Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          aOwlD0yTRjOHvYfh4hL/Me4lF8SRYLctKqM6LAurwT8=
Subject key identifier:   C2:74:38:D0:45:8F:0B:C8:FB:EF:FB:20:CE:E7:3B:5D:E0:D4:9A:9A
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       0391
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          038E
Signing time:             Sat 26 Sep 2026 04:09:30 +0000
Manifest this update:     Sat 26 Sep 2026 04:09:29 +0000
Manifest next update:     Mon 28 Sep 2026 04:09:29 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: on0S5gF8DCrxh6WYy9bx5y6aUXUOv4IP+AhjH5tiIRc=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: Sep 26 04:09:29 2026 GMT
            Not After : Sep 28 04:09:29 2026 GMT
        Subject: CN=6ab7457a-ecd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:f4:c9:f9:46:c2:31:8d:40:34:79:4c:b4:
                    c9:f0:e5:3d:3a:f4:0b:d0:1a:d7:18:e6:11:3b:a0:
                    ca:a4:61:e1:2d:29:2b:56:d9:52:4d:0d:2b:b3:5a:
                    ac:af:ae:74:66:23:13:35:b0:59:ed:ac:99:86:ad:
                    17:c4:b5:9d:ba:18:3e:65:78:9d:fe:20:a6:25:88:
                    8e:aa:86:1a:5d:eb:25:ae:9e:58:19:70:fc:7f:1f:
                    6f:cc:b1:ad:ec:b4:95:90:c7:71:ca:d8:c9:26:2b:
                    7f:f2:2d:3f:42:d8:dc:ba:29:57:51:91:d9:55:b7:
                    41:af:1d:45:4e:05:53:3b:10:9d:e2:46:59:c3:95:
                    b2:f0:af:90:3c:de:eb:88:2a:1e:b1:03:19:f7:c9:
                    78:b5:cf:bf:89:6d:a0:86:7a:23:0b:9b:11:1a:1c:
                    81:83:f9:1f:7a:1c:06:74:28:41:7e:ca:b5:63:a3:
                    68:ed:a3:cd:28:56:ed:e3:cf:d6:06:87:f0:db:c7:
                    bf:3f:ba:e1:73:24:4b:9b:27:cd:a5:64:6e:46:c5:
                    f9:2f:8e:d5:cb:cd:62:c0:90:95:8e:6e:b0:df:bd:
                    99:99:57:8d:4e:ee:d5:32:63:a1:40:a7:7f:d5:a5:
                    5d:d3:9a:4d:cf:ea:3f:a4:9c:12:da:93:5b:80:c0:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:74:38:D0:45:8F:0B:C8:FB:EF:FB:20:CE:E7:3B:5D:E0:D4:9A:9A
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:35:12:ff:f0:30:7c:3b:70:0b:28:9b:f0:49:60:b9:88:22:
         50:1c:17:ff:c7:a6:72:60:52:dc:39:a2:68:a6:a7:69:73:a2:
         51:68:13:fe:2b:ca:4a:f4:b0:f7:88:72:89:94:99:e5:7f:12:
         a5:67:81:83:8f:3c:7c:e9:5f:e9:a6:13:80:97:c8:50:20:05:
         0c:4c:18:d6:2d:7d:3e:89:28:df:4a:a8:d1:0c:eb:3d:ff:01:
         25:cb:04:57:4b:19:f0:3a:8b:4b:26:d9:b4:0e:b0:2e:fe:6d:
         7d:b5:66:29:96:1f:72:ad:25:c5:19:78:d1:bd:50:5b:3a:26:
         b4:31:87:bd:10:36:c5:12:d3:46:e1:53:cc:2f:64:75:4d:61:
         21:61:21:39:1e:a4:02:11:70:79:aa:fc:a6:08:e1:9b:95:ca:
         26:72:b8:90:b7:fd:9f:66:b3:fd:c8:df:da:67:a4:f1:45:f3:
         ce:29:a5:8d:cc:fa:66:b9:6d:5c:b3:9f:d2:46:11:62:33:ad:
         bf:06:8b:82:83:04:35:cc:f5:39:1d:9a:71:20:8f:58:4f:4d:
         d9:c4:32:67:48:bb:61:90:f6:b7:66:62:7a:56:ac:cd:48:7e:
         e9:0c:e1:a2:29:a0:e9:f9:a9:81:68:64:e0:8f:e3:9f:a5:4c:
         24:97:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----