Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
File:                     iXuXO6A-uTTexeB2EobT3XyBo7c.mft (raw, json)
Hash identifier:          GzEXPScQxfxZBc/fbCEH28PBxIrEESZHQ0N0zc7UTiI=
Subject key identifier:   2E:DA:18:16:59:D4:0D:8A:AA:55:05:8D:B7:49:3D:3A:03:EE:60:D3
Authority key identifier: 89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
Certificate issuer:       /CN=F36D3DBFAR/serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Certificate serial:       0219
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
Manifest number:          0216
Signing time:             Mon 26 Oct 2026 04:55:37 +0000
Manifest this update:     Mon 26 Oct 2026 04:55:36 +0000
Manifest next update:     Wed 28 Oct 2026 04:55:36 +0000
Files and hashes:         1: iXuXO6A-uTTexeB2EobT3XyBo7c.crl (hash: JcpfcdnwT57a/IMtPBzzCaDi3rzHwcnnYf4wD6HspKs=)
                          2: 754FDAB02D8F11F193C4B7B5DAE4EC9C.roa (hash: fct50P7fbketjS3C+7ySeYCZCzp4FKWcw+jHMqXh/7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                          rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAR, serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
        Validity
            Not Before: Oct 26 04:55:36 2026 GMT
            Not After : Oct 28 04:55:36 2026 GMT
        Subject: CN=6adedd49-d209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:71:3c:d7:64:a8:0f:52:4c:4b:52:ea:aa:
                    f3:b5:18:91:78:51:dc:4d:0f:10:98:63:72:05:5d:
                    2d:51:59:ba:ec:e7:ea:0a:dd:cd:db:42:0f:d9:80:
                    b0:87:ca:99:cc:e3:75:7a:d1:81:a2:b3:6f:26:3c:
                    24:c1:a0:02:14:9e:fe:50:80:8b:c5:26:0b:24:4f:
                    0c:ac:54:64:f7:fa:6e:3d:fd:7f:d7:06:05:1e:40:
                    2f:e3:58:a6:6e:23:c4:05:4d:b1:4d:9a:41:bb:a6:
                    17:1e:6a:2c:4a:51:31:d4:9d:d9:93:18:0c:2e:6d:
                    d7:d6:bf:7f:c4:b2:1f:b6:fc:b9:6a:9e:bf:dd:49:
                    aa:98:c4:15:a9:a0:51:50:d7:b4:96:8e:e9:4f:3a:
                    26:df:99:0d:de:97:8d:b7:97:fb:3e:67:f0:0c:30:
                    4d:d1:30:7f:32:ad:99:75:bb:62:b8:25:3d:a2:9e:
                    51:74:bc:12:64:aa:60:7f:6b:86:59:3f:be:23:32:
                    7d:9a:06:fd:e5:a8:74:f0:a3:12:72:58:7c:c1:89:
                    de:d3:0f:f2:2e:9e:6c:6f:f5:76:84:f9:10:80:6a:
                    08:d1:3c:6f:e3:f4:96:a2:3a:4a:8c:d9:6d:54:b1:
                    dc:a6:06:ac:eb:24:bb:fd:b8:fc:9e:b9:5a:72:0a:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:18:16:59:D4:0D:8A:AA:55:05:8D:B7:49:3D:3A:03:EE:60:D3
            X509v3 Authority Key Identifier:
                keyid:89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a9:90:95:21:85:ec:2f:58:61:ea:91:f7:de:04:c0:bb:c5:
         5c:5f:37:2a:a0:62:1f:b0:6a:c5:72:db:d5:39:6b:6f:78:e4:
         10:58:86:7c:07:d5:bc:ba:79:5b:58:90:45:d5:08:bf:93:60:
         40:7f:7f:93:8d:a8:f1:47:3a:7a:01:4d:61:22:d6:1f:1e:8a:
         57:e1:bd:76:33:22:14:19:d4:c5:92:12:64:2b:1b:93:c3:39:
         86:61:0c:67:ec:ef:5d:dc:7c:ef:17:24:24:95:64:12:fd:83:
         7b:29:5f:f0:73:48:fb:d1:f8:6c:1b:76:5e:e6:95:71:39:6a:
         9e:0f:d0:58:1b:92:d1:9d:db:b9:d7:2a:e2:48:94:ad:c0:80:
         ca:18:fd:ec:f5:c0:a9:4e:59:2d:4a:33:ae:51:01:02:7c:04:
         c0:37:58:a7:76:0a:e4:4c:81:dc:8c:1a:dc:bf:ab:38:06:33:
         99:95:5e:29:07:bc:fc:3c:9a:55:c6:90:1e:e8:8d:24:76:3e:
         01:d8:c4:47:7c:f3:51:ce:0c:3d:d9:db:80:b1:b2:4f:56:19:
         67:10:76:cc:9c:dd:cd:8f:56:66:14:68:0c:62:13:3c:a6:74:
         2d:62:fa:85:9c:4b:31:c3:3d:6e:3b:aa:e8:a4:81:38:90:84:
         5b:a7:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----