Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.mft (raw, json)
Hash identifier:          7C6HjTgSrbi7oNOuANV0aEM6nhYMYlQ7LLM1C3hWsFM=
Subject key identifier:   11:BA:43:5E:F6:D6:E0:F5:6D:83:65:01:5A:87:D1:D1:19:FF:51:3C
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
Manifest number:          011F
Signing time:             Mon 26 Oct 2026 05:25:42 +0000
Manifest this update:     Mon 26 Oct 2026 05:25:41 +0000
Manifest next update:     Wed 28 Oct 2026 05:25:41 +0000
Files and hashes:         1: cb_ADVIeYMkKACaINGjJwbU4AYE.crl (hash: +fge9X/qyzEHvByhRBxsk84S3+XCW6NkJLFQesmk37Y=)
                          2: 4EAA5F90F57011F0950ED796DAE4EC9C.roa (hash: VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Oct 26 05:25:41 2026 GMT
            Not After : Oct 28 05:25:41 2026 GMT
        Subject: CN=6adee456-c2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:2b:bd:11:b7:c6:de:9b:4c:e6:b9:76:b8:
                    92:ab:39:79:db:6d:67:eb:65:d6:b2:ef:a5:e5:23:
                    a0:2e:0d:74:97:64:36:dd:9c:1a:94:45:2e:0a:03:
                    66:a2:95:bb:6f:fe:8a:6a:7a:81:19:53:e0:4e:54:
                    ad:db:27:8f:28:70:8e:ae:95:f9:58:2c:75:d9:da:
                    b3:4d:fb:8b:57:16:f5:71:54:b1:5a:e2:15:e7:47:
                    61:91:a5:81:24:45:d1:d2:17:fe:9e:7b:22:c0:7a:
                    32:e3:04:49:03:d3:59:c4:e9:ea:7a:89:a4:db:60:
                    b7:a6:22:65:94:be:a4:d1:18:49:fa:0a:e2:a4:d4:
                    b7:b6:50:84:50:58:38:f1:f2:f4:9a:38:09:08:58:
                    5d:00:29:0d:fe:e4:09:90:91:45:d6:8f:8b:86:22:
                    ab:31:d5:93:c4:97:30:94:e9:c8:a4:dd:71:63:bd:
                    30:de:79:80:0d:13:c8:51:e8:04:c5:38:bc:37:b0:
                    de:fd:8c:45:5d:5d:c5:f6:5b:c7:fe:2e:32:b8:48:
                    4c:54:b4:0f:f1:57:65:01:20:97:82:54:f8:72:58:
                    9a:f6:f7:6f:79:81:50:21:3a:bd:a1:68:17:ea:7d:
                    50:38:64:30:1d:08:8a:ad:46:e1:88:10:e4:5f:ca:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:43:5E:F6:D6:E0:F5:6D:83:65:01:5A:87:D1:D1:19:FF:51:3C
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:36:39:9e:ee:b7:31:75:67:35:7b:27:65:63:a6:28:53:
         45:50:b1:29:a1:e1:57:1e:2a:e6:56:65:48:a8:49:e7:87:3b:
         da:12:c2:e0:6f:58:c2:77:7e:da:0d:e5:80:5d:14:f2:4d:93:
         7f:6a:2e:15:43:0b:02:a0:87:4e:c3:38:f4:38:f5:29:05:92:
         67:cf:b2:55:a2:8b:11:d4:8b:f8:5b:16:2c:61:c2:a0:be:10:
         e4:4a:76:28:f5:2f:cc:6d:96:c2:76:a9:4f:fb:00:c4:a9:de:
         97:13:e8:94:5e:77:da:46:b4:0f:e3:46:d4:02:8f:97:49:4c:
         0d:87:32:3a:77:11:43:67:94:47:eb:d6:8e:01:48:e2:cd:fa:
         ed:5e:37:11:3a:cb:37:5a:43:1e:a7:f4:cd:ee:d5:2f:6c:97:
         9e:04:54:13:bc:94:8e:9a:c9:61:56:2f:be:c0:cd:78:ff:7f:
         fa:6b:02:67:cc:0b:a6:e8:5b:50:90:b9:10:d4:fd:67:74:0a:
         3e:3d:e4:d0:96:4a:47:a3:1b:2a:15:cc:37:87:ba:b1:6d:94:
         78:d7:87:4c:27:00:0f:9a:03:c8:e9:d7:00:96:12:ac:15:f0:
         fb:4f:1d:38:ca:3a:fb:7c:b7:18:0f:ae:24:af:e6:e0:45:c2:
         71:aa:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----