Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
File:                     D-g4ATBnRIcNHQamDPfzuj5UJlI.mft (raw, json)
Hash identifier:          H/xN/Pa55Cd453nhqa8wDBpaD+KeW21Rr+bvBjvrvc4=
Subject key identifier:   FC:29:44:35:4E:50:C5:02:AA:30:43:E0:FD:55:CC:3E:BA:BB:02:A3
Authority key identifier: 0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52
Certificate issuer:       /CN=F362E39EAR/serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
Certificate serial:       0E8D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
Manifest number:          0E8A
Signing time:             Fri 11 Sep 2026 01:04:50 +0000
Manifest this update:     Fri 11 Sep 2026 01:04:50 +0000
Manifest next update:     Sun 13 Sep 2026 01:04:50 +0000
Files and hashes:         1: D-g4ATBnRIcNHQamDPfzuj5UJlI.crl (hash: h81FvEUGKKZLEOT7HfMYpiaIaPf3D/T2kUzz5vAr0cI=)
                          2: 85751D2246C411F0B35CB878DAE4EC9C.roa (hash: 8RnruMpMOyIroRB7WdabR+dI97SGVIprP/OPugvR+SU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                          rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3725 (0xe8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAR, serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
        Validity
            Not Before: Sep 11 01:04:50 2026 GMT
            Not After : Sep 13 01:04:50 2026 GMT
        Subject: CN=6aa353b2-539b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:18:0d:b4:46:32:e4:07:74:bc:85:dd:cc:
                    9b:98:66:13:72:9e:d0:48:de:26:f8:ac:ca:fc:8d:
                    3f:e3:04:9f:ab:67:39:34:3d:22:69:96:b7:e6:a3:
                    eb:d4:39:a2:1b:f3:94:4c:ef:83:50:ad:53:e1:f0:
                    5a:39:90:c7:62:92:9a:a5:0c:3b:e1:69:8f:ba:8d:
                    af:a6:42:ae:5f:1d:b0:da:1a:a6:5c:d1:02:7b:80:
                    36:94:88:92:33:f9:d4:d7:69:f2:b3:86:97:0f:66:
                    8d:ff:65:12:68:7c:48:8f:ba:ec:53:10:94:04:ca:
                    5d:cb:c0:a7:45:b5:f3:f8:fd:c3:c0:57:0b:b3:66:
                    b8:23:7a:d5:e4:21:9c:62:02:59:42:61:4c:6b:02:
                    c5:d8:c5:a3:9e:9b:d2:df:b6:1a:4c:15:40:f4:3d:
                    3b:fe:84:07:9e:35:a8:ba:cd:52:c5:09:2c:91:12:
                    36:cc:dd:44:f6:21:23:79:b8:9d:e0:ed:56:72:04:
                    a5:4a:fe:52:b0:54:e3:0c:81:dd:ee:62:50:9c:95:
                    5f:98:ad:64:71:dc:1b:a7:30:46:02:a0:a8:20:6b:
                    75:be:3a:0a:69:98:e0:8d:53:f3:20:e1:74:f2:ad:
                    f6:86:a3:94:5b:2c:c5:5f:22:ec:e3:3a:1f:68:3d:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:29:44:35:4E:50:C5:02:AA:30:43:E0:FD:55:CC:3E:BA:BB:02:A3
            X509v3 Authority Key Identifier:
                keyid:0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:e2:3f:ab:c2:14:ff:6c:e0:45:ec:d8:a6:c1:a4:94:6e:
         57:1b:69:01:4b:47:72:c5:00:81:f7:8d:6b:76:b9:36:02:55:
         42:92:87:15:46:6d:49:04:fd:96:19:dd:9e:77:5a:25:64:01:
         7c:95:28:bf:a2:6f:34:1b:df:f1:de:18:6b:01:d0:9d:b0:96:
         6c:9e:8e:18:56:30:78:bd:82:a7:09:ae:c8:66:ca:4d:c9:54:
         d6:1b:f3:b7:97:d1:b1:80:8c:97:07:48:3c:cf:ea:21:3d:f7:
         df:ed:16:24:86:ba:54:5a:4d:82:5b:d8:37:e0:8a:a4:50:84:
         e6:a0:cc:33:2d:80:c1:46:44:1e:48:cc:b9:1f:9a:7c:41:a7:
         67:48:13:8f:29:b2:f8:cd:51:d5:42:71:9a:96:df:a0:3c:be:
         2a:02:16:48:d8:22:ac:db:fd:6e:40:47:3a:87:fa:72:d3:9d:
         77:ca:18:7f:6a:25:53:a1:d2:4f:a2:d8:91:21:a7:91:f1:9e:
         c8:ed:4e:0e:2f:5a:83:ac:7b:a5:3d:3c:08:69:65:33:0c:2e:
         bb:b5:a6:42:87:5f:9d:52:a4:7a:9e:cb:f2:e5:14:19:19:c8:
         14:4b:15:db:e4:f8:03:0c:dc:a6:74:35:b2:76:18:f3:1c:92:
         8e:46:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----