Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File:                     CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier:          zBS46jQ3D9yGG/3VA9Xvig9VbSEUgR+IlZ7pb94Karc=
Subject key identifier:   AA:A1:76:B6:69:01:5E:79:FE:A4:D9:D1:C3:10:7E:BA:D4:ED:1C:DA
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       06BD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number:          0645
Signing time:             Sun 11 Oct 2026 03:07:06 +0000
Manifest this update:     Sun 11 Oct 2026 03:07:05 +0000
Manifest next update:     Tue 13 Oct 2026 03:07:05 +0000
Files and hashes:         1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: KDY3vHssUtkPl2n9eU9M15sLzhgYhu8XGM1leTjSmvs=)
                          2: 24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa (hash: S2U9uds7Cld2AWKqvudZAdjph2xQxW8yaq1n4PfigRc=)
                          3: CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa (hash: RIIqMS2K8WI/4vMiOqzeVI78FQ33zf2FyhdAYL4i/0U=)
                          4: 7B0E03D07E2C11F1891C990FCF1D38B0.roa (hash: H5ZqBfAUkoo2kyPOpuK5FGQS9v/LC3fkqvaCdMvWPN8=)
                          5: 326EDB067E2F11F1B541811CCF1D38B0.roa (hash: 1XIr2PJb94zxYZkffWRict/jrq9o05Vf+fzVAjTqwcQ=)
                          6: FA491FB47E2B11F1AA23710BCF1D38B0.roa (hash: YwuLni5xYVgslLLIMW/8r5dsr7/o2nw39a6iQKFwzQ0=)
                          7: C16E39AE7E2B11F18CB65D0BCF1D38B0.roa (hash: 6hdrj1CVtZtpiPX/L7oySM4TmwrCRUJhITvON8iokTQ=)
                          8: E684858E414211F1A3CDCEB6CE1D38B0.roa (hash: trSZRMDESmLqpeuxtkhZM3kKOXj5AdcD0bd/niQbcss=)
                          9: C90158C27E3011F1A42C28AACE1D38B0.roa (hash: m37ozqGBclmMtWZutuE+QOnY9ewZNLKPVysEuj18YUk=)
                          10: D919A6407E2D11F1A051C317CF1D38B0.roa (hash: e5ge7hY54JAZ4ZhJ4t2XQo6wq5JaLcniIddSVYTp1Ac=)
                          11: 4849F37E7E2B11F1AE846107CF1D38B0.roa (hash: sxDDEBpdr+bnORECpkJaiHwwOSZML6kx6uvqpMOhO7E=)
                          12: 3943014C7E2E11F1B899F517CF1D38B0.roa (hash: Ld72qTQ+RiSgzBnyA5W/7X5KKgV11K1UIxJd9Z50BXg=)
                          13: 488CA7267E3211F1B91182B2CE1D38B0.roa (hash: uOndVz+lHryR8XE8e4ZXXLo6tsFA/wxx3lbZ6lqxsJg=)
                          14: 1A9CC1767E3111F1BAA359AACE1D38B0.roa (hash: sri8YlprmjTFTKhiBNsUHI55PNlpSbIzcKUcDqn8R3A=)
                          15: 56E2A1FC7E2F11F197B081A1CE1D38B0.roa (hash: MLMn7DgcjC9kJt10C+ajiAUd9w+iQTq8t0+fDA7JRrw=)
                          16: 70C67A1C414411F1AC2C25BFCE1D38B0.roa (hash: pVvqCth+pldb5aKJXaW4cjCwqqFCFtgpnyzwqX0KUAQ=)
                          17: 8883F6EC7E2B11F18F1F7D07CF1D38B0.roa (hash: Tr4D5pt4LHUCrCX12+e8T2S6F12WbJfrTGDAIHe/y1w=)
                          18: 5CBD50B47E2E11F1A0890D18CF1D38B0.roa (hash: Q7c0Ul63V8lCAYTN/5wp6Pif/Y/osWhWIIbpU+DnH0U=)
                          19: C2F4A7D87E2E11F19604F41BCF1D38B0.roa (hash: cs/k7hseOXiz7ZW07irORKXogIQDAeN4IB3fj0rnKto=)
                          20: A6E945927E3011F1831F23AACE1D38B0.roa (hash: tMBH4yH/vyaqmyTg5oqoqN2L1sc0SQ7zSXaSeRyPXcU=)
                          21: 0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa (hash: dhaluCj7RnDZ7PYio53jEw/KHG7gePKgaeCadPKC+2w=)
                          22: 7C1C231C7E2F11F18E12A3A1CE1D38B0.roa (hash: hpMHDcjC1T2JibIM96t8LRRDibJaiQLPCpykNcHGTl0=)
                          23: A24D20907E2F11F1BEDCC4A1CE1D38B0.roa (hash: qmBWpFsSlfzNnJuEa1VYKxig2bfInifSAqE34JzwVlc=)
                          24: 4772158C414311F1B6D401B9CE1D38B0.roa (hash: 2QkUZI76kgSfjHqaizbFIrW983lIVl7zlWeJR1DkrZc=)
