Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          huY3xi7JDGCUJooIi5tfFmgDhFMnz6uI5e9Tuk6M7sk=
Subject key identifier:   67:F2:72:51:EA:D0:5A:A8:DE:1C:25:EC:51:97:8A:30:45:97:8F:5B
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       0482
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          0481
Signing time:             Fri 11 Sep 2026 03:38:14 +0000
Manifest this update:     Fri 11 Sep 2026 03:38:13 +0000
Manifest next update:     Sun 13 Sep 2026 03:38:13 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: o8Yj/EqDwHWHS3OFS9FAgaC7pPt6W5A8NDWLLxYJ97Y=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Sep 11 03:38:13 2026 GMT
            Not After : Sep 13 03:38:13 2026 GMT
        Subject: CN=6aa377a6-2de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:80:55:c2:43:1e:6c:a3:07:a5:f1:f2:4e:
                    92:a4:9f:24:2d:65:b4:60:94:ca:06:b8:30:05:b4:
                    d2:ad:8a:58:1e:63:31:66:9a:3f:3b:aa:96:19:4a:
                    12:50:17:84:12:82:6c:27:3c:45:73:71:e6:f3:b2:
                    19:a4:f8:8b:7c:4e:3c:ff:4b:22:4e:80:9b:49:e5:
                    57:ba:78:92:63:19:4b:26:0a:9f:f4:4f:e4:3f:03:
                    0b:ed:bd:3b:20:e3:ff:48:f5:b4:c0:87:8e:35:e7:
                    bd:db:33:fc:d2:ea:34:c8:de:7d:9d:28:f0:15:d2:
                    f3:aa:6e:9c:14:57:8b:47:03:65:12:22:ce:c4:38:
                    38:92:2b:b0:92:48:6d:91:ec:d7:72:af:c0:07:42:
                    f4:1b:74:f8:14:af:71:fe:11:03:ff:19:f2:ca:4a:
                    b8:9d:ee:54:a9:f2:4a:2d:b0:74:5f:b0:07:9c:31:
                    84:27:e4:67:ec:d1:78:cb:8b:1f:6d:1e:5f:15:f0:
                    6e:1f:2b:ce:8e:f6:e3:09:30:b0:93:97:7a:4d:8b:
                    8c:95:ca:71:e4:40:81:16:2f:75:9c:24:08:ca:86:
                    0d:34:fe:01:64:4e:db:33:81:29:df:14:88:73:9b:
                    56:c2:b3:6c:07:7d:fb:1d:00:54:f2:ce:d0:1b:ed:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F2:72:51:EA:D0:5A:A8:DE:1C:25:EC:51:97:8A:30:45:97:8F:5B
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d6:5f:a0:bb:ab:cc:8c:e5:5f:1b:d6:d7:f0:17:05:e2:30:
         c8:68:93:e5:90:b5:30:47:96:63:fa:e4:82:08:30:e2:b5:b3:
         34:90:8e:4b:88:9b:37:b1:3b:88:e0:79:ae:5b:83:d7:3c:53:
         0e:7a:f0:8c:b6:61:46:15:3c:0c:c1:a4:1f:19:68:48:50:46:
         ed:fc:84:d1:a4:5e:20:4f:8c:a2:55:f2:67:d1:3c:93:2c:92:
         84:77:b9:76:48:7b:6e:69:59:f4:ee:ad:e4:81:64:cc:85:35:
         6c:8b:0a:e9:5e:d0:03:12:39:08:5e:ef:e8:3e:f9:04:fd:b3:
         52:0f:b9:c8:da:07:62:4a:02:7c:28:75:25:e6:e1:19:d0:05:
         46:a9:9e:54:e1:5a:39:ce:7c:a5:e5:47:fe:e2:fe:94:ca:69:
         dc:0a:6a:f4:fd:de:45:e9:a8:96:61:1b:36:59:39:6a:b8:71:
         95:9d:58:96:94:58:49:b2:4b:9a:1a:a2:4a:92:a4:25:3b:7e:
         5b:e1:eb:81:4f:bf:ad:20:dd:f4:e4:a8:c1:64:0f:a8:c1:08:
         63:ae:20:f5:88:64:c3:ba:c5:5c:76:7d:1d:af:4a:fd:1b:03:
         8e:be:45:35:b9:c8:c5:81:60:f1:03:c1:2f:f1:7a:de:fd:de:
         25:36:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----