Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
File:                     XuBLf4yg0sW2I59B08fM98XuNU0.mft (raw, json)
Hash identifier:          2K5WMSRNpS3PyTbqBxF9/EjsbH+81yS1zU8JesioY7Y=
Subject key identifier:   1C:D2:71:86:75:CB:53:B0:70:24:4B:53:1D:E3:2C:09:FD:1A:77:9A
Authority key identifier: 5E:E0:4B:7F:8C:A0:D2:C5:B6:23:9F:41:D3:C7:CC:F7:C5:EE:35:4D
Certificate issuer:       /CN=F369974AAR/serialNumber=5EE04B7F8CA0D2C5B6239F41D3C7CCF7C5EE354D
Certificate serial:       7A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XuBLf4yg0sW2I59B08fM98XuNU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
Manifest number:          78
Signing time:             Sat 19 Sep 2026 09:55:08 +0000
Manifest this update:     Sat 19 Sep 2026 09:55:07 +0000
Manifest next update:     Mon 21 Sep 2026 09:55:07 +0000
Files and hashes:         1: XuBLf4yg0sW2I59B08fM98XuNU0.crl (hash: oRW0pBslUqYYi8QYZf6wO0Ms6kUWwBifj91JyIDs144=)
                          2: 975437D25B3911F18053D3A9CE1D38B0.roa (hash: hFEADkUreZnc+ySAiY55VjIk9lOVBC1tNBubIFk+Gdo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
                          rsync://rpki.afrinic.net/repository/arin/XuBLf4yg0sW2I59B08fM98XuNU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369974AAR, serialNumber=5EE04B7F8CA0D2C5B6239F41D3C7CCF7C5EE354D
        Validity
            Not Before: Sep 19 09:55:07 2026 GMT
            Not After : Sep 21 09:55:07 2026 GMT
        Subject: CN=6aae5bfc-758b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:46:25:a0:59:bb:21:70:c2:9a:db:6f:49:
                    cc:86:22:07:d8:70:e5:ca:5c:a5:e2:c2:dd:35:f5:
                    e6:72:42:20:6d:64:ff:9d:89:e1:2b:43:d7:16:47:
                    e1:ae:10:1e:c1:ab:a3:73:f9:84:6d:cd:50:3b:73:
                    4b:b5:4c:67:d1:da:57:d8:0d:67:d5:5d:9c:b2:79:
                    4e:9b:31:d4:82:78:cf:72:2e:fa:a6:0f:3d:b3:0d:
                    23:4c:fb:3d:18:6d:05:d2:86:cc:5f:9d:b0:0a:75:
                    14:86:cc:23:00:af:b4:aa:69:6c:70:ab:23:76:e2:
                    22:bf:33:9f:be:ff:31:11:2e:47:8f:78:88:9b:4c:
                    19:2c:ad:14:82:be:86:47:bc:55:11:ba:76:95:f8:
                    37:5d:34:25:c7:27:39:11:16:67:50:cf:ac:fd:73:
                    fe:57:91:a5:ea:28:76:a4:89:48:d9:29:ca:d5:ab:
                    f4:db:5e:0a:f8:57:51:f4:74:2f:3f:24:6f:ac:cf:
                    88:ef:f4:c0:9d:57:97:ff:77:67:f3:2f:10:aa:8d:
                    f7:dd:24:2d:79:f0:b7:28:16:6f:88:f5:a7:3d:d2:
                    47:d7:7f:a2:4a:c8:40:08:40:20:18:ef:f2:2b:32:
                    1a:b2:5a:f6:84:9c:0e:a7:7d:eb:67:a6:a5:7b:5b:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:71:86:75:CB:53:B0:70:24:4B:53:1D:E3:2C:09:FD:1A:77:9A
            X509v3 Authority Key Identifier:
                keyid:5E:E0:4B:7F:8C:A0:D2:C5:B6:23:9F:41:D3:C7:CC:F7:C5:EE:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XuBLf4yg0sW2I59B08fM98XuNU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/9D26BD945B2811F1B1BC5AC6CE1D38B0/XuBLf4yg0sW2I59B08fM98XuNU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:d4:03:eb:55:5c:14:5c:2f:89:61:9e:ca:69:30:1a:83:
         de:f2:cd:e9:16:74:97:df:0e:a7:e2:49:f3:f1:6f:8d:49:b7:
         e4:aa:7e:45:a7:b1:aa:ed:6b:40:7d:ee:56:68:28:0a:db:18:
         c2:98:aa:22:ab:33:ba:d9:3c:58:e1:28:ec:b7:f7:6d:46:ff:
         5d:c6:53:bb:9a:c3:61:84:d5:86:4f:e1:a1:2e:b0:7c:b6:c7:
         da:f1:27:be:ce:36:3a:16:ca:44:d9:c1:cc:b2:85:8c:53:d2:
         1b:d5:98:21:a3:36:33:9d:10:6c:3b:be:18:95:a0:94:75:b1:
         51:80:3c:a7:a0:1a:bf:9e:c2:15:bd:fd:0b:15:69:ad:19:e2:
         9b:89:71:cd:32:24:28:6e:cf:8a:bd:04:c6:a9:60:84:7a:87:
         5a:0a:62:81:c1:7d:a1:93:f2:58:d7:fe:d5:c8:73:2d:19:d3:
         73:0a:62:27:41:c8:20:90:61:34:e1:10:13:c2:c3:d2:90:a4:
         17:da:d4:96:73:d0:6d:d9:18:c0:11:b6:84:d1:da:59:ef:06:
         18:57:7a:e4:b3:e5:c4:93:cc:ea:23:b6:4a:57:cc:82:82:73:
         90:dd:d9:d3:e8:37:c5:9b:0e:11:fd:86:1a:3d:85:37:3c:26:
         b3:9a:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----