Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          Je8vmYNj2Ji+1txJgtFBwEWdl6/O8F7y2YjtQGz2HKo=
Subject key identifier:   96:53:12:63:53:C7:A3:A9:F9:95:1E:60:9E:C4:A4:FA:CE:66:04:55
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       043B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          0438
Signing time:             Tue 27 Oct 2026 03:52:10 +0000
Manifest this update:     Tue 27 Oct 2026 03:52:09 +0000
Manifest next update:     Thu 29 Oct 2026 03:52:09 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: J2YSjE4nKC5poTnVNKNhyVRO5gnbd32hlCC1jasxl7U=)
                          2: 7F8D883847B111F1979852D1CE1D38B0.roa (hash: oYDoVUfu6u2a8Loo+1YedtcCrnvJ2azWlePBsIXROG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Oct 27 03:52:09 2026 GMT
            Not After : Oct 29 03:52:09 2026 GMT
        Subject: CN=6ae01fea-46fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:33:7c:ac:de:39:45:05:4f:c5:0a:20:9e:
                    8e:f6:85:68:ce:f7:03:9e:cb:f8:f2:c1:c0:97:22:
                    f6:73:57:49:8c:60:c2:80:b7:fc:3c:b3:ee:83:ad:
                    93:59:16:46:bc:c2:67:24:a3:95:d9:5c:9b:91:80:
                    bb:51:66:91:af:17:2b:94:94:29:22:20:f8:4f:ad:
                    ea:f9:d3:7a:0c:a8:23:8c:6c:31:13:f9:16:4a:99:
                    d1:5d:e9:51:59:69:ef:d3:32:7c:ab:e9:98:be:f7:
                    17:76:3c:9f:06:9a:35:5b:36:f9:7e:29:91:8a:c1:
                    03:a6:04:d6:98:f4:a4:5d:a1:d6:43:fb:8d:78:7b:
                    8f:f2:de:84:8c:94:f0:48:d6:78:94:8c:e4:20:b9:
                    c7:fd:00:58:fc:93:db:be:67:27:d9:a9:cb:70:39:
                    b8:ad:ab:2d:d3:81:11:30:89:68:7a:8e:1a:c1:35:
                    20:5b:fd:fb:56:38:5a:c6:9a:57:1b:85:0d:78:8b:
                    7d:8a:a3:27:03:56:af:48:b1:0a:76:c6:68:1d:0b:
                    e6:fc:06:40:bc:3c:1d:c1:01:ec:59:ec:64:e7:e4:
                    d6:00:90:d1:8b:bc:74:75:77:bb:46:48:3f:b0:96:
                    47:dc:d7:c0:ae:a8:88:e8:4e:08:4e:90:e5:95:af:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:12:63:53:C7:A3:A9:F9:95:1E:60:9E:C4:A4:FA:CE:66:04:55
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1f:d9:80:fb:9f:22:82:9f:8d:71:9e:8e:f9:da:dd:42:d9:
         38:cd:09:24:a3:c1:08:22:73:89:2a:80:22:8f:2d:c5:e3:a2:
         4a:16:ee:51:05:aa:cc:b5:b5:96:1b:c4:18:91:09:bd:33:e4:
         16:92:8d:a5:9c:19:c4:4e:d8:22:0e:79:c1:34:c9:f2:07:fe:
         68:a4:f7:25:d5:73:13:e2:09:cc:49:da:b3:0c:da:7b:60:52:
         d6:d0:ef:8f:87:85:60:81:b7:92:95:9f:e5:2b:0c:41:95:13:
         e5:4b:90:07:69:5c:65:19:7a:31:36:c5:bf:ac:85:66:ac:bf:
         9f:d7:44:d2:35:09:6a:e3:4b:99:07:2f:49:75:d6:fd:78:ae:
         9e:1b:5a:27:f2:29:8a:a7:21:8b:c4:8c:85:ab:69:5b:0b:13:
         72:d7:08:64:05:8e:7e:5c:7d:5c:f3:bc:74:cf:72:1a:30:29:
         88:0b:f9:25:f6:b6:19:8c:4b:74:7e:46:a3:b7:1e:1e:64:ad:
         58:49:ea:06:f0:52:84:aa:24:a2:09:c3:f1:88:5f:e9:f7:78:
         41:df:e8:4a:2f:a3:87:e4:24:71:40:d3:50:d2:a8:f3:0e:bf:
         bc:84:14:1c:49:a6:3d:5d:27:ea:7d:2c:ea:12:79:fd:f6:d3:
         d2:7f:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----