Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File:                     XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier:          y0l3JhOFFKYb3N5YmRnFMw6WCdfquaIEZfXnYl7ZD0M=
Subject key identifier:   EA:B9:4E:85:4A:13:77:D1:62:8E:D5:8C:70:63:22:7E:59:D0:E6:FC
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer:       /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial:       0578
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number:          0577
Signing time:             Mon 02 Nov 2026 03:14:25 +0000
Manifest this update:     Mon 02 Nov 2026 03:14:24 +0000
Manifest next update:     Wed 04 Nov 2026 03:14:24 +0000
Files and hashes:         1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: LcdAgqOGLW12P+lkJN39hZ3tfG+YW0N6vtSnsdMEmYY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                          rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AR, serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
        Validity
            Not Before: Nov  2 03:14:24 2026 GMT
            Not After : Nov  4 03:14:24 2026 GMT
        Subject: CN=6ae80011-f820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:b0:0f:b9:a8:bb:51:85:e5:ed:57:5d:fe:
                    fd:0c:5c:cb:4c:e2:89:e4:2e:f2:49:84:db:1f:6d:
                    8b:23:cb:22:ea:ca:b6:1b:a8:eb:7f:29:ac:87:bb:
                    45:10:a5:0f:5d:33:41:31:8f:99:65:c1:5d:f8:38:
                    4c:d8:0e:35:6b:4b:bd:4f:e4:c4:f4:67:cc:c2:1f:
                    65:61:f6:8b:ea:7c:c5:b2:56:2d:36:f3:d9:bf:e8:
                    88:ea:91:c8:35:06:a4:83:0e:9c:81:8f:1e:39:45:
                    10:6b:6c:b1:44:fe:02:e4:4d:f1:d1:af:b6:fe:c8:
                    85:f8:4c:ba:e7:67:1d:03:9f:e0:60:07:95:fd:71:
                    36:db:ad:7c:ab:5c:0d:35:44:d8:78:6a:4c:6d:b0:
                    fd:c9:61:66:8d:85:2b:ca:81:c1:06:c1:29:59:6d:
                    17:08:5a:02:0d:6c:ba:45:d1:d3:42:4c:0e:05:ff:
                    00:03:9c:3b:df:50:86:31:c5:98:f2:6b:71:65:5d:
                    02:37:87:50:61:57:01:7c:37:a3:94:99:4e:0f:94:
                    61:d0:b9:10:49:b9:a8:12:75:67:c4:03:47:58:9e:
                    d0:44:4f:2d:5b:e2:57:ad:57:18:a6:56:1b:af:4f:
                    91:1b:31:85:70:a6:30:fa:8a:ad:35:35:a0:09:0a:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:4E:85:4A:13:77:D1:62:8E:D5:8C:70:63:22:7E:59:D0:E6:FC
            X509v3 Authority Key Identifier:
                keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:93:90:96:4b:a1:05:55:ac:68:51:28:5c:f8:c7:ca:d7:
         e0:37:ee:59:3a:92:a9:2b:09:47:3e:07:43:0a:2e:cd:ce:62:
         a2:9a:72:57:da:b1:87:e3:7b:c8:bb:fe:67:b5:d5:f6:1d:06:
         9d:fc:23:9f:4f:1d:49:5b:7c:91:c8:9a:48:ca:4f:9e:e3:4f:
         6c:a9:7e:ef:ed:46:05:d5:7c:c3:86:3b:d6:3a:03:e4:04:72:
         57:04:7a:14:f5:6d:d4:2e:e4:cb:c2:fa:ea:66:bd:50:df:0b:
         1b:85:c5:66:b6:b0:8a:1e:42:80:16:bc:82:b7:ca:9a:80:d9:
         7c:86:68:2f:30:60:e9:8c:bc:7a:44:54:d8:92:06:b0:90:68:
         ed:20:5e:6f:09:3c:ad:70:be:71:d5:fb:27:54:a5:53:58:00:
         f4:67:3a:3b:fc:4c:e1:71:90:2e:c4:9c:0a:95:d7:12:d5:a5:
         c0:16:61:0d:c3:70:23:d0:51:71:4e:4c:0d:94:f8:8e:e5:41:
         c0:47:f9:e4:b2:73:8e:40:e2:b7:46:59:b3:eb:1c:1c:02:b5:
         06:50:57:26:37:9c:25:2e:13:fb:9c:c1:32:f1:42:a6:e0:f9:
         04:d2:49:d5:73:13:7b:d8:8b:c0:fb:27:bf:7f:f8:41:8b:b8:
         ed:e5:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----