Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          lbJ36YPJjuKmRQtISBejNBzXUFkQyWYiR+1MsQRCTNY=
Subject key identifier:   19:07:58:58:13:81:66:5B:63:FF:FC:2E:B8:13:28:BF:C7:72:A2:79
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       0991
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          098B
Signing time:             Mon 02 Nov 2026 01:48:03 +0000
Manifest this update:     Mon 02 Nov 2026 01:48:03 +0000
Manifest next update:     Wed 04 Nov 2026 01:48:03 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: w/HgyOjqWp0SHa8vd4HdP98hTuiBfVYPuS91hGd0HxU=)
                          2: 3227743CB1C911F1A1270FF8CE1D38B0.roa (hash: r/89Dv3rxjY+lpFgaaHLliiD4KSRvscX6Ur3brQazoU=)
                          3: 6B2A7E96B1C911F1BBB5E8F9CE1D38B0.roa (hash: 504qL5GyEaoh83h9hc4DJQ47h+WyjFImZ7MMTLGpgGU=)
                          4: ABF42C18B1C611F18C4EC1E9CE1D38B0.roa (hash: iU2xi7UbBCq0OoNFseYLUBG8sIO97iTHeSyuE9VjLFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2449 (0x991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Nov  2 01:48:03 2026 GMT
            Not After : Nov  4 01:48:03 2026 GMT
        Subject: CN=6ae7ebd3-4d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:e2:5c:f2:e0:4f:bc:4f:ab:b7:3a:fc:13:
                    fb:52:fb:41:dc:40:9e:56:52:03:7d:c7:79:35:86:
                    c5:b9:a6:1f:75:37:63:4a:8b:4e:57:6f:f1:11:52:
                    ca:e5:eb:f9:50:1d:9e:be:29:a2:92:a3:e4:f2:92:
                    b8:b4:a5:1d:66:57:70:7a:3e:05:31:8e:24:48:e7:
                    c0:7f:f3:39:d0:03:ac:2e:ec:45:34:53:5b:b0:dc:
                    a6:8b:00:e7:f3:99:99:c6:f8:fe:2d:95:0d:ab:e5:
                    1a:00:40:d3:41:7d:33:30:c3:a6:89:2c:ae:54:9d:
                    28:df:1f:00:c6:85:16:af:d0:82:c5:5f:52:66:8c:
                    b5:b4:b3:ed:da:90:6c:7c:48:06:46:c5:48:17:e3:
                    75:26:da:54:4c:36:d2:96:f3:ce:a0:d0:0d:f8:9d:
                    ed:66:9b:02:e3:e4:ec:11:ef:9e:07:4d:ac:b1:81:
                    d6:98:24:62:7a:ea:2c:85:c0:bf:9a:79:88:56:e3:
                    2e:d4:f4:71:7c:94:b0:c0:81:1b:f3:b5:ad:a0:2f:
                    12:6b:a2:7d:bd:d0:29:8b:0f:5f:60:0a:92:a2:37:
                    c7:b6:f8:77:72:80:b8:b7:b1:6f:0d:e1:08:6f:c9:
                    eb:bc:68:c2:5f:5a:c6:1a:3d:bb:d7:98:f3:e5:f5:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:07:58:58:13:81:66:5B:63:FF:FC:2E:B8:13:28:BF:C7:72:A2:79
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:59:c9:6e:6d:7a:8b:86:77:c8:90:96:10:48:60:1f:cb:6f:
         a1:54:b1:0b:8f:85:9c:97:ac:2b:2d:19:f1:90:1b:f4:91:1e:
         98:36:2d:ac:3f:2b:e1:1e:70:2c:93:d2:96:16:47:71:a5:59:
         7f:9a:9d:97:ef:b0:71:90:44:ac:bd:42:7f:1d:6e:0d:a6:d8:
         80:f9:56:e9:8a:32:41:03:89:97:0a:95:0d:7e:51:40:8b:5d:
         17:e0:f6:ea:07:57:e9:e9:e1:fa:65:df:0a:c0:29:df:90:95:
         31:e1:26:e4:80:84:bd:e6:0a:c5:97:ba:15:91:58:fc:32:1a:
         5b:65:43:a7:49:7d:83:86:3d:e4:a5:5b:fd:2e:31:14:e4:b6:
         19:19:53:fe:ac:75:c3:40:a7:62:5d:e6:a5:6e:f4:14:81:a0:
         a9:3e:fd:25:d2:da:02:80:37:b1:86:af:4a:61:07:e4:12:fd:
         a1:b6:f8:fc:50:56:f4:0f:a4:be:eb:6f:4f:12:f3:8c:73:d8:
         aa:dc:0c:72:d4:44:97:63:66:72:3c:0d:75:31:b7:48:35:86:
         06:dc:3c:a1:9c:a9:04:14:39:81:1e:c7:81:2f:b0:e9:d1:4b:
         0d:68:28:52:51:c6:9d:04:e2:1f:33:db:df:bc:4b:6d:14:31:
         6b:8e:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----