Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          r8OPJpqfJx/oGDFv6UkYlXz9WH1iv4o9TL2j6XhWh/Y=
Subject key identifier:   91:0E:55:DC:ED:BC:02:55:AF:87:6B:FE:9E:09:6E:8D:67:E6:BE:2C
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0A90
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0A8F
Signing time:             Tue 25 Aug 2026 01:25:07 +0000
Manifest this update:     Tue 25 Aug 2026 01:25:06 +0000
Manifest next update:     Thu 27 Aug 2026 01:25:06 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: 9cDUiwovk3jNBkAhab/NvqLRWQcZP5ypguMHNlUu2fY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Aug 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2704 (0xa90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Aug 25 01:25:06 2026 GMT
            Not After : Aug 27 01:25:06 2026 GMT
        Subject: CN=6a8ceef3-daa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:55:5a:38:e2:9e:27:17:d5:68:86:4d:ce:
                    21:31:ca:a8:98:0d:64:50:d2:59:9d:c2:e7:47:87:
                    67:b2:38:05:94:e9:16:9f:e1:18:85:cf:0f:4c:46:
                    0e:39:89:e7:26:73:94:56:7e:3e:c6:b1:ee:22:26:
                    20:3e:e3:32:9e:f0:2f:df:fb:cd:2f:58:48:9e:e9:
                    08:fb:65:44:01:6a:a9:0c:0b:dd:60:b0:3a:30:5b:
                    78:1c:2b:0b:c4:c6:2e:ce:d9:b8:24:77:d5:ba:19:
                    bb:63:e7:27:f8:b8:0b:8d:98:a7:6b:db:98:82:f9:
                    85:a2:31:33:09:75:85:a2:71:de:a1:58:0e:30:ad:
                    90:6f:09:be:86:f5:13:df:2f:e9:8b:7d:86:7d:e6:
                    19:47:59:3d:2c:45:86:36:f1:37:9c:8f:0b:6a:78:
                    99:23:61:94:eb:cc:79:ac:39:8d:0b:6d:d4:cf:78:
                    63:dd:75:08:44:2c:ef:1a:d1:4b:82:5b:48:8f:a0:
                    1e:08:69:fd:af:51:1f:62:59:41:93:04:c3:93:8b:
                    15:89:f3:5b:90:3b:a0:18:be:04:00:2e:1f:85:1b:
                    66:7c:25:e3:25:47:69:c6:4f:95:23:a3:8e:d3:80:
                    7d:37:a6:cf:c8:0b:f9:5b:99:12:80:e2:86:0f:53:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0E:55:DC:ED:BC:02:55:AF:87:6B:FE:9E:09:6E:8D:67:E6:BE:2C
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:83:0c:cc:f1:bf:4e:ab:9c:7e:cc:21:a5:3b:c0:ba:5f:53:
         ab:bb:c8:cf:10:7f:ec:0a:cd:a9:89:eb:a7:66:d9:a6:f8:16:
         58:47:08:62:90:c2:ae:fd:0f:89:00:4e:ad:56:f9:9f:5b:69:
         b5:b8:a1:ec:f5:cd:28:30:2f:9c:cb:5f:bd:0b:c1:87:e0:97:
         5c:b0:b4:1e:8a:62:52:e6:b3:da:26:7a:89:9a:b6:61:c8:0d:
         07:83:4b:98:e5:b1:27:a1:29:0e:3f:b5:fb:72:5f:4a:7a:3b:
         07:c6:5f:41:32:bb:64:3b:40:46:de:e2:f5:4d:a5:3b:8a:07:
         ea:75:cd:fe:77:ba:c6:9e:42:60:17:7d:11:57:c6:f3:b3:30:
         6e:85:9c:ca:93:aa:ed:0c:9a:f7:47:48:1d:30:01:05:0d:91:
         34:33:46:9c:87:11:06:56:9f:93:bf:96:af:15:ee:25:0e:c6:
         e2:22:58:38:66:a1:b0:3a:c1:fc:d2:67:b7:44:bb:03:4b:7f:
         76:9a:db:e3:59:24:80:6c:40:7d:f9:d7:8f:a0:4e:08:90:84:
         7b:7b:38:c0:7a:a7:15:0c:90:cd:e7:ac:7f:9d:f1:b8:ee:54:
         60:9c:83:6a:5a:ae:9a:7b:e0:ab:e3:a7:f9:59:08:1e:ad:27:
         d1:c2:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----