                          25: ECE516527E3011F190D646AACE1D38B0.roa (hash: OoWGktBOhUONH0OmAm4vSQkEZZW+eN/qB+Ia0BErvBg=)
                          26: EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa (hash: 6Za0LpirtMkr1W1FS+msJJ0aWJ7QuNPWNejT9fg3T0Q=)
                          27: 12CF5EF67E2F11F18370421CCF1D38B0.roa (hash: 4UuN4QLfMxXPy2HM2/BEelU9Bv4KfkAHor15wsAKv1M=)
                          28: E77C5C227E2E11F18C2F0A1CCF1D38B0.roa (hash: XLugb+ewySxCjGyLpAA8rZeHG0XeiKI6hnWqmfdgYAk=)
                          29: 312940B47E3011F199C902A6CE1D38B0.roa (hash: vag9WcuAOrF3+1EYVtHiJogvCIGwdfxrLrNAvVorVHQ=)
                          30: 4D8965EE7E2C11F1AD65030CCF1D38B0.roa (hash: im27BEXtZMCxHYCtlYuIYnBk5vy5TS9xuR5cBwFGxvk=)
                          31: 7F089C627E3011F191A271A6CE1D38B0.roa (hash: Vhqvt4z82xrmy8Nw0nz6rCCISSc2qFuWV9BTD2ciiBE=)
                          32: ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa (hash: z0x2yJJ+yAojdrKAg7NLloTHQmOrtUMDv1pC3BKiJ2o=)
                          33: 5B43754A7E3011F1B6C216A6CE1D38B0.roa (hash: 0hAe/QtewAi2sMOEQpa0fwfSQe7kQWIzxoUKxq88RUs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 03:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Oct 11 03:07:05 2026 GMT
            Not After : Oct 13 03:07:05 2026 GMT
        Subject: CN=6acafd5a-61d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:a4:16:71:54:8d:a6:1a:ec:5d:18:37:73:
                    fe:93:b7:50:14:e3:25:d9:39:83:06:e1:a2:e2:a7:
                    43:06:5c:ce:71:3b:6c:aa:2b:c9:8f:79:e8:c7:df:
                    78:5a:78:fd:dc:06:40:dd:90:c2:79:fb:07:0a:69:
                    74:62:9e:67:af:f9:5d:38:00:0a:4f:82:94:bc:ec:
                    8b:a7:c5:4f:68:18:e5:1f:b7:d2:cc:95:8a:35:a9:
                    65:5c:d5:f3:8f:8e:5a:d0:09:bd:d8:4a:33:92:cf:
                    ef:33:37:3a:4d:c3:99:94:ec:25:39:02:07:ae:c3:
                    d8:8c:59:64:cb:2f:98:a1:14:6b:f2:6a:43:86:11:
                    42:e7:ee:f4:35:b9:6a:28:ce:0d:4a:e4:8c:8b:62:
                    c6:b3:d7:aa:87:3b:8d:a9:75:51:75:73:e3:d0:be:
                    cb:bb:cf:07:7a:00:0a:c7:21:e0:89:7c:2e:f7:3c:
                    63:21:d1:a8:93:dd:6a:1f:ef:44:46:04:8c:37:14:
                    bf:ac:63:2d:fe:55:11:09:87:a9:c8:9f:c2:33:06:
                    1a:91:4e:5f:64:13:b4:ad:61:57:1f:df:b2:70:85:
                    f5:92:3d:b5:97:73:1b:37:81:f9:52:64:a2:f6:9d:
                    46:54:46:e3:72:5c:a6:77:38:e7:4d:7a:c1:7c:ad:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A1:76:B6:69:01:5E:79:FE:A4:D9:D1:C3:10:7E:BA:D4:ED:1C:DA
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:b4:09:d5:26:a5:5e:b5:2d:6d:b7:d1:63:b6:95:eb:6f:
         ee:69:7d:2f:2f:48:74:fb:8a:28:bd:35:61:3f:2d:0c:bf:6b:
         b0:f3:61:76:85:e2:ef:df:c2:32:3c:d1:0a:c9:3e:3c:fc:c1:
         db:7f:1c:6d:50:24:d6:bb:c6:13:2f:b3:32:f1:19:d9:07:f4:
         b7:ef:c7:9d:fe:22:fd:f1:b4:80:80:48:98:b4:69:e8:1d:b0:
         2c:d6:83:49:3e:51:98:0a:f7:10:cf:bb:d3:ea:07:cb:81:86:
         b3:4c:6c:19:ec:08:03:e7:35:6f:3f:cf:58:03:8b:b3:6b:ed:
         7f:39:25:77:64:df:b0:ae:d4:ea:82:77:1e:c8:36:e8:1a:0d:
         45:aa:fc:d2:d5:1c:2d:be:13:98:ac:a0:5e:80:36:d1:54:fc:
         69:09:83:22:0b:73:b2:8b:5a:a5:81:d8:cc:c5:18:2b:f8:d0:
         23:44:64:5e:d5:aa:4e:27:a3:05:a5:79:b3:17:e8:5d:5b:19:
         bb:a4:0d:b3:e9:01:6e:06:2f:e8:ed:51:31:fe:00:81:23:7c:
         b5:ca:f3:50:fc:70:cb:a0:25:dc:0b:59:a4:e7:92:9b:f5:c2:
         a0:66:4c:73:a9:b3:a2:38:7a:f5:d9:8b:b8:a5:1f:d2:07:02:
         c4:d4:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----