Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
File:                     M-hGYU4VRCxoAFpeP85ct1bgSn8.mft (raw, json)
Hash identifier:          LiTo1hxWoALvwbj4iJ0G2OopdRmpSj0cceiRifUfoX0=
Subject key identifier:   BE:B9:E2:40:62:21:F7:BA:FF:1F:4A:F9:43:CB:B1:A0:F1:E7:72:62
Authority key identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F
Certificate issuer:       /CN=F3613F08AF/serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
Certificate serial:       0451
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
Manifest number:          0450
Signing time:             Thu 24 Sep 2026 03:45:36 +0000
Manifest this update:     Thu 24 Sep 2026 03:45:35 +0000
Manifest next update:     Sat 26 Sep 2026 03:45:35 +0000
Files and hashes:         1: M-hGYU4VRCxoAFpeP85ct1bgSn8.crl (hash: 0VC/AwIsqvTw8BQ5oPLB96pgRFfrFw5J8AD6aImRDNg=)
                          2: AC0A32D0690611EEB3384E8B4AD9E6FC.roa (hash: kErDXNR3ZNhWVzlb8Vo/Il2bfhwKojLKehJI3WdRMNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613F08AF, serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
        Validity
            Not Before: Sep 24 03:45:35 2026 GMT
            Not After : Sep 26 03:45:35 2026 GMT
        Subject: CN=6ab49ce0-745c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:d0:9b:9b:b5:82:bf:07:86:2f:87:d3:2a:
                    ae:b9:80:5c:73:e8:50:19:12:d9:ed:a8:15:a3:a8:
                    cf:1f:b2:82:27:dc:fb:e5:db:09:3b:1d:45:22:01:
                    1c:66:91:5c:79:1c:53:92:76:36:07:49:56:b1:58:
                    59:99:25:1b:86:e0:63:86:76:c0:dc:9f:15:3a:3d:
                    13:9f:3b:2f:35:24:09:47:b2:2a:5b:c3:0d:fa:33:
                    f5:6a:79:65:b0:c0:5b:ff:0e:69:4c:ae:bd:6a:d8:
                    b3:e1:39:96:2f:bb:3e:12:9d:a2:05:3c:49:c6:90:
                    8b:53:ae:f6:5b:54:db:9e:f4:23:a5:0b:76:6a:d6:
                    e3:c1:a4:37:b1:7c:4f:c1:de:b4:ed:67:47:68:d2:
                    7d:ce:4f:74:7b:3e:5f:e2:0d:22:1b:aa:57:a3:8c:
                    23:c8:3e:a5:fd:0b:c3:6d:e8:40:75:04:cc:01:73:
                    f2:77:9d:5c:b2:82:78:50:87:53:44:97:03:bb:6c:
                    6e:ce:64:1d:fa:89:67:c3:bc:22:03:89:51:89:d8:
                    a4:4c:66:54:f0:f1:ac:d1:ac:df:08:9b:cd:70:eb:
                    47:f4:2d:96:12:8d:b3:e2:b0:57:b7:34:fa:3d:6e:
                    13:88:df:f2:c7:6c:cc:1d:06:b1:0a:ff:b7:a0:ae:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B9:E2:40:62:21:F7:BA:FF:1F:4A:F9:43:CB:B1:A0:F1:E7:72:62
            X509v3 Authority Key Identifier:
                keyid:33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7b:cd:01:7f:7d:18:64:bd:eb:3c:e1:1e:9b:eb:46:ae:12:
         64:08:51:8d:8b:f0:08:61:e9:19:06:f0:44:03:9d:56:c8:dc:
         bb:66:15:db:96:64:ab:b2:f7:45:31:96:7e:05:b6:47:8d:04:
         82:1e:45:d4:a1:fb:4f:0c:87:38:38:04:6d:5f:6a:5c:04:e8:
         85:48:b4:23:08:5b:46:25:db:3c:ed:53:68:4b:ef:31:0f:81:
         2c:22:ab:ca:0c:23:e3:50:9c:0e:51:56:59:69:4a:bb:7a:b6:
         6a:9d:8a:1e:e1:db:5b:d0:79:35:b5:07:67:91:5e:62:39:8f:
         cf:6d:29:f4:53:52:fe:7c:15:4d:eb:b1:60:ab:fd:4f:7f:95:
         81:59:0d:ad:22:6c:5a:0f:e4:f1:94:0e:e3:76:6d:92:ba:b2:
         d0:f4:9e:23:78:67:37:a7:a6:04:4e:dc:20:3f:2c:82:cc:0d:
         6f:cd:96:1f:15:4a:d8:a5:29:c6:8a:ac:09:16:8b:2e:86:d0:
         74:24:2c:a7:b8:53:51:6c:9e:92:bd:c6:fa:c8:86:3d:2e:77:
         7f:27:a4:d2:cc:3b:ff:cb:88:8f:6b:57:0f:f5:b6:5f:73:ad:
         3d:20:64:fb:73:1d:91:64:3d:5b:08:b8:a1:4a:93:e4:db:c5:
         66:80:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----