Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File:                     aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier:          YpRYqx5Hjvj6Tx/MdAFQAphR7zUhotI9YJBOQW0blus=
Subject key identifier:   30:F0:2D:CE:45:CD:3F:16:65:FA:71:7A:80:36:17:70:23:14:5B:7C
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer:       /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial:       0214
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number:          0213
Signing time:             Mon 05 Oct 2026 04:51:28 +0000
Manifest this update:     Mon 05 Oct 2026 04:51:27 +0000
Manifest next update:     Wed 07 Oct 2026 04:51:27 +0000
Files and hashes:         1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: JbRNcTqLHNEqywP7yEkZhu6/tlRE5TpOSAe0Q8dLFck=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 04:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
        Validity
            Not Before: Oct  5 04:51:27 2026 GMT
            Not After : Oct  7 04:51:27 2026 GMT
        Subject: CN=6ac32cd0-f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:75:1d:cd:48:35:40:33:9b:b4:45:44:d3:66:
                    45:09:6a:ed:10:49:bf:c7:98:c2:11:b8:eb:fa:7c:
                    0e:5f:03:dd:22:f1:3a:ef:46:fc:7a:0d:ba:36:4f:
                    5a:06:da:60:bb:d1:69:a4:06:8a:92:c5:53:b0:aa:
                    20:6e:44:72:24:a7:9c:17:70:59:3f:28:2f:c9:b5:
                    bf:66:05:35:13:9e:98:c6:d8:1b:64:56:05:a7:b3:
                    29:43:f5:9e:fb:b4:d6:c0:1b:a9:97:cb:3e:a1:7f:
                    bd:58:23:3e:9d:66:4a:8c:8f:45:bb:cc:ef:41:95:
                    77:2b:29:90:7b:ed:34:ae:01:92:ee:19:b1:75:57:
                    0b:f6:17:03:57:ce:40:2d:2c:90:e3:03:83:c2:db:
                    74:11:8f:d7:89:cf:39:eb:93:98:c1:fa:48:33:f9:
                    9d:ab:c5:90:f6:68:24:8a:ca:f7:4a:b8:33:7e:b6:
                    a6:74:12:70:ef:2f:b5:16:79:6b:72:fe:35:0c:2c:
                    7c:72:19:5d:1d:b6:c8:28:95:8b:97:fd:90:90:40:
                    9d:a5:1f:ae:46:74:ea:da:ad:bf:ad:1f:d0:53:67:
                    c7:ff:a9:a8:1f:4b:18:ec:9e:cb:c0:c1:76:29:88:
                    db:2f:14:9f:72:aa:86:58:bf:b9:73:5e:20:0f:62:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F0:2D:CE:45:CD:3F:16:65:FA:71:7A:80:36:17:70:23:14:5B:7C
            X509v3 Authority Key Identifier:
                keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:84:7a:b3:16:81:fe:fe:9b:fa:f7:23:18:dc:94:72:16:ac:
         1d:27:76:49:19:f1:74:0b:cb:fb:00:94:97:e2:ab:28