc:8b:b1:9c:31:fd:95:ca:fe:31:e8:db:
         36:1a:39:34:e3:28:68:ef:80:ea:d2:69:c9:0d:a9:ff:e3:15:
         70:6a:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----