Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File:                     TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier:          Cw+50MD2KtoImTqyk1nmjxUdiRuslDrrbwQ+KjkoChA=
Subject key identifier:   6E:70:7A:29:4B:55:0F:C3:AB:34:42:97:9D:54:B0:35:68:10:BD:66
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer:       /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial:       0D42
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number:          0D41
Signing time:             Sun 23 Aug 2026 01:10:17 +0000
Manifest this update:     Sun 23 Aug 2026 01:10:16 +0000
Manifest next update:     Tue 25 Aug 2026 01:10:16 +0000
Files and hashes:         1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: bulEiKNrCusSUK82ecSWJJiLf8gOr973ESfnlU52QjY=)
                          2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                          rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AR, serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
        Validity
            Not Before: Aug 23 01:10:16 2026 GMT
            Not After : Aug 25 01:10:16 2026 GMT
        Subject: CN=6a8a4879-9038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:81:fb:c7:36:28:9b:d7:94:ec:4d:95:db:
                    72:07:5b:42:f4:cf:90:08:b6:52:08:56:a4:06:47:
                    dd:46:3c:bf:4a:f9:1f:94:65:f3:1f:16:e5:71:b8:
                    fe:07:8d:66:08:b3:36:5b:9f:c6:4f:0a:20:92:ea:
                    4b:ca:50:cd:9f:71:dc:e1:47:31:e1:64:a3:d5:b2:
                    bd:e8:31:84:a6:f3:cb:7b:7d:c8:9d:fc:91:61:a8:
                    c4:57:58:bf:9e:cd:dd:7f:52:d1:22:cd:a9:ff:64:
                    02:f1:55:fb:bf:d4:dd:c0:05:ad:95:e3:64:f0:cf:
                    ce:f6:de:ae:0f:60:17:d4:e6:23:7f:00:98:af:05:
                    b0:18:4d:b4:64:28:19:f0:5d:99:b8:74:29:c0:53:
                    07:55:b8:c0:5e:9a:60:87:d2:2c:56:98:d6:44:f2:
                    89:c4:d7:77:8d:18:dd:69:a3:df:6d:94:f6:64:30:
                    a8:bd:de:a2:79:6a:f4:4b:77:42:2d:46:b0:53:fc:
                    eb:17:68:e8:dc:d7:70:d7:b0:b3:53:0c:43:18:9a:
                    7c:ba:ba:8b:5e:79:25:8d:ab:ae:6e:0a:53:e8:f5:
                    08:a6:8e:7f:60:a4:a1:67:07:45:bd:3a:71:97:27:
                    77:5b:d1:d9:b9:2e:a0:a5:2c:5b:5c:da:0c:30:8d:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:70:7A:29:4B:55:0F:C3:AB:34:42:97:9D:54:B0:35:68:10:BD:66
            X509v3 Authority Key Identifier:
                keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:8d:6c:0d:21:4d:85:84:70:c0:86:b4:66:a7:6c:b2:9f:
         06:f5:a8:0f:23:05:88:ec:62:c1:cb:64:d4:bf:3c:74:6d:a7:
         16:3d:c5:ca:a0:cb:b9:6f:55:0a:30:88:00:64:13:7b:e4:2c:
         5b:08:40:62:1c:51:67:6b:9f:6d:52:76:d0:f7:6e:6b:7c:10:
         2f:44:8c:cf:68:22:03:91:89:23:2e:d5:9f:de:2f:0c:de:cf:
         56:0b:f5:dc:a9:4a:69:8c:77:1e:9e:dc:a9:98:c6:86:7f:01:
         99:9f:21:b7:a6:7f:06:ed:19:8d:04:39:eb:5a:a8:5a:5c:ac:
         c0:97:68:ff:6d:3d:ef:3a:8a:a8:9a:9d:75:b0:3f:57:b6:fe:
         2c:cd:49:01:2a:f5:a4:72:7b:84:32:5d:90:e6:af:27:e0:42:
         04:3e:a1:c7:94:3b:1a:45:36:e1:b5:65:18:f6:38:85:04:e6:
         e5:5d:04:d9:34:b7:b7:ad:22:a1:79:c7:f6:31:55:1b:25:69:
         0d:15:d1:9d:1c:a7:08:09:02:f9:30:df:55:ae:08:db:63:c0:
         be:40:a8:42:c7:2d:49:5b:ee:50:64:60:1e:13:f4:55:47:32:
         55:b8:12:ee:ba:e7:cc:5c:09:d1:53:d2:6f:37:fb:5a:f1:94:
         4e:86:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----