Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          ZiL7/QbZsfTbUQok3cSF+Ru+zjAe8QLK8GVyC2p8WDM=
Subject key identifier:   EA:DE:AD:54:5B:BF:7A:27:73:6E:28:62:94:29:F4:E8:31:33:7E:6E
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0A95
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0A94
Signing time:             Wed 26 Aug 2026 01:24:15 +0000
Manifest this update:     Wed 26 Aug 2026 01:24:14 +0000
Manifest next update:     Fri 28 Aug 2026 01:24:14 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 7kzkGHVE/EAzf2uDLZDmth/wMnNd/Kx7UU21nN9S+24=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2709 (0xa95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Aug 26 01:24:14 2026 GMT
            Not After : Aug 28 01:24:14 2026 GMT
        Subject: CN=6a8e403e-dac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:f4:23:c3:c9:9b:0b:9c:75:a3:af:6a:25:
                    8d:d7:17:90:eb:95:37:8e:3e:02:24:e0:ac:01:da:
                    0f:6b:4b:ef:48:54:84:0a:6d:ed:53:51:79:a5:47:
                    c5:ea:87:60:93:6f:05:7e:c8:83:1d:f3:94:5c:02:
                    c1:d4:9b:e6:a2:7a:bd:40:3e:39:93:66:ea:c9:68:
                    e9:0b:06:c9:3c:88:74:73:67:c7:ad:dc:2c:bd:19:
                    53:a8:d7:48:3d:17:9d:c9:44:bb:f7:da:f8:24:83:
                    f7:38:3b:73:e3:a9:10:79:f7:0d:a8:ec:d5:ef:a5:
                    fc:d2:bc:4f:cf:24:3d:08:b9:25:6f:7a:84:2a:d7:
                    48:7a:17:fc:28:2a:54:a4:22:14:52:9c:bb:fd:8e:
                    e9:4a:dd:94:de:74:b1:11:6d:57:3f:4e:4e:cd:50:
                    16:70:72:b0:7b:f6:7b:b3:24:5f:56:a0:62:ff:2f:
                    da:5f:70:2c:79:5e:1c:75:ae:98:28:81:6d:99:38:
                    3d:1f:5e:a3:f4:ce:1b:d7:e4:bc:ce:b5:dd:6b:f6:
                    c9:98:7d:e5:03:d2:e8:f0:87:4d:6f:75:06:6f:8b:
                    4e:1d:fd:ec:93:36:84:fa:d7:1e:7c:31:73:8e:f9:
                    de:36:44:50:2b:2d:44:86:9c:57:f9:03:57:4d:f1:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DE:AD:54:5B:BF:7A:27:73:6E:28:62:94:29:F4:E8:31:33:7E:6E
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:93:6a:76:ea:e6:45:7e:04:d1:13:4b:12:5d:1a:5c:49:7c:
         48:24:0a:50:e7:46:33:81:4d:e8:62:4f:b0:05:5c:40:37:e3:
         61:43:db:93:c3:c9:8e:8e:58:df:78:81:2d:66:b1:3f:21:3b:
         3f:b7:0d:aa:00:6e:7d:0b:4a:d8:e1:7c:ef:5e:e2:1e:2e:24:
         ae:0f:e6:2e:3a:06:cd:5f:f2:b2:69:46:f0:f0:c0:a1:c6:e1:
         33:fc:90:24:4b:24:04:d1:72:fd:7b:39:63:61:57:35:cb:d1:
         c1:11:40:09:e3:de:5f:dc:5a:95:c7:f8:ec:9f:11:b4:24:9c:
         d8:4d:5a:e8:82:64:c8:7d:2a:dd:ea:ab:4b:9d:6c:23:32:dc:
         5c:2f:48:fb:c5:0d:f1:c4:70:ef:82:c3:91:8c:dc:a8:44:bb:
         45:f3:71:91:8f:62:ce:8e:55:bd:6b:4d:9e:a8:58:a6:83:4e:
         6c:7d:bf:15:fa:ec:f6:1c:cb:d7:21:9a:19:9f:02:c1:aa:44:
         88:9c:16:c7:49:f3:bb:0b:0e:79:77:8d:ec:a3:3f:07:0f:44:
         4e:5e:27:40:6d:18:13:f5:28:c4:9c:43:06:f2:a8:b7:a2:7e:
         8e:3f:51:a0:e1:b8:97:c5:bb:90:ce:23:fa:a3:f1:d9:07:1f:
         29:94:b3:e2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDg2MzdBUjExMC8GA1UEBRMoQUM3NTkzOUNBNzJCOTc0REU0NUUyMTcyMDhEOUUw
NkU3RTFCQUMwMjAeFw0yNjA4MjYwMTI0MTRaFw0yNjA4MjgwMTI0MTRaMBgxFjAU
BgNVBAMTDTZhOGU0MDNlLWRhYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCx6PQjw8mbC5x1o69qJY3XF5DrlTeOPgIk4KwB2g9rS+9IVIQKbe1TUXml
R8Xqh2CTbwV+yIMd85RcAsHUm+aier1APjmTZurJaOkLBsk8iHRzZ8et3Cy9GVOo
10g9F53JRLv32vgkg/c4O3PjqRB59w2o7NXvpfzSvE/PJD0IuSVveoQq10h6F/wo
KlSkIhRSnLv9julK3ZTedLERbVc/Tk7NUBZwcrB79nuzJF9WoGL/L9pfcCx5Xhx1
rpgogW2ZOD0fXqP0zhvX5LzOtd1r9smYfeUD0ujwh01vdQZvi04d/eyTNoT61x58
MXOO+d42RFArLUSGnFf5A1dN8YahAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU6t6t
VFu/eidzbihilCn06DEzfm4wHwYDVR0jBBgwFoAUrHWTnKcrl03kXiFyCNngbn4b
rAIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4NjM3L0ZDQjQ3QUZBODM5NzExRTlCQUM3OUExQUY4QUVBMjI4L3JIV1Ru
S2NybDAza1hpRnlDTm5nYm40YnJBSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JIV1RuS2NybDAza1hpRnlDTm5nYm40YnJBSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDg2MzcvRkNCNDdBRkE4Mzk3MTFFOUJBQzc5QTFBRjhBRUEy
MjgvckhXVG5LY3JsMDNrWGlGeUNObmdibjRickFJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASk2p26uZFfgTRE0sSXRpcSXxIJApQ50Yz
gU3oYk+wBVxAN+NhQ9uTw8mOjljfeIEtZrE/ITs/tw2qAG59C0rY4XzvXuIeLiSu
D+YuOgbNX/KyaUbw8MChxuEz/JAkSyQE0XL9ezljYVc1y9HBEUAJ495f3FqVx/js
nxG0JJzYTVrogmTIfSrd6qtLnWwjMtxcL0j7xQ3xxHDvgsORjNyoRLtF83GRj2LO
jlW9a02eqFimg05sfb8V+uz2HMvXIZoZnwLBqkSInBbHSfO7Cw55d43soz8HD0RO
XidAbRgT9SjEnEMG8qi3on6OP1Gg4biXxbuQziP6o/HZBx8plLPi
-----END CERTIFICATE-----