Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
File:                     F9XbYUvL122qn_GpMVkVxH-Je_M.mft (raw, json)
Hash identifier:          ok5k7WGZUNHeWANbiHakvjHmKrGWE/cqRSqMDPc81jE=
Subject key identifier:   D2:39:0A:5D:3E:90:17:40:52:15:17:11:8E:43:6C:EC:FD:26:D3:75
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Certificate issuer:       /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial:       0633
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
Manifest number:          062C
Signing time:             Mon 28 Sep 2026 02:51:26 +0000
Manifest this update:     Mon 28 Sep 2026 02:51:26 +0000
Manifest next update:     Wed 30 Sep 2026 02:51:26 +0000
Files and hashes:         1: F9XbYUvL122qn_GpMVkVxH-Je_M.crl (hash: DDSyOOi5/UTaIcXhyVpana5/UtaxyT9AD43/KKv3v7A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361153AAF, serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
        Validity
            Not Before: Sep 28 02:51:26 2026 GMT
            Not After : Sep 30 02:51:26 2026 GMT
        Subject: CN=6ab9d62e-54d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:51:40:92:00:08:e1:bb:d9:4d:19:36:38:
                    04:62:c7:c5:b9:9a:84:de:68:8d:27:ec:15:f2:d6:
                    22:dc:9d:12:dc:e3:50:41:91:2c:fc:cb:2f:2e:64:
                    d9:ea:9c:68:74:a0:1b:72:1e:58:bf:ca:e7:5e:6d:
                    65:d9:7d:90:4f:43:a9:c8:59:35:dd:dd:80:40:28:
                    34:64:92:a4:db:e9:1b:46:e7:6c:d5:25:1b:6f:63:
                    87:0c:22:dd:e4:f8:c6:6e:94:dd:cd:5c:5b:59:8b:
                    a5:ee:f0:eb:40:69:d3:1c:c1:a1:62:7d:93:77:90:
                    6a:4c:28:9d:ee:78:27:80:fa:9f:49:e6:47:51:dc:
                    01:29:c8:3a:1d:87:f6:d0:2f:b4:50:bd:3e:54:c5:
                    ec:24:5c:2b:9a:f9:d4:da:89:44:0f:c0:10:bf:b6:
                    d3:92:d9:df:40:f5:69:04:a1:8d:a5:e0:b2:82:8f:
                    84:0e:a0:47:57:0c:52:8b:14:50:65:30:7f:99:e2:
                    ea:e8:b2:81:00:96:a8:4a:12:48:1c:22:e5:9c:50:
                    b9:c1:4f:3a:56:5c:60:01:5e:d6:1a:0b:5b:d9:ac:
                    99:bc:18:d3:06:dd:a2:27:f5:07:e2:e1:cd:c8:e0:
                    56:cd:ab:e6:4d:8a:17:15:37:1f:60:f2:27:ee:11:
                    34:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:0A:5D:3E:90:17:40:52:15:17:11:8E:43:6C:EC:FD:26:D3:75
            X509v3 Authority Key Identifier:
                keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:29:c6:b7:12:9f:81:30:08:c3:b4:5b:53:eb:79:d1:98:
         ea:6e:61:19:d8:c8:6b:87:84:48:ed:33:2e:1f:b5:1e:55:52:
         59:58:b1:75:60:bc:8c:bf:72:fb:ee:b2:3c:c9:a8:88:cf:2e:
         56:ac:7f:fa:57:5a:ba:d4:8d:20:c2:5d:15:e6:cc:ef:36:c3:
         21:b5:ca:90:35:8a:68:07:83:43:cf:9a:06:9c:40:33:67:18:
         67:08:cc:a7:37:65:ba:21:93:a7:c0:c4:2e:92:79:6f:38:d2:
         4e:8a:df:e6:e2:63:f4:d2:be:91:10:f6:7a:fe:8c:eb:be:e1:
         9f:c6:0a:52:c5:4d:da:16:32:2c:5a:48:9c:f1:49:68:4f:0f:
         a5:fb:11:c5:0d:02:aa:bb:9f:9e:3d:c9:5c:e9:07:92:21:10:
         08:e7:ac:ea:aa:83:73:bd:e8:0c:39:5b:41:84:be:b0:da:8a:
         ea:8f:68:65:a7:d8:5a:16:67:2a:5c:23:d2:67:7d:87:19:69:
         fe:94:0c:38:53:ac:e4:e9:b4:a5:da:9f:5d:76:5a:d2:46:5d:
         c0:6b:55:1c:49:81:7f:63:31:e7:dc:1e:13:85:2f:84:af:d1:
         1c:eb:79:aa:17:31:39:68:af:40:85:14:fe:f6:a4:61:ca:c1:
         c6:b2:20:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----