Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          Zqr2P96MQB0pv31ggFOdBLQVrQbhrA9j5eIz1FZN6+Y=
Subject key identifier:   71:3E:17:84:30:A9:87:A8:36:CE:BC:40:0C:A5:85:CB:00:78:27:4E
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       0338
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          0337
Signing time:             Mon 02 Nov 2026 04:25:43 +0000
Manifest this update:     Mon 02 Nov 2026 04:25:42 +0000
Manifest next update:     Wed 04 Nov 2026 04:25:42 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: fYnhs3mOSCbpEYGFU1LuaGb0bpn5rfY6r53c+W9hRxc=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Nov  2 04:25:42 2026 GMT
            Not After : Nov  4 04:25:42 2026 GMT
        Subject: CN=6ae810c7-8848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:90:9e:bf:82:db:bf:53:ec:7a:78:59:3d:
                    20:c5:70:22:29:14:56:05:20:c2:ef:25:78:2b:ed:
                    54:03:41:70:0d:9b:a4:21:a1:8e:d4:b7:ac:5d:6b:
                    83:59:2c:ee:23:62:ca:b0:e4:62:a7:18:00:ff:7a:
                    92:ef:d2:59:57:90:23:6a:e8:b1:f9:02:c1:83:58:
                    4d:2d:d9:4c:d2:d4:0f:cf:9d:4e:e5:7c:3f:3b:e2:
                    f5:5c:66:d3:d6:a1:1b:e0:e3:55:b0:68:1d:26:b2:
                    85:32:1f:23:59:b5:1a:13:a7:20:70:83:f4:47:5c:
                    f1:ab:b1:af:ab:75:92:d1:d2:72:e9:bf:c8:22:b4:
                    65:66:1d:04:20:63:6a:4a:3e:03:be:78:f8:41:9c:
                    16:03:b9:e0:f9:56:56:03:b8:f1:83:4c:0e:74:c7:
                    9c:47:fc:33:d4:1f:c8:18:1c:59:95:b8:09:eb:d6:
                    6b:a9:1b:df:e1:f6:8f:e5:d5:e0:d6:da:9c:94:dc:
                    ba:47:1b:6c:74:68:6e:c5:bd:e9:62:c9:37:78:c9:
                    fa:65:1f:e0:2a:06:5d:9d:19:ba:a8:1d:7b:c3:0a:
                    05:0c:8e:47:c3:49:ce:94:0e:8f:27:de:fe:90:db:
                    8c:3b:0e:20:27:85:85:ee:fc:32:f4:07:8d:91:49:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:17:84:30:A9:87:A8:36:CE:BC:40:0C:A5:85:CB:00:78:27:4E
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a2:80:3c:83:1d:2d:01:e8:10:b1:88:eb:fa:e9:f5:b2:dc:
         71:e6:e6:ac:97:be:8b:93:c4:e9:fd:ee:3a:47:ac:7a:e7:40:
         b8:a7:bf:58:47:17:f3:a0:91:bb:65:33:40:c3:b1:fa:b3:58:
         50:40:71:1e:8e:b6:73:82:fa:99:72:c4:6b:d6:bf:37:7a:7c:
         e6:d8:11:4a:8d:65:c1:8e:a4:00:74:e1:2b:9c:fb:8d:96:b8:
         b5:a1:89:55:4d:dc:17:38:39:db:b7:a2:cd:0f:e5:d4:a5:15:
         bb:f6:8f:bc:39:44:7b:89:2d:41:01:3b:d1:a1:23:fd:a7:01:
         38:05:6b:69:c6:b6:8f:9b:32:21:80:62:fe:16:80:ef:13:b1:
         37:a9:0e:80:3a:35:0d:90:cc:0a:31:b0:07:f4:7c:ff:ee:1a:
         8a:15:80:bb:6c:73:2d:11:fb:db:83:86:ee:39:87:6b:1b:53:
         68:4f:82:4c:2d:4e:d3:bb:67:a2:2a:b0:63:7b:7a:f7:d3:6c:
         0e:c4:b0:47:56:2d:c1:dc:f4:43:16:cb:84:dc:7e:d6:53:a1:
         21:c7:41:75:53:f1:81:d7:91:be:46:3e:cd:40:bd:33:b9:d6:
         3c:53:68:29:e5:60:d9:8b:b1:25:e2:1a:40:6e:90:db:1c:59:
         60:29:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----