Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          7s9Xdl1hmklzA3QIK2cSZ3LS4+/HutVm/+euM+RWdwA=
Subject key identifier:   12:0F:6A:E9:A4:B0:AE:89:DE:99:6A:90:34:39:CB:0E:3F:63:35:C0
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       0B48
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          0B47
Signing time:             Fri 30 Oct 2026 01:17:00 +0000
Manifest this update:     Fri 30 Oct 2026 01:16:59 +0000
Manifest next update:     Sun 01 Nov 2026 01:16:59 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: NQ5lZtHHk9r1sdl4QVGoqxBWlPL8aJVngzCs0Xtieew=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2888 (0xb48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Oct 30 01:16:59 2026 GMT
            Not After : Nov  1 01:16:59 2026 GMT
        Subject: CN=6ae3f00c-f533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:f8:b4:78:97:0a:43:6e:d6:64:69:cc:c8:
                    15:1a:22:2e:ca:42:50:83:9c:c6:de:3e:de:f6:d3:
                    d0:ef:65:60:0c:85:84:4e:8c:00:93:5a:26:aa:6d:
                    b1:eb:48:45:f6:79:17:b6:34:51:6f:09:36:13:ef:
                    e7:36:1b:01:af:73:d7:f2:5a:b8:08:86:1b:ca:ca:
                    ce:41:fd:e7:e1:9c:90:98:01:07:27:91:3b:72:88:
                    1a:2f:a3:1f:10:2b:c0:49:d1:cd:1c:a0:79:2d:2e:
                    9e:11:40:4a:00:12:e5:3a:d8:89:f2:48:5a:44:ec:
                    11:f8:46:a6:5e:15:58:97:c5:bc:d4:c6:f3:a6:1e:
                    bd:75:70:71:96:31:3b:0e:ac:c7:18:12:52:6c:71:
                    c3:34:ff:95:f4:e8:0f:6e:77:6f:08:08:87:3f:7b:
                    8e:82:6b:5d:a9:c0:4f:f1:4f:7d:05:fc:66:21:00:
                    d1:3d:e7:2b:28:ba:86:9f:7b:72:1c:35:f7:cd:3b:
                    f2:a7:c0:02:cb:de:75:b8:58:0c:fa:6f:96:22:ea:
                    be:77:b3:65:14:03:9d:ef:56:a2:07:e2:7c:11:74:
                    d3:2e:39:4b:9a:cf:c3:a9:80:fe:eb:78:18:b8:35:
                    80:b7:27:b8:da:eb:4f:25:f3:dd:19:d5:1a:3d:13:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:6A:E9:A4:B0:AE:89:DE:99:6A:90:34:39:CB:0E:3F:63:35:C0
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:fc:47:aa:71:c9:2e:f2:f5:b4:e5:12:46:71:50:0b:43:
         2b:b0:f3:2f:45:1a:92:fb:46:90:b9:ee:68:a2:cd:ef:cf:a4:
         0b:2b:b2:52:9b:1b:14:d5:79:c1:75:12:20:07:f9:f6:48:ca:
         da:cf:6d:11:5e:43:6f:f9:d8:6b:09:73:6c:fb:29:d8:f0:3f:
         52:a4:8a:06:40:8d:b9:f3:06:dc:6f:f5:f3:b7:f8:e9:88:fb:
         a0:0a:4d:3e:30:df:de:35:c0:8d:de:86:ee:59:dd:7b:e5:c1:
         4b:3b:43:a6:de:16:58:b2:49:77:e5:6b:a4:ae:35:4f:0b:77:
         6a:35:f8:db:44:fb:e6:c2:ad:3b:65:da:82:2b:a6:99:52:40:
         bc:56:41:72:89:d3:6f:bc:68:01:6b:17:20:c4:da:d2:4e:69:
         c6:86:15:d0:29:4b:49:14:64:d6:92:f4:73:3e:c0:80:a6:51:
         68:15:48:c3:75:2f:54:5e:c4:30:60:54:ea:bb:8b:de:69:bf:
         b6:c4:61:e2:ec:bc:74:e5:ad:2c:54:40:06:ef:f7:bb:65:40:
         08:23:1b:db:10:11:24:a4:53:7f:83:ab:39:a9:c4:15:a4:65:
         46:04:21:4f:b5:77:08:46:19:50:66:ce:5e:a8:24:15:6d:d4:
         c2:64:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----