Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          z4NKudydbkfUxZg7tepdbcm4FU1Xufhc21zJCCfDSR0=
Subject key identifier:   BA:05:C4:A5:55:9E:0C:DF:D9:D9:17:75:F0:D1:44:72:69:F4:2E:AE
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       039C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          039B
Signing time:             Sat 31 Oct 2026 04:11:07 +0000
Manifest this update:     Sat 31 Oct 2026 04:11:07 +0000
Manifest next update:     Mon 02 Nov 2026 04:11:07 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: mmrhVqxISoIC8VJGhX+51SV9JDRgxTZXWHCMEI3M1vc=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: Oct 31 04:11:07 2026 GMT
            Not After : Nov  2 04:11:07 2026 GMT
        Subject: CN=6ae56a5b-d3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:32:29:51:ab:4d:aa:71:04:10:d7:dd:06:
                    c1:11:ff:9f:c0:05:51:9c:fd:67:57:92:dc:7c:4a:
                    92:32:8b:3e:16:8d:0f:5b:27:14:00:20:b4:09:33:
                    b9:cf:c2:03:09:8e:86:82:e7:21:38:4c:2e:08:68:
                    4c:8e:42:a1:6c:11:f8:a5:4a:28:ef:8e:8a:9f:28:
                    0f:32:13:2b:d6:65:68:ab:22:8c:3b:98:bb:8c:45:
                    cb:32:12:f6:70:70:1e:70:6b:a8:b5:36:b3:1c:a9:
                    0a:de:e6:29:64:f4:91:86:e7:6c:3b:56:0b:0d:b2:
                    96:2e:ab:16:f2:c6:af:12:01:28:5d:64:d4:fc:db:
                    d4:68:66:a6:fe:2f:22:b2:07:6f:28:0e:dc:bd:a3:
                    50:1b:50:98:01:71:b2:f3:97:9c:50:e2:b2:12:5a:
                    67:c1:1e:e1:1a:19:7f:8f:33:aa:33:8e:fe:0d:2f:
                    62:03:0e:cc:df:1f:eb:0c:cc:15:9e:35:22:51:14:
                    b0:77:aa:75:f9:05:69:a5:c0:00:dd:b0:a8:b8:44:
                    cd:e5:e2:46:4e:c7:f8:1f:53:cf:8e:5a:3e:56:e5:
                    9b:37:8e:3b:d6:92:d1:01:e5:8d:02:a5:76:0e:36:
                    f0:d5:d8:b0:4f:2c:2c:6f:d8:07:b6:f9:f1:80:87:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:C4:A5:55:9E:0C:DF:D9:D9:17:75:F0:D1:44:72:69:F4:2E:AE
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:19:73:44:13:36:c6:b2:ef:3c:75:e1:1c:ce:3c:5d:ed:52:
         79:d0:de:0b:35:8f:75:fd:c8:bf:1e:3e:00:33:5d:8a:5f:c3:
         ee:87:39:37:4c:2b:d5:5f:f3:9d:c7:04:27:10:fe:e1:9c:fd:
         0a:d1:af:0a:21:56:a6:95:48:46:87:d6:67:60:cc:b3:1c:b1:
         53:50:e6:f3:60:d8:12:93:b8:89:fc:9b:3e:7b:c3:87:bc:ac:
         b2:89:4c:25:28:84:35:b3:aa:3c:79:d6:e0:b2:69:fa:5b:2b:
         fd:b7:f9:2e:8f:70:23:3b:95:af:ed:28:b5:c2:c2:a5:4e:9f:
         12:fb:dc:f9:f8:b0:19:bd:f2:a4:79:96:c3:9b:23:49:7f:03:
         12:76:69:9e:1e:e5:97:9a:e8:44:0e:f3:cd:62:20:e5:02:2b:
         c1:6d:f3:38:fe:27:15:02:8c:8f:4f:98:40:ec:95:c6:ea:bf:
         9d:3e:a2:d2:47:1f:f9:90:bc:62:4d:bb:d1:9b:5f:6a:51:cb:
         d5:e2:09:76:3a:31:1c:0f:0a:2c:1d:4b:11:c5:d6:e5:ba:43:
         fd:82:6d:20:e2:5f:6f:e8:9c:0e:ab:5c:25:8a:f0:f2:d1:86:
         83:3d:16:f5:08:3d:9e:29:f0:c1:21:86:84:a8:dd:18:77:c3:
         a1:7a:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----