Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File:                     rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier:          OQrzTuoRl+3bJSo0znq+qaZfrMq7v7j9m8e5dt5N188=
Subject key identifier:   0F:2D:E4:3E:FE:99:25:34:61:11:CE:2F:83:4D:B8:13:D4:4A:7F:F0
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer:       /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial:       04E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number:          04D5
Signing time:             Thu 17 Sep 2026 03:27:49 +0000
Manifest this update:     Thu 17 Sep 2026 03:27:48 +0000
Manifest next update:     Sat 19 Sep 2026 03:27:48 +0000
Files and hashes:         1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: mbVpUADlt4+PymK/+p3tDOeimosuEZsZ47vRORT8/gQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                          rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
        Validity
            Not Before: Sep 17 03:27:48 2026 GMT
            Not After : Sep 19 03:27:48 2026 GMT
        Subject: CN=6aab5e35-d8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:dd:ae:d7:21:c4:1c:24:69:0c:74:ee:e5:
                    ec:d1:b6:93:74:01:ca:ca:0c:c2:62:0a:da:98:17:
                    a0:96:ce:72:71:68:ec:f0:8a:f7:fd:37:7c:15:79:
                    e3:ff:e2:7d:20:e8:e0:93:3f:67:50:76:16:b8:57:
                    ec:49:05:0e:ed:6f:e4:43:40:b0:5c:9f:83:e4:d6:
                    7e:42:d4:41:fd:c5:ae:c7:ce:31:fd:3c:e1:08:55:
                    e6:15:23:ee:e2:ac:c6:1f:03:14:62:4b:8d:4c:99:
                    7e:46:ef:60:57:10:22:5c:5b:6d:9b:29:39:03:c7:
                    b4:0f:8f:09:6e:d4:bc:32:04:71:ce:78:43:2d:c8:
                    2f:07:e2:9f:27:6d:f3:44:56:bc:3e:29:bb:fa:ac:
                    1e:ba:69:39:46:7e:ba:48:e8:cf:c1:fc:4c:ff:4a:
                    f6:e0:f0:d1:64:87:d9:31:7c:3d:0c:ff:af:e1:bb:
                    65:ff:a8:e1:4a:64:8e:d5:e2:5e:60:ed:2b:19:72:
                    81:1a:62:9b:9c:43:4a:70:fe:24:e7:61:b0:e5:eb:
                    56:1e:93:5c:3f:78:92:c6:14:f9:5c:03:2d:e3:fe:
                    31:69:ae:be:04:d5:5d:79:89:14:8f:1a:13:cb:86:
                    18:11:e8:fe:8b:f5:4e:8b:1e:df:3d:79:4f:c5:68:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2D:E4:3E:FE:99:25:34:61:11:CE:2F:83:4D:B8:13:D4:4A:7F:F0
            X509v3 Authority Key Identifier:
                keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:8e:3e:53:dc:b8:e7:92:e1:34:b0:b8:1e:4e:a7:d2:85:
         d8:c8:16:dc:f6:3d:46:b5:e9:2f:95:08:7f:34:47:40:d1:8b:
         3e:ce:44:8f:05:99:5c:93:d2:0f:8c:c9:44:5a:41:b5:f8:50:
         5d:96:86:9f:3d:2b:76:31:7c:61:8d:00:1a:b9:fa:c4:ce:bc:
         56:c3:4d:b7:c8:e3:53:05:af:26:f8:32:63:66:df:53:2f:98:
         db:ef:b4:0b:7c:33:2b:c8:4f:68:7b:ee:4e:9a:e8:60:f0:e3:
         0a:ca:dc:99:4a:4c:ef:5f:23:06:21:01:3c:89:1b:3b:4c:df:
         c6:ef:68:43:ec:76:f8:9e:62:89:ad:c9:aa:a1:5a:bf:42:06:
         dd:1b:60:5c:e5:cb:89:d6:38:03:36:1a:4b:dc:fc:8d:76:d0:
         75:53:60:61:3c:3a:66:3c:4e:fe:a2:9f:8c:ac:e1:c6:21:c0:
         5f:20:96:6e:20:a4:3f:10:42:7a:1a:3c:36:89:aa:24:b4:00:
         af:51:50:83:da:83:1f:9f:f8:8e:f4:49:6f:29:e8:3b:0d:0b:
         3c:5e:51:74:2b:40:b7:d4:4a:68:46:46:98:b4:43:21:e4:65:
         26:7e:dd:a3:15:e6:1c:4e:08:2a:1e:64:68:5f:ea:d4:79:6c:
         ad:3d:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----