Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          AQYKKYAbiPrWujeNZPdD5u7QU3fNF0kRPs2DTnv8CjM=
Subject key identifier:   3B:B2:08:E8:90:95:71:01:F8:26:1B:3C:B0:F1:58:03:BA:60:10:08
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       0A8F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          0A87
Signing time:             Thu 06 Aug 2026 01:23:47 +0000
Manifest this update:     Thu 06 Aug 2026 01:23:47 +0000
Manifest next update:     Sat 08 Aug 2026 01:23:47 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: e727mFZR7WH1QCvFVd51+JZOIS0lPPsDHZExfzfTb04=)
                          2: B2B71F48BBB711F0A55267C8DAE4EC9C.roa (hash: kChp13s64I7ds7m3cFb8J8f9uZBGgnrFBEhdaD7OJR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: Aug  6 01:23:47 2026 GMT
            Not After : Aug  8 01:23:47 2026 GMT
        Subject: CN=6a73e223-4752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:b5:d6:9f:0b:02:e2:0d:08:16:58:63:50:
                    f5:94:f7:fe:9d:88:95:17:73:49:fb:14:9d:70:2f:
                    02:9a:a2:ca:08:81:fe:f8:4f:f3:88:f8:ee:a2:7b:
                    63:49:7f:54:48:36:47:c2:93:ad:de:a5:25:ba:74:
                    0f:1c:53:35:a1:18:84:ab:b3:4d:11:43:4e:6b:a5:
                    8c:bf:99:cd:ac:dd:93:f2:ba:bb:89:34:55:a9:0b:
                    92:66:ba:de:39:4f:8b:ef:f8:45:4a:2f:53:22:98:
                    29:e7:2f:c0:cc:54:fa:ab:b3:c2:d8:5a:6e:6d:4e:
                    d0:d3:4b:6f:f0:eb:2c:61:07:44:bb:e6:71:84:87:
                    3e:51:6b:bb:25:0c:d4:d8:43:02:b9:50:50:81:d4:
                    3d:19:1d:2f:6a:50:94:80:c9:87:ee:0d:89:22:0f:
                    5e:82:22:25:fe:46:6a:aa:98:32:41:01:72:25:e7:
                    a6:e3:d9:cb:de:d7:65:76:87:80:e4:f2:3f:a5:bb:
                    3c:64:15:db:d2:7f:89:2e:8c:5e:dc:80:99:89:ee:
                    5f:f6:73:68:a4:9e:1a:d3:48:5b:f3:9c:08:a1:7e:
                    56:31:e0:1a:58:08:a4:00:c4:aa:32:67:64:57:46:
                    da:69:d3:13:30:de:8d:ad:ff:fe:77:9b:2f:ba:7d:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:08:E8:90:95:71:01:F8:26:1B:3C:B0:F1:58:03:BA:60:10:08
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ad:2c:2f:ad:ca:cb:64:7d:bb:df:2d:77:70:10:0f:8a:4c:
         95:de:10:01:62:0c:cc:5d:fd:cd:49:a6:3b:bf:76:70:39:b0:
         54:c3:b0:65:e3:9e:d6:eb:11:88:8c:ec:0d:15:00:f1:93:e3:
         78:71:6e:97:3a:7b:54:f7:07:74:ba:6b:15:d2:01:c6:0d:14:
         3c:20:85:98:92:8d:9a:71:d1:b5:95:0c:a7:fb:82:dc:70:52:
         44:58:95:55:ab:e5:37:63:76:60:d2:b0:c0:dd:56:ef:d9:93:
         48:f5:3c:14:a3:a6:7d:e0:83:75:ed:52:28:07:f1:04:75:18:
         91:b8:26:91:df:75:a0:28:b4:69:16:65:d3:4d:7b:dc:a2:b0:
         cf:aa:96:c4:e6:c6:4a:ac:29:09:bf:e9:d3:6e:61:d5:3c:65:
         16:c9:ec:8d:1d:d0:d0:10:3e:4c:2f:ed:f7:00:4d:32:cd:df:
         26:29:fd:10:04:fc:a3:f6:24:4a:e9:f3:d8:77:6b:37:96:8a:
         f1:72:47:02:89:e3:52:3d:34:81:d0:e2:57:ae:fe:72:5e:6d:
         6c:00:3d:4e:ce:ed:7f:81:da:0e:c7:52:2e:9d:e3:f9:97:6a:
         b6:24:4d:c9:c3:ee:9f:19:76:20:75:29:eb:90:69:8e:35:73:
         90:4c:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:52:05 2026 by rpki-client