Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
File:                     rwNfxJBpXa-3lvnHN19zijES_Ds.mft (raw, json)
Hash identifier:          hx0qSJIseq9XWjDQ4+XDQWh7s4mUSsveB4O4xy/bbqk=
Subject key identifier:   68:36:A9:F2:C8:A9:20:63:76:A2:78:1D:6C:1E:FB:E9:8C:5C:D8:EE
Authority key identifier: AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
Certificate issuer:       /CN=F36A2303AR/serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Certificate serial:       09E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
Manifest number:          09D8
Signing time:             Mon 02 Nov 2026 01:43:17 +0000
Manifest this update:     Mon 02 Nov 2026 01:43:16 +0000
Manifest next update:     Wed 04 Nov 2026 01:43:16 +0000
Files and hashes:         1: rwNfxJBpXa-3lvnHN19zijES_Ds.crl (hash: tria2VirKntoLLZH70LLzXjMCfdpssm676xyPDD+JdM=)
                          2: 7322325A60B211F1A94AA0EFCE1D38B0.roa (hash: DkUrhY6mM2jhhT/wIQ7n53CMBa8i3Sa+6z/2TT6AAqk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                          rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529 (0x9e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AR, serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
        Validity
            Not Before: Nov  2 01:43:16 2026 GMT
            Not After : Nov  4 01:43:16 2026 GMT
        Subject: CN=6ae7eab5-4505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:2f:20:f4:d1:94:d5:c0:48:24:55:4d:37:
                    4f:2a:2a:5b:9f:41:54:e4:76:a6:e3:65:f9:09:3f:
                    02:49:9c:1b:af:54:f7:55:04:e7:f1:09:a4:a2:21:
                    d5:2d:26:13:e1:ac:e5:df:c4:4b:93:d1:ff:72:ff:
                    48:7a:02:94:5c:af:5e:9d:7e:97:17:4c:37:05:f1:
                    ee:d6:5d:d8:3c:ff:97:8e:2c:77:80:36:c9:3b:06:
                    c8:38:09:ed:0e:bc:26:d7:23:1d:c6:91:9d:fb:77:
                    44:96:03:38:cb:df:f5:26:c0:26:4f:9d:f5:38:66:
                    f5:2b:17:94:88:44:c6:d9:e6:6a:7e:ec:31:99:e0:
                    9f:a5:1e:5f:3b:9b:8b:fb:72:78:06:24:22:96:e8:
                    c3:8f:9f:ba:cc:61:88:c2:b6:36:1d:3e:61:d3:27:
                    84:3c:1c:c8:1a:81:80:b3:3f:c1:51:f2:f4:ca:5b:
                    21:99:e1:44:72:31:7a:5e:3c:2b:73:c2:a3:91:c4:
                    cc:62:57:b8:eb:1d:11:8b:ef:5f:e5:61:56:66:1c:
                    d3:03:6c:05:8c:62:c1:27:39:47:7a:3e:1e:16:f0:
                    b9:98:bc:a3:24:9b:e9:dd:1d:49:99:b4:35:fb:81:
                    4b:2c:c9:27:81:48:20:e3:7e:46:0f:0f:e1:75:67:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:A9:F2:C8:A9:20:63:76:A2:78:1D:6C:1E:FB:E9:8C:5C:D8:EE
            X509v3 Authority Key Identifier:
                keyid:AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:c3:9c:52:ab:7f:42:c6:6b:f5:6b:57:45:70:4c:f1:bf:
         6b:27:2e:bd:9f:6e:48:ee:a6:08:60:81:1f:15:14:19:3e:21:
         42:62:b8:b6:4e:a0:16:ad:9d:5e:5c:3f:4a:19:cb:33:30:9e:
         f4:06:1d:85:63:39:e9:ee:1a:ee:b6:c0:40:f0:5c:b5:2b:5d:
         76:df:f8:ff:f2:12:55:51:04:01:20:31:e7:3f:c4:e0:6d:e4:
         26:f0:e8:63:88:8c:70:fe:5d:57:d2:2e:f0:e2:b5:9c:d2:4e:
         e4:9c:54:74:94:c0:93:5a:38:c5:bb:8b:94:70:d9:d4:1e:2f:
         6b:dc:52:ec:1a:b5:5e:e8:af:d3:55:b3:a9:d4:e3:c5:7f:7a:
         36:93:51:a6:1f:de:10:97:8b:d4:2a:3a:f9:76:ac:31:bd:b5:
         67:5d:c8:b2:2e:87:59:26:fd:c5:78:b4:77:43:84:48:2c:13:
         11:2d:95:d9:9b:ce:a7:76:a9:f3:b9:0a:23:27:b8:bf:31:15:
         d7:03:b6:d5:f1:56:5f:f4:5a:92:bd:ac:44:87:ca:92:05:86:
         ae:03:9e:94:da:8f:76:88:14:bc:6c:d7:c2:98:6a:96:75:5c:
         1b:10:23:1b:b9:76:c1:b2:f7:36:f0:df:9c:0f:50:c5:4a:c6:
         79:fc:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----