Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.mft (raw, json)
Hash identifier:          8KFN4jYDTQUFQAwC+qhuQu9+fIZw4AouNsNZkymMhQc=
Subject key identifier:   0F:B5:4E:7B:C5:2B:0C:24:CD:1C:59:DB:2A:F0:B5:3B:AE:F1:DB:47
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Certificate issuer:       /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial:       02CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
Manifest number:          02CA
Signing time:             Fri 30 Oct 2026 04:39:12 +0000
Manifest this update:     Fri 30 Oct 2026 04:39:11 +0000
Manifest next update:     Sun 01 Nov 2026 04:39:11 +0000
Files and hashes:         1: jho3RHX7X1BwyGbGDdVeiurPcXM.crl (hash: iLnwTz4NUciKPg4FCU0qWAbKycN0ZqQOwpmEFA4iscw=)
                          2: 77A53CFAAD8011EF8D542C9E762E951A.roa (hash: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                          rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AR, serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Validity
            Not Before: Oct 30 04:39:11 2026 GMT
            Not After : Nov  1 04:39:11 2026 GMT
        Subject: CN=6ae41f70-56a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:f5:e1:73:04:66:14:81:e2:db:a6:b3:d0:
                    22:13:ad:2a:cf:e5:11:c3:69:08:07:47:6e:43:2a:
                    a1:b4:ce:4d:6c:d2:2d:33:34:49:a0:84:83:b9:5e:
                    79:ea:57:f5:47:b3:77:34:f0:e3:a3:a0:67:a1:75:
                    12:86:cf:5e:2f:11:35:ad:3c:fc:44:e9:34:3f:61:
                    60:c2:43:98:f3:03:56:da:4a:d1:75:61:f2:a7:a4:
                    86:c9:bc:0e:ea:a4:0c:40:d5:98:06:70:04:ae:6f:
                    a8:ce:a0:7b:43:3c:0b:56:1e:93:f9:c2:52:eb:0c:
                    dd:e6:bd:8c:98:19:d0:32:d9:50:b8:7b:43:e0:d0:
                    27:59:56:4b:8f:97:83:d5:f5:1c:6a:3c:29:6c:c7:
                    c6:b0:7e:1a:fd:97:bf:95:61:41:6d:3f:5f:f0:ec:
                    36:14:a4:32:c1:a6:82:aa:92:6c:93:c0:bd:d9:c7:
                    60:0a:88:76:f4:30:60:d2:1f:e4:f4:22:4e:58:7b:
                    d5:f6:08:50:01:b4:d6:0a:da:43:de:6c:a0:c7:34:
                    b2:2a:c4:9f:7b:aa:fc:b4:51:dd:10:11:32:2a:b2:
                    fe:0c:02:0b:8c:a6:24:e0:88:da:9d:fe:40:27:06:
                    b2:3c:b8:91:fd:44:a8:bb:2c:52:b4:77:33:41:1a:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:4E:7B:C5:2B:0C:24:CD:1C:59:DB:2A:F0:B5:3B:AE:F1:DB:47
            X509v3 Authority Key Identifier:
                keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:2d:c9:fc:cb:5f:d4:fd:35:4b:67:57:65:04:4e:41:2b:4e:
         42:6a:d1:ff:00:c5:f2:21:82:11:88:15:f3:7d:fa:26:5b:e8:
         9b:d2:d1:fb:0e:8f:d8:54:4b:57:58:d7:05:5d:08:43:f4:47:
         58:eb:29:69:87:91:a2:34:3a:5c:ad:bc:b9:1a:c0:09:67:29:
         f0:6e:fc:99:b4:80:95:d7:c6:ac:c0:36:36:98:ed:5f:52:73:
         20:42:7d:00:39:35:75:89:4e:0f:e9:c3:9c:fa:9e:b0:68:ab:
         df:bd:78:43:fc:7d:10:5e:ca:8c:91:c1:f2:9d:e1:31:64:ca:
         a3:9b:6a:74:a1:17:bc:0f:48:ee:c5:59:17:0c:ce:0a:02:b2:
         d3:07:8f:0b:9e:82:f5:7a:66:91:a8:9f:3d:93:dc:d5:90:59:
         75:37:d3:86:48:25:8e:17:71:b7:14:a2:9e:a9:8f:62:72:b8:
         9b:e3:e2:10:89:a4:17:ca:28:15:60:07:90:58:12:7d:34:18:
         e0:30:68:3a:c5:f6:1d:82:39:ee:e9:88:d2:44:3f:a0:ab:9b:
         f0:48:79:48:3a:71:64:df:83:bf:63:57:53:63:76:e2:77:d3:
         71:d1:8d:d2:a9:34:e6:e3:88:bd:2b:f4:83:d6:40:d6:12:9f:
         c1:6d:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----