Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File:                     KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier:          gyUM//GEgvenxvBaFJ1hF/2bQP+nH+J8IevBuHVaWdU=
Subject key identifier:   4D:A6:EF:E5:7D:4E:AD:69:E7:32:30:96:02:BD:6B:CA:3A:95:19:A5
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer:       /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial:       0598
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number:          0596
Signing time:             Wed 28 Oct 2026 03:06:34 +0000
Manifest this update:     Wed 28 Oct 2026 03:06:33 +0000
Manifest next update:     Fri 30 Oct 2026 03:06:33 +0000
Files and hashes:         1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: MQ0LiKNFRELAXR8E9kL52byIs9a1bQm9dina89gSSxE=)
                          2: 5698C4728D7711F195BD11A9CE1D38B0.roa (hash: UatJHt+lZTC3A+YKRk8bCN0broh1snWF863Wd3rJti0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                          rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
        Validity
            Not Before: Oct 28 03:06:33 2026 GMT
            Not After : Oct 30 03:06:33 2026 GMT
        Subject: CN=6ae166ba-02b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:ea:be:30:d8:f5:2b:b0:c7:df:fc:e0:cc:
                    b8:af:72:57:12:c7:ae:78:ee:5d:37:cc:79:7f:47:
                    8f:e3:29:b5:d0:77:ed:0f:f1:e0:54:89:9f:e1:01:
                    42:ae:84:45:03:d5:65:fa:90:71:fb:19:d9:3d:75:
                    dc:79:12:be:4d:72:3c:1f:3a:76:b1:f4:e9:d9:44:
                    a9:e4:48:11:91:56:fe:e3:d8:25:0e:ba:dc:46:ee:
                    50:6b:9a:4e:62:03:c9:73:c8:91:0d:15:3e:c0:e0:
                    0d:ec:86:ca:76:6b:16:d8:58:21:8e:7d:44:9c:e4:
                    98:68:df:60:4a:b2:95:6b:57:b1:be:ca:bb:45:99:
                    54:92:6f:87:64:bd:29:00:07:47:ae:74:8e:55:89:
                    c1:16:6b:e3:0f:42:ee:f8:4e:34:b6:39:45:3d:5e:
                    ac:d3:cd:c7:c8:cc:0f:3a:2c:d2:c3:e5:0b:66:ce:
                    b2:4e:8f:0c:70:85:f2:39:ad:ff:7a:f4:c9:37:d1:
                    21:aa:47:2a:83:f1:38:07:e7:e6:e8:1d:20:18:20:
                    91:af:82:98:5b:ed:0b:68:f2:aa:76:8d:31:df:92:
                    56:46:ac:ed:8e:6a:b8:c2:5f:c5:7d:2a:65:bb:f5:
                    19:70:34:91:8e:a0:74:c3:fd:31:64:75:d2:68:91:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A6:EF:E5:7D:4E:AD:69:E7:32:30:96:02:BD:6B:CA:3A:95:19:A5
            X509v3 Authority Key Identifier:
                keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:71:d5:9a:65:d6:bb:dc:e2:66:05:b6:83:60:45:d5:b9:a4:
         92:65:de:9b:22:42:65:e4:4a:49:76:62:ab:3a:dc:fe:c8:bd:
         a3:44:c3:cf:96:65:95:3c:d9:67:cb:75:90:f0:67:d4:f5:33:
         49:b6:fd:d3:6a:55:e1:48:95:e9:0d:fd:72:93:12:91:a2:3e:
         44:fc:8c:7e:79:a9:69:e3:0a:a5:d3:10:bc:0a:da:78:c0:2c:
         a3:00:3d:1a:4c:c5:8c:04:21:ad:7b:50:a0:11:ca:ea:2b:c8:
         06:67:38:79:89:51:97:64:cf:62:68:b9:cc:5f:db:c0:02:66:
         f9:1d:e9:16:bf:b2:36:10:9e:7e:26:e9:43:f7:c4:8f:34:f8:
         17:35:66:40:b9:40:3a:5c:e9:4e:64:5b:f4:eb:42:32:23:6c:
         f2:13:66:3d:56:b1:0d:f9:d3:76:5f:ed:bf:b3:6c:8d:8c:42:
         69:03:12:17:e9:45:07:25:0c:53:83:ad:6a:80:7b:d7:8f:4b:
         22:ca:9b:f2:53:28:1b:db:a8:e2:89:48:eb:6c:32:8f:56:75:
         0b:5e:13:78:d2:5a:34:c8:2c:24:07:06:92:72:5a:1b:b5:a5:
         a3:eb:ca:62:d3:f8:a8:25:80:61:b1:bf:57:20:41:cb:8e:be:
         6d:46:85:60
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjJEQUJBUjExMC8GA1UEBRMoMjgyNTYwODBENDNBMDREODEyMzhFRjUzRDMxMTZF
RDY0N0IwNkUxQzAeFw0yNjEwMjgwMzA2MzNaFw0yNjEwMzAwMzA2MzNaMBgxFjAU
BgNVBAMTDTZhZTE2NmJhLTAyYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRuOq+MNj1K7DH3/zgzLivclcSx6547l03zHl/R4/jKbXQd+0P8eBUiZ/h
AUKuhEUD1WX6kHH7Gdk9ddx5Er5NcjwfOnax9OnZRKnkSBGRVv7j2CUOutxG7lBr
mk5iA8lzyJENFT7A4A3shsp2axbYWCGOfUSc5Jho32BKspVrV7G+yrtFmVSSb4dk
vSkAB0eudI5VicEWa+MPQu74TjS2OUU9XqzTzcfIzA86LNLD5QtmzrJOjwxwhfI5
rf969Mk30SGqRyqD8TgH5+boHSAYIJGvgphb7Qto8qp2jTHfklZGrO2OarjCX8V9
KmW79RlwNJGOoHTD/TFkddJokawfAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUTabv
5X1OrWnnMjCWAr1ryjqVGaUwHwYDVR0jBBgwFoAUKCVggNQ6BNgSOO9T0xFu1kew
bhwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyREFCLzFBREE0NjQ2OEYzMjExRURBRDYyMUFCOEYxMjIyNDY4L0tDVmdn
TlE2Qk5nU09POVQweEZ1MWtld2Jody5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0tDVmdnTlE2Qk5nU09POVQweEZ1MWtld2Jody5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjJEQUIvMUFEQTQ2NDY4RjMyMTFFREFENjIxQUI4RjEyMjI0
NjgvS0NWZ2dOUTZCTmdTT085VDB4RnUxa2V3Ymh3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWcdWaZda73OJmBbaDYEXVuaSSZd6bIkJl
5EpJdmKrOtz+yL2jRMPPlmWVPNlny3WQ8GfU9TNJtv3TalXhSJXpDf1ykxKRoj5E
/Ix+ealp4wql0xC8Ctp4wCyjAD0aTMWMBCGte1CgEcrqK8gGZzh5iVGXZM9iaLnM
X9vAAmb5HekWv7I2EJ5+JulD98SPNPgXNWZAuUA6XOlOZFv060IyI2zyE2Y9VrEN
+dN2X+2/s2yNjEJpAxIX6UUHJQxTg61qgHvXj0siypvyUygb26jiiUjrbDKPVnUL
XhN40lo0yCwkBwaSclobtaWj68pi0/ioJYBhsb9XIEHLjr5tRoVg
-----END CERTIFICATE-----