Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
File:                     KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft (raw, json)
Hash identifier:          gdDycD9vxyJdAXgWZEkJ+NOWc0RP1PRf2gwcQnBoAnU=
Subject key identifier:   2C:17:4A:66:E5:51:5A:74:5C:C9:6D:4B:3E:E7:6E:34:99:48:52:50
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       0128
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
Manifest number:          0120
Signing time:             Wed 23 Sep 2026 05:20:42 +0000
Manifest this update:     Wed 23 Sep 2026 05:20:41 +0000
Manifest next update:     Fri 25 Sep 2026 05:20:41 +0000
Files and hashes:         1: KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl (hash: /4e8AC+baZfbzP6TAoRdX6madBexS8vUw66qRwz7yc4=)
                          2: 17A6E9ECE0F711F0A114E9DFDAE4EC9C.roa (hash: oUTiQVRlxq9bUqRcd4ce+yhUVNhKDDkTPe1EsY3iBbE=)
                          3: 5E79FB8CE2AC11F0A6234B98DAE4EC9C.roa (hash: Lb+wrneK44yBD0CAONsxLgg7KqMCARKbOXH5GvTo2qM=)
                          4: 08555AE2E2AE11F0B1962FA1DAE4EC9C.roa (hash: 3dtsbRMFUQeDPfQli+f46C9vMLlNlqAr7VBqoPX8KyQ=)
                          5: A7C55AB0E2AD11F0BB83F89EDAE4EC9C.roa (hash: 6WEM00ZKqEuwevPcgj7EKqQZy0f2qOX5R1pO+pIZTdk=)
                          6: 0A5D7A3CE2AD11F08E50859CDAE4EC9C.roa (hash: l9uO6T9qnIveSVMO0EAfStM5WqM8vIz3UlicMoWrw2s=)
                          7: D5DEA21CE2AD11F0900CC4A0DAE4EC9C.roa (hash: AsFQ03ZNXkHPbbINQUBNQ5N+wl37nGduJvWmVv5sY+I=)
                          8: BEF7090AE2AC11F08942E698DAE4EC9C.roa (hash: FhBtGfwBJqyBaCCf7eyjt0uPvyWt1f6aEoLSZs81xgc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Sep 23 05:20:41 2026 GMT
            Not After : Sep 25 05:20:41 2026 GMT
        Subject: CN=6ab361aa-1f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:a4:fc:67:58:ae:8c:e9:fb:5c:3c:41:1b:
                    77:bb:34:fb:77:3b:f3:e3:78:2c:ac:71:ed:54:39:
                    af:ed:d5:90:a2:de:ce:b4:c6:10:6e:26:d2:0b:26:
                    7b:6e:0f:0c:8c:0d:63:a9:d2:e8:e2:2d:f8:0b:40:
                    cb:94:cf:18:70:0b:05:da:69:ba:4e:75:b0:8c:ee:
                    4b:5c:c8:28:99:a1:a3:8a:1b:22:c4:7f:a4:be:23:
                    a8:33:fc:28:60:ac:d9:8f:ed:87:33:d2:b5:d4:b2:
                    58:4e:19:18:f9:b8:2a:41:7c:c5:b3:1f:7c:18:e8:
                    12:e4:23:b1:44:00:99:81:86:8c:74:b0:b0:ac:b5:
                    79:11:31:45:a8:7d:7f:82:96:7f:ad:df:d6:29:34:
                    81:f3:26:cf:5b:f1:8b:a7:72:3d:12:83:f7:05:3e:
                    da:31:c5:67:ff:20:dd:6b:ae:4f:40:4e:05:ed:e9:
                    d8:73:25:80:ef:70:28:74:11:4b:68:7a:06:bb:2b:
                    5c:1d:32:c5:7a:87:f0:92:c4:ae:c0:f3:40:f3:56:
                    9b:79:db:58:a2:5f:71:22:18:16:f6:ea:f5:01:5b:
                    63:b6:1f:d5:60:03:ba:1c:ea:6e:2b:3c:ec:99:57:
                    5d:61:70:13:dd:2e:e1:4f:57:ae:c6:d1:86:c3:11:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:4A:66:E5:51:5A:74:5C:C9:6D:4B:3E:E7:6E:34:99:48:52:50
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:98:d1:ee:89:14:85:7a:4a:dd:f9:bb:9d:9d:48:09:12:
         c6:b9:04:4b:a4:21:4d:a7:db:f4:7b:74:94:c5:de:37:ba:63:
         82:d2:74:d2:57:fb:06:f8:59:00:59:9f:75:d0:58:21:2e:38:
         21:53:c2:f8:9e:b3:74:6f:d0:35:cb:49:47:7e:50:60:ff:8c:
         cc:e6:7a:ed:e2:0c:c9:33:d7:d9:ee:39:c1:d0:7a:cd:5d:1f:
         77:54:43:9e:00:aa:80:ed:9d:65:fe:a2:42:1c:60:1b:73:34:
         fe:9f:ee:52:00:1a:4b:d2:3d:8f:1d:63:ff:62:bf:ef:0f:46:
         3e:53:4d:58:d2:45:bc:b2:21:4f:73:25:4f:fd:e0:93:f8:bd:
         5d:05:1c:7b:b8:7b:f5:0e:42:5a:6b:c6:7f:cb:4f:01:24:ad:
         2e:37:1e:29:86:17:40:bb:b6:ec:ff:52:02:68:4c:ec:da:97:
         dc:53:f6:65:7e:4f:cf:59:84:35:f4:07:32:b4:c3:0d:18:23:
         f0:d7:c5:e7:58:54:76:04:18:96:ec:5a:d0:31:1d:a1:99:40:
         8c:43:ff:23:7a:95:53:9f:7b:a0:0d:77:93:bc:80:bc:95:21:
         83:eb:26:59:fc:ab:f2:7a:79:15:de:9c:ef:47:36:7f:25:70:
         88:f2:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----