Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          ExOT0KYCsP6Y6KgY4vNtCm6aLUe3J+Q41+SE/pKkCLA=
Subject key identifier:   89:03:C8:30:1A:30:F6:EC:C7:DD:EB:EA:E5:EC:68:67:2F:66:14:C6
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       021A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          021A
Signing time:             Mon 24 Aug 2026 04:59:16 +0000
Manifest this update:     Mon 24 Aug 2026 04:59:15 +0000
Manifest next update:     Wed 26 Aug 2026 04:59:15 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: bffCt/P4uPLK218V28P2BRJeb2m+XbKwSTxx6orZRqM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 26 Aug 2026 04:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Aug 24 04:59:15 2026 GMT
            Not After : Aug 26 04:59:15 2026 GMT
        Subject: CN=6a8bcfa4-52e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:0b:82:28:6c:e9:73:e8:cb:80:9c:68:75:
                    48:fe:84:e8:60:fc:c2:c0:0a:eb:04:c5:9a:1f:b7:
                    9b:d6:c9:85:70:84:ba:92:b6:61:47:82:15:49:28:
                    34:36:29:2c:95:4a:87:1d:b0:93:34:11:f1:24:40:
                    42:51:58:25:c4:9f:f2:2a:3e:3c:23:ff:2d:c2:4f:
                    da:a5:26:b3:d2:03:c7:70:8a:60:56:8d:c8:02:a9:
                    d2:3f:59:bb:84:89:16:32:d4:04:3e:b8:22:3c:c0:
                    53:60:1d:0a:b0:c0:80:c4:9d:ce:a7:3b:d6:d9:a6:
                    a6:d8:58:a6:e1:af:4a:66:cd:17:9d:84:1e:fa:5c:
                    37:48:64:14:7e:00:72:ed:b1:b3:cb:55:0c:d3:03:
                    72:46:59:60:bd:17:d9:0d:50:a8:51:e5:65:43:43:
                    6d:51:78:5b:18:8f:e9:8a:91:dd:3f:5c:93:1b:55:
                    e8:c5:80:8c:70:f5:4e:ce:42:ca:c5:dc:cd:a3:81:
                    35:58:8d:2f:8f:e2:3a:ee:a1:40:1c:b2:01:82:c7:
                    1d:2f:8e:5f:e7:f8:52:be:18:78:80:b9:31:0f:18:
                    48:85:7b:c6:3c:a6:e6:e1:8e:c5:ac:2e:f9:d1:f0:
                    45:41:ba:1a:ec:5c:6a:08:e4:e0:2f:1a:82:31:8d:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:03:C8:30:1A:30:F6:EC:C7:DD:EB:EA:E5:EC:68:67:2F:66:14:C6
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b9:1c:fe:be:3a:4f:82:e6:d4:22:e2:11:fc:bf:60:07:01:
         74:16:b3:0b:9b:16:90:4e:15:f3:92:3d:a9:96:35:2e:f3:aa:
         16:cf:30:ca:65:15:1e:e6:24:c6:ed:ef:7b:49:56:f5:fb:50:
         2e:f0:2b:40:b7:1d:fe:f8:d8:38:e2:c3:64:bd:a3:aa:c1:64:
         64:fa:04:f9:76:5a:07:43:cd:3f:03:5a:4e:54:e8:c2:e4:93:
         78:12:0e:be:5e:d9:dd:26:69:8f:48:26:71:0e:ac:42:d3:37:
         89:d9:e1:84:ec:04:37:73:c8:eb:74:f2:ce:3f:a1:ad:ee:c9:
         1f:91:89:fb:72:77:2e:0f:2e:e4:89:88:11:60:4e:15:31:f2:
         5a:a5:97:f7:f3:14:1a:70:e1:75:dd:29:ae:47:5b:2b:c3:b6:
         0c:54:71:d2:cd:68:c6:ae:8e:66:2d:3a:99:5f:82:c5:ff:09:
         4e:be:7c:77:b2:91:fe:84:dd:91:8a:66:02:ee:ed:1f:3d:34:
         46:47:23:3b:80:fd:b7:ca:25:58:94:eb:4d:31:84:0a:0b:66:
         4f:c4:de:57:a6:d4:5b:4f:75:5d:ab:5e:e0:9c:5e:2a:ce:a8:
         96:49:99:ee:4c:bb:76:8d:99:8b:04:2e:c3:79:4c:6b:3b:58:
         1e:dd:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----