Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          amwxb70axF6Wgma7tzyKJH6LF98bbHqyzOx+Ugd4+6c=
Subject key identifier:   D3:80:D9:FC:D6:96:C7:CF:C9:96:53:15:60:BE:7B:9A:63:3F:9B:6B
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0386
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0381
Signing time:             Thu 10 Sep 2026 04:07:48 +0000
Manifest this update:     Thu 10 Sep 2026 04:07:47 +0000
Manifest next update:     Sat 12 Sep 2026 04:07:47 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: wNE/FxUsiXfcr1fhE+87iCbxePogDD6KM9+aicX5UWU=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 04:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Sep 10 04:07:47 2026 GMT
            Not After : Sep 12 04:07:47 2026 GMT
        Subject: CN=6aa22d14-7962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:61:07:c3:00:79:3d:d6:19:14:85:9d:38:
                    81:45:a3:ea:ab:dd:9a:ce:5a:b2:00:8d:ed:ea:30:
                    67:a2:1b:a9:68:8d:13:e5:75:67:29:62:98:e0:d4:
                    8d:a2:e0:cd:90:83:db:65:1b:34:f6:9c:12:06:8a:
                    ea:3d:91:6b:cb:86:01:f6:3b:19:bd:5f:5c:7a:a5:
                    8e:10:cd:69:86:8f:87:1b:7d:68:db:36:d1:6a:84:
                    e2:5d:66:d8:fc:5a:5f:f8:00:70:a4:6e:fe:54:ab:
                    11:24:d9:e0:1e:5a:53:cb:69:da:50:24:f9:51:46:
                    60:f2:0c:3c:cd:d6:7c:b7:53:27:9c:9c:21:ac:ce:
                    47:42:95:00:c6:d4:5f:b8:22:89:03:83:c6:15:26:
                    16:cc:98:49:58:82:b5:9c:8d:9e:28:4d:7b:25:38:
                    48:f4:27:3d:e8:38:a0:05:f6:d2:a6:f9:1f:a2:01:
                    9b:52:49:b0:fb:3c:6a:d1:05:0e:9b:f8:5a:86:b4:
                    af:89:5e:75:45:7f:e0:96:aa:25:01:c5:b2:22:e1:
                    7a:fd:1c:95:a8:ce:bc:1c:b7:50:f1:3a:68:ca:33:
                    c1:d2:6a:fa:96:4f:4e:10:71:8b:6e:18:9d:d9:87:
                    5d:45:6e:46:ec:50:6c:7e:8e:59:52:ff:26:ce:15:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:80:D9:FC:D6:96:C7:CF:C9:96:53:15:60:BE:7B:9A:63:3F:9B:6B
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:16:94:ca:95:8a:1b:bd:35:d3:58:83:e9:62:a7:da:72:
         62:d1:36:56:47:e0:be:07:8e:1f:5a:06:d3:13:1b:5f:e0:f6:
         c7:26:dc:5e:84:f3:6b:16:be:af:41:2d:da:29:24:51:09:7c:
         c4:23:b0:2b:5b:fa:b3:19:a4:e3:e6:4e:4a:da:f6:fd:51:a4:
         cb:d0:2c:65:6b:fd:a6:de:03:86:07:0f:a4:15:dd:56:80:7f:
         5c:91:3b:61:4c:67:b7:2b:e6:db:f3:24:65:57:f1:20:87:10:
         5c:b9:f0:5b:d1:7e:cc:d9:b9:5c:63:0a:94:1b:51:2a:73:29:
         c3:43:dc:55:1c:e3:62:d5:d5:dc:92:df:a6:a3:5a:7c:dd:61:
         6e:2f:3d:a7:da:2d:9e:96:5e:e7:66:74:a6:5a:23:92:2b:a7:
         47:3b:7a:03:78:44:92:5a:83:c5:61:d4:85:28:1b:24:58:8a:
         e3:18:2a:9d:42:e8:8f:01:f3:9b:5a:f1:7f:05:4e:93:e6:1b:
         24:5a:de:17:04:fc:60:c4:e3:ae:89:bf:be:36:94:9b:27:8e:
         b6:5c:4b:3c:2e:49:d2:6b:47:68:18:f3:79:d5:f3:b9:52:db:
         96:c6:85:49:83:0b:f5:14:af:da:44:09:82:a6:84:3e:f9:1f:
         6a:96:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----