Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.mft
File:                     -kwK_8ibZPOBS2ZAga8mw9R3h-c.mft (raw, json)
Hash identifier:          iexmWbZp6FZnk1ZhO31G5whSt1AltcLCWpifoCFDuFw=
Subject key identifier:   91:08:6D:B0:59:B7:1B:2C:E8:C2:31:4B:D2:97:C8:4A:7C:54:81:22
Authority key identifier: FA:4C:0A:FF:C8:9B:64:F3:81:4B:66:40:81:AF:26:C3:D4:77:87:E7
Certificate issuer:       /CN=F361B712AF/serialNumber=FA4C0AFFC89B64F3814B664081AF26C3D47787E7
Certificate serial:       40
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-kwK_8ibZPOBS2ZAga8mw9R3h-c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.mft
Manifest number:          3F
Signing time:             Sat 26 Sep 2026 05:48:08 +0000
Manifest this update:     Sat 26 Sep 2026 05:48:07 +0000
Manifest next update:     Mon 28 Sep 2026 05:48:07 +0000
Files and hashes:         1: -kwK_8ibZPOBS2ZAga8mw9R3h-c.crl (hash: Jg/5GwuCfTvJpqx18BcsnDZ2iZU9myigHCnXqwFNa5A=)
                          2: 89E60F3C89B811F185F420BBCE1D38B0.roa (hash: Rv4f4ZmJTdGNDrLajdUK1DgGO7hQgjxeaLoFNpNCpzg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-kwK_8ibZPOBS2ZAga8mw9R3h-c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B712AF, serialNumber=FA4C0AFFC89B64F3814B664081AF26C3D47787E7
        Validity
            Not Before: Sep 26 05:48:07 2026 GMT
            Not After : Sep 28 05:48:07 2026 GMT
        Subject: CN=6ab75c98-9283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:ef:81:cd:59:94:86:6b:24:e3:7d:de:8c:
                    bb:d6:cc:1c:70:f4:80:ac:e5:c4:b0:0c:89:fa:8e:
                    94:e5:05:09:92:14:7f:88:4e:a4:61:c5:4e:b7:53:
                    0f:b0:b0:13:a3:3a:c5:3e:99:68:09:ca:b2:64:56:
                    7b:5e:54:3b:08:7b:fb:ab:34:41:46:72:be:21:d3:
                    ac:b0:19:50:e3:dc:38:48:47:36:e4:a3:26:2f:0e:
                    22:a2:da:87:2c:ff:3a:94:59:6f:98:4d:69:e8:ea:
                    5a:1d:28:fb:85:4f:62:2b:cb:e9:ae:27:bf:f0:6e:
                    90:00:fe:42:89:68:90:b4:ee:75:1b:e4:bb:4a:75:
                    6b:3a:29:0b:af:d5:ec:88:52:ef:ab:03:d1:e0:b4:
                    b9:86:44:b3:b0:ef:cb:ea:ea:9d:aa:5d:4d:28:06:
                    fb:b1:ae:1d:e6:3f:ce:0f:20:3c:66:6f:9f:f0:db:
                    af:a1:77:86:93:ed:1e:3c:d3:52:01:25:c0:0e:b8:
                    17:41:8d:c4:87:03:36:7e:63:99:db:ba:06:27:b9:
                    ac:93:c6:69:0a:84:b6:f5:d2:52:03:98:61:97:e2:
                    63:d1:a1:c2:45:15:09:c6:10:22:c8:f4:f0:21:89:
                    7a:19:30:5d:d9:08:d6:8f:b1:6a:ed:9d:74:a9:29:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:08:6D:B0:59:B7:1B:2C:E8:C2:31:4B:D2:97:C8:4A:7C:54:81:22
            X509v3 Authority Key Identifier:
                keyid:FA:4C:0A:FF:C8:9B:64:F3:81:4B:66:40:81:AF:26:C3:D4:77:87:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kwK_8ibZPOBS2ZAga8mw9R3h-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B712/746CBA3A89B211F18C27D814CF1D38B0/-kwK_8ibZPOBS2ZAga8mw9R3h-c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:9e:eb:80:a6:2c:5e:d0:a6:95:c8:bf:60:c9:5c:e5:7c:
         0d:58:d1:01:77:5f:6e:7d:30:c0:d4:a0:a7:fc:90:0f:10:e9:
         0f:9a:c8:30:9d:a2:a9:0b:bc:08:02:c3:fc:59:3d:18:c1:f3:
         2d:ec:ed:ad:0a:07:01:fe:7d:8f:f3:98:82:49:37:2a:65:4d:
         55:c2:ed:68:74:c7:10:b8:8b:92:9d:cb:a5:91:19:6c:ff:3c:
         f8:5a:44:9b:53:e8:b8:fd:3d:01:87:d5:69:ad:2b:53:e2:69:
         ee:3d:0d:99:ad:9b:a5:4a:05:3f:3b:01:5a:bc:be:28:d1:22:
         91:c6:df:50:79:67:c2:16:2e:98:d1:35:97:9f:cc:1c:d7:f6:
         c5:f8:c9:38:42:48:eb:fd:92:80:84:f2:38:2c:36:70:42:7c:
         44:1a:47:c8:50:e1:9a:84:a9:73:a7:1a:42:07:29:99:be:7c:
         2d:3e:6b:e1:e4:2a:f5:32:85:ee:f3:54:7d:eb:be:be:2c:08:
         4f:56:99:19:af:d1:00:de:8f:d6:bf:64:aa:b0:65:e0:13:27:
         74:e4:7f:66:a2:f3:a2:e9:1e:37:6c:0d:39:99:f8:30:45:90:
         f7:9e:7c:6b:6b:5e:0b:34:b6:b9:fc:c3:75:42:26:fa:32:ae:
         ca:b8:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----