Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          8GJQ4Y7p2i0AC4Q2QYKkhEsGdhxi5+dZvNyZHRiQ/A8=
Subject key identifier:   01:4D:6C:5A:C9:14:93:89:61:4B:AE:F5:72:74:CA:39:BA:E6:8B:DF
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       1034
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          1034
Signing time:             Tue 03 Nov 2026 00:57:04 +0000
Manifest this update:     Tue 03 Nov 2026 00:57:03 +0000
Manifest next update:     Thu 05 Nov 2026 00:57:03 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: 3F/i5AGYTp5+pJIVH0q0ZZhFtDYwFjM9nGsVBrcVbpY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4148 (0x1034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Nov  3 00:57:03 2026 GMT
            Not After : Nov  5 00:57:03 2026 GMT
        Subject: CN=6ae93160-1219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:0e:46:bf:38:76:9c:76:04:d3:ff:85:97:
                    3a:7b:dd:eb:f9:c7:96:6e:0f:e5:e5:cd:cc:7b:57:
                    6f:bf:ac:b4:e3:f8:5e:60:4e:d8:b2:cd:52:75:8f:
                    c3:d4:e2:a1:62:56:2c:a4:ad:20:53:56:4a:ba:fd:
                    03:84:b7:3f:e5:c9:4a:80:5b:84:9c:d2:a2:76:f4:
                    fb:c8:5d:e9:2c:2b:ae:8a:b6:72:3c:8c:c2:f7:8a:
                    4f:5c:a4:7d:59:d8:c4:1b:b9:b5:fd:c2:4a:52:86:
                    31:5b:4d:76:3c:5f:0f:85:d9:d7:03:fd:db:b6:c0:
                    eb:d6:79:62:68:c8:cb:55:de:6a:47:64:d1:88:23:
                    9f:3b:6e:bb:42:37:28:9f:97:ac:1d:42:71:6d:a2:
                    9e:48:dc:99:42:4d:71:2d:ea:0c:96:d4:a4:04:d4:
                    b7:eb:b6:90:9e:76:d1:c6:1b:23:7d:df:7c:cc:fd:
                    3e:4b:50:7c:b4:f5:48:08:e3:e8:b6:c9:4b:42:53:
                    95:45:ba:3e:2a:ee:8c:6d:df:9d:d3:97:e2:ed:46:
                    8f:0c:d2:8d:cf:d7:9f:8f:1f:2a:0f:24:46:fc:cc:
                    a8:c4:02:99:34:67:20:30:5a:1e:86:4c:c1:0e:30:
                    07:b8:f1:3f:75:df:03:69:82:69:58:d9:fd:33:cf:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:6C:5A:C9:14:93:89:61:4B:AE:F5:72:74:CA:39:BA:E6:8B:DF
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:6e:73:f1:90:56:93:3f:0f:4b:22:23:0d:66:b1:14:7a:7c:
         ae:fc:a9:ec:51:8c:f8:75:0c:18:70:97:0b:54:e0:e1:e2:70:
         d3:9d:7b:25:aa:fb:11:04:0f:de:3a:45:d9:c1:10:1e:36:0f:
         10:86:3c:e1:29:0f:40:49:4f:4d:22:b7:03:27:df:5e:ba:ff:
         ed:3a:34:16:de:9e:24:12:a1:3c:84:56:f5:e4:75:10:57:79:
         f1:f6:25:96:90:ba:c3:c1:22:0c:b0:48:d6:d7:cf:ef:fa:8e:
         86:8e:88:df:cb:cf:dd:55:1c:3a:47:bc:1d:79:71:4d:62:ff:
         4b:95:a4:dd:ae:b7:1b:29:ae:d4:33:27:8f:cd:b2:49:1f:32:
         b9:dc:da:94:6e:fb:79:32:5c:1b:4d:96:01:61:97:52:48:65:
         68:53:b7:1d:ec:f4:24:17:88:29:58:8f:23:f4:3c:ca:72:5b:
         d0:26:f8:54:a3:bb:a0:38:d5:5a:d9:12:42:4c:79:9b:f0:1e:
         3b:43:52:60:9c:cf:8d:25:2b:e8:07:02:1d:8b:43:b4:2b:20:
         0c:03:b5:2f:3b:23:27:52:f9:73:9d:50:df:4d:c1:99:70:c1:
         8a:cc:6c:7d:83:41:f7:2f:dc:f3:6c:a5:00:2e:cf:d5:a2:35:
         a1:bd:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----