Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
File:                     9ghiikaC9VOASvOrLlihnDCordI.mft (raw, json)
Hash identifier:          4WoprD2TX2xHpXLzX+odIriH9EPsBqvmdO4upT1CtdM=
Subject key identifier:   BE:2D:54:BC:48:6B:91:C5:A7:27:09:F8:C4:54:8D:06:94:D3:B9:AF
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       02F5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
Manifest number:          02E8
Signing time:             Wed 26 Aug 2026 04:33:21 +0000
Manifest this update:     Wed 26 Aug 2026 04:33:20 +0000
Manifest next update:     Fri 28 Aug 2026 04:33:20 +0000
Files and hashes:         1: 9ghiikaC9VOASvOrLlihnDCordI.crl (hash: X8NlXd1ClDU9zBd2ELCOoLqh+CdPtnNLrSQ+WObhLTQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR, serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Aug 26 04:33:20 2026 GMT
            Not After : Aug 28 04:33:20 2026 GMT
        Subject: CN=6a8e6c91-d7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:5f:67:d4:17:cf:a9:15:60:81:91:e0:57:
                    bb:b2:9f:86:34:64:95:3c:8f:5d:d1:5b:f7:ab:7f:
                    8b:ef:77:8c:fd:1d:d3:71:c9:8e:3b:44:19:94:2d:
                    79:04:7c:b3:0b:bf:85:44:a3:e2:70:57:28:c4:f5:
                    e5:61:13:bc:8b:75:1f:d3:e1:98:bf:65:e4:b7:a6:
                    68:46:cd:0a:2f:aa:83:2b:7a:cb:eb:12:98:4d:2c:
                    a4:7e:2b:a6:c9:bf:8d:3a:88:97:d3:5e:35:e0:29:
                    f8:1c:61:60:76:18:5f:ff:3c:82:1e:08:36:04:fd:
                    b2:16:ca:66:19:54:9d:93:2b:6e:4a:d3:6a:d5:6a:
                    2c:bf:95:a4:a3:5d:18:71:92:7f:e0:61:98:0c:9b:
                    73:67:f7:81:f9:70:b6:b1:3a:44:d8:e3:d4:bf:a2:
                    38:c6:60:44:36:81:ca:b6:01:a9:15:b8:bd:6c:14:
                    02:da:84:14:12:c8:0c:7a:b4:51:23:8b:37:6f:65:
                    63:86:d3:c2:e1:82:dc:6e:1d:56:2a:48:7b:82:09:
                    a9:16:53:39:51:ea:e3:38:82:e0:27:35:12:7a:e5:
                    30:9f:6a:2f:5a:21:d0:6d:95:51:3d:54:d1:b3:44:
                    ee:d9:27:01:4e:ad:80:a6:f9:5d:88:76:7e:fe:1a:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2D:54:BC:48:6B:91:C5:A7:27:09:F8:C4:54:8D:06:94:D3:B9:AF
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:44:60:a2:9d:75:c2:36:1f:a3:c8:d0:eb:dd:c4:78:90:2c:
         f0:2a:ed:13:c2:b1:12:34:1e:25:d4:9a:27:11:6f:fe:c5:24:
         27:85:91:c4:30:85:99:50:56:ca:3b:02:60:be:ee:28:f7:00:
         85:03:e5:12:7c:72:47:a3:6b:06:e0:cd:1d:dc:76:44:02:4c:
         59:0a:89:a0:e9:60:8a:3b:31:16:7c:61:b5:b8:af:4c:21:5d:
         6f:46:b3:5c:e9:e0:27:87:33:56:18:2f:e8:cc:bd:7f:3a:a1:
         98:7a:5c:5c:5c:d1:15:03:cc:58:85:4c:b0:53:be:7f:81:87:
         14:1c:76:b7:e9:0f:3d:dd:9f:85:14:ce:81:fb:79:2e:5b:21:
         7b:8b:1b:cc:a1:16:39:a9:52:c7:84:7f:be:6b:de:66:2e:85:
         19:55:96:81:b4:91:cb:62:6b:d4:62:39:da:99:81:b2:12:b8:
         91:e3:ce:cc:88:d4:df:c4:f0:11:42:a0:58:e1:e7:64:50:07:
         46:2b:92:a3:23:45:1e:f3:4e:0d:88:b6:8c:97:ce:2c:7c:48:
         0c:06:c1:c0:78:34:e5:73:f1:ed:16:4c:0b:9e:18:85:7a:14:
         10:f0:e0:b7:2c:de:7a:be:1a:49:e2:c5:98:73:03:93:21:0c:
         9a:91:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----