Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
File:                     tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft (raw, json)
Hash identifier:          kF5BrcpAwM0KTwNx0CYkeJjA0X5kqoqKTiS2hn1mePc=
Subject key identifier:   2D:D7:DE:1F:22:A7:4B:71:71:BE:AD:5D:09:C1:FD:34:CA:E9:39:C9
Authority key identifier: B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
Certificate issuer:       /CN=F361A501AR/serialNumber=B600796DC250C874AC571D323D014B8876243C5E
Certificate serial:       049F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
Manifest number:          049F
Signing time:             Sun 23 Aug 2026 03:34:16 +0000
Manifest this update:     Sun 23 Aug 2026 03:34:15 +0000
Manifest next update:     Tue 25 Aug 2026 03:34:15 +0000
Files and hashes:         1: tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl (hash: 4x2hPedywGEEvvmPR7ZuE7ykQeV6bzvLR/TS5RxZx54=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                          rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Aug 2026 03:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A501AR, serialNumber=B600796DC250C874AC571D323D014B8876243C5E
        Validity
            Not Before: Aug 23 03:34:15 2026 GMT
            Not After : Aug 25 03:34:15 2026 GMT
        Subject: CN=6a8a6a38-e3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:2a:1d:07:93:c8:cf:ef:d0:bb:15:b4:be:
                    11:63:f2:a4:db:fb:63:d0:e3:38:be:85:cb:6a:32:
                    5d:0b:5a:3a:7d:94:80:6f:8b:61:9d:eb:7f:bc:20:
                    00:ec:84:1a:c2:55:16:c8:6f:11:56:2b:b9:66:15:
                    3a:b3:0d:34:42:ce:b7:67:ea:04:d5:38:44:79:13:
                    04:1b:fc:be:c4:6d:0a:5c:cb:dd:2a:64:5c:b2:00:
                    9d:98:6c:1e:cc:46:5f:20:ed:a2:e2:ca:8b:d4:b4:
                    b1:a0:44:99:45:4e:06:d2:ee:fa:5c:1e:f6:59:58:
                    f9:14:75:2b:a2:8b:32:75:79:89:fd:68:a7:6d:a9:
                    a7:4f:48:14:5c:0d:77:76:56:85:87:65:6e:97:54:
                    11:21:52:a9:98:dc:cb:6f:96:e6:17:df:0a:39:14:
                    72:94:33:1b:c5:24:43:02:11:77:b7:17:95:06:14:
                    4d:1a:86:95:df:10:1e:80:6d:c9:8b:4f:15:62:be:
                    bb:87:29:a1:c0:9e:6d:23:1e:68:b9:ec:f6:67:39:
                    c4:8e:a7:58:e3:84:f0:2b:ab:a7:c1:2b:33:77:74:
                    2d:f8:10:f0:7b:73:02:1b:69:5a:99:01:4a:48:96:
                    03:5f:38:17:b4:71:07:4b:1f:bf:44:56:b8:8a:81:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D7:DE:1F:22:A7:4B:71:71:BE:AD:5D:09:C1:FD:34:CA:E9:39:C9
            X509v3 Authority Key Identifier:
                keyid:B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:42:7f:8e:04:c7:0e:2a:83:58:39:b0:9c:82:ad:c6:a4:2e:
         8b:b1:da:3e:15:d8:95:93:b1:f9:c0:e6:f4:2a:91:7e:0e:b6:
         1b:46:c2:f5:d9:ab:9f:f8:6c:88:15:6d:5e:6b:e7:5c:2b:94:
         92:a2:ea:80:08:cf:09:f0:d4:20:a8:5e:63:6a:44:3c:a5:9e:
         ac:99:50:ee:a4:ce:92:a3:9a:a2:05:2a:ef:9d:c5:71:97:15:
         e6:fd:30:69:e6:3b:f3:78:39:16:e5:cc:51:8c:04:0c:ae:81:
         12:c1:af:01:2d:76:40:b0:d4:2e:81:d7:68:ec:cd:e4:b4:bd:
         75:6e:9a:9f:43:9c:58:52:63:42:f1:91:15:03:41:9a:23:2b:
         8b:77:63:a9:13:e4:a6:43:17:10:ff:23:a9:8c:34:ec:87:de:
         4a:53:bc:79:29:45:10:8d:1e:07:04:da:4c:9a:13:f3:40:b1:
         ea:d9:d7:38:b3:c7:5a:92:15:86:ff:70:9a:46:ec:51:31:59:
         05:04:62:c4:12:b8:92:d0:46:1d:4e:5e:82:e1:7a:49:13:9a:
         fa:f2:e2:c6:fe:83:57:6f:cb:c2:47:98:8e:58:18:78:0c:74:
         ef:9e:8a:08:4b:d7:05:18:cf:68:aa:ad:14:01:dc:94:e0:1a:
         05:4d:e0:b6
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUE1MDFBUjExMC8GA1UEBRMoQjYwMDc5NkRDMjUwQzg3NEFDNTcxRDMyM0QwMTRC
ODg3NjI0M0M1RTAeFw0yNjA4MjMwMzM0MTVaFw0yNjA4MjUwMzM0MTVaMBgxFjAU
BgNVBAMTDTZhOGE2YTM4LWUzYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZayodB5PIz+/QuxW0vhFj8qTb+2PQ4zi+hctqMl0LWjp9lIBvi2Gd63+8
IADshBrCVRbIbxFWK7lmFTqzDTRCzrdn6gTVOER5EwQb/L7EbQpcy90qZFyyAJ2Y
bB7MRl8g7aLiyovUtLGgRJlFTgbS7vpcHvZZWPkUdSuiizJ1eYn9aKdtqadPSBRc
DXd2VoWHZW6XVBEhUqmY3MtvluYX3wo5FHKUMxvFJEMCEXe3F5UGFE0ahpXfEB6A
bcmLTxVivruHKaHAnm0jHmi57PZnOcSOp1jjhPArq6fBKzN3dC34EPB7cwIbaVqZ
AUpIlgNfOBe0cQdLH79EVriKgUJRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQULdfe
HyKnS3Fxvq1dCcH9NMrpOckwHwYDVR0jBBgwFoAUtgB5bcJQyHSsVx0yPQFLiHYk
PF4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFBNTAxLzg3OTdEMTlBMTNGRDExRUU5NEMzREIyNDRBRDlFNkZDL3RnQjVi
Y0pReUhTc1Z4MHlQUUZMaUhZa1BGNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3RnQjViY0pReUhTc1Z4MHlQUUZMaUhZa1BGNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MUE1MDEvODc5N0QxOUExM0ZEMTFFRTk0QzNEQjI0NEFEOUU2
RkMvdGdCNWJjSlF5SFNzVngweVBRRkxpSFlrUEY0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmQn+OBMcOKoNYObCcgq3GpC6Lsdo+FdiV
k7H5wOb0KpF+DrYbRsL12auf+GyIFW1ea+dcK5SSouqACM8J8NQgqF5jakQ8pZ6s
mVDupM6So5qiBSrvncVxlxXm/TBp5jvzeDkW5cxRjAQMroESwa8BLXZAsNQugddo
7M3ktL11bpqfQ5xYUmNC8ZEVA0GaIyuLd2OpE+SmQxcQ/yOpjDTsh95KU7x5KUUQ
jR4HBNpMmhPzQLHq2dc4s8dakhWG/3CaRuxRMVkFBGLEEriS0EYdTl6C4XpJE5r6
8uLG/oNXb8vCR5iOWBh4DHTvnooIS9cFGM9oqq0UAdyU4BoFTeC2
-----END CERTIFICATE-----