Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          cFSTXUr6kwgrcRCa5fzSUNAZUvAFMBeDk7v3II/uvPE=
Subject key identifier:   CC:A1:3C:71:03:50:CB:DB:43:E1:4A:EC:71:2F:97:25:14:44:FE:4D
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       060B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          060A
Signing time:             Tue 03 Nov 2026 03:00:31 +0000
Manifest this update:     Tue 03 Nov 2026 03:00:30 +0000
Manifest next update:     Thu 05 Nov 2026 03:00:30 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: R6zV2g/aUhfFHCAbBDhK1/RGesdUjFB7Qvu8L0xoVIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Nov  3 03:00:30 2026 GMT
            Not After : Nov  5 03:00:30 2026 GMT
        Subject: CN=6ae94e4f-cb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:90:b6:8c:2b:32:15:7c:a9:f5:e0:e9:27:
                    b9:2f:09:c0:1e:c0:40:63:c3:1a:53:4f:dd:73:0b:
                    59:6a:78:ec:8f:a5:06:7c:b3:2a:af:81:8c:d4:bc:
                    f2:46:34:3b:5e:bf:31:12:95:53:57:e0:dc:a7:0e:
                    c7:87:3d:9f:39:7e:31:76:4d:8c:36:62:97:c8:78:
                    ea:5a:d6:7b:90:a7:73:62:ae:a6:df:89:f8:19:31:
                    0a:e6:c4:9b:5a:72:c6:aa:7f:dd:4c:8c:4b:7d:db:
                    8b:1c:f3:7b:13:41:94:94:79:68:9d:d9:80:83:cc:
                    81:5b:1e:23:ed:44:55:86:00:7f:e3:44:31:ed:7b:
                    1e:25:49:9e:27:db:a1:8a:5b:6f:c5:0d:49:d1:f5:
                    e9:ad:9e:16:44:59:36:eb:70:6f:84:2c:f6:0b:81:
                    d0:4b:e0:2d:d1:12:a6:3d:89:3f:ca:08:8f:0b:05:
                    8f:a2:e8:9b:55:51:1a:ee:4a:be:c2:43:9f:a7:2b:
                    2d:18:3b:53:4a:c5:96:78:41:6b:ad:ea:d0:da:09:
                    6d:4f:24:7d:ad:1f:0b:d4:ba:b8:26:11:4e:a9:eb:
                    7d:fb:6c:b3:3e:fc:26:58:84:e0:c8:90:ba:aa:b9:
                    0f:33:e3:20:c7:f2:b1:ad:e2:45:67:fe:84:f0:d7:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:3C:71:03:50:CB:DB:43:E1:4A:EC:71:2F:97:25:14:44:FE:4D
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:cf:63:71:7e:13:d1:6a:8f:7f:c1:ed:b4:e5:e4:1d:e8:
         b3:43:55:52:ce:c7:e7:e4:2a:e8:1b:04:11:5d:d2:a3:eb:74:
         ed:95:87:af:1b:b3:b7:7b:3b:4c:02:64:78:f0:45:4a:db:52:
         20:bd:63:5b:45:aa:b0:d5:52:35:52:79:8c:34:3f:01:67:3a:
         76:7a:43:b3:a9:5d:82:32:40:9d:26:ce:3a:ec:57:7b:e8:ea:
         67:7f:91:46:13:29:5a:80:b0:71:7f:a6:f6:7d:ce:6d:06:c1:
         50:76:73:de:2c:ae:89:a6:de:8b:43:98:72:35:29:1f:12:c9:
         df:16:16:b7:d8:21:28:9d:8b:74:be:09:11:c8:ae:65:d3:95:
         9b:29:82:5d:c6:2a:4f:2e:9e:2d:98:16:33:27:51:e8:b7:48:
         02:e0:f7:fd:87:93:59:4e:99:28:e7:0d:2a:d1:c7:1c:49:17:
         90:ed:88:65:ff:31:6b:21:a5:8f:43:b8:cc:43:ee:ff:ca:44:
         4f:41:5d:b7:a1:3f:be:b3:1d:58:9e:59:7f:14:4a:04:88:3a:
         1b:b0:d9:bc:55:82:29:1f:39:91:52:68:f3:57:fa:b6:ad:ec:
         c9:c1:57:8d:c1:7f:d4:63:bc:87:88:b3:ea:80:d6:ef:40:64:
         77:46:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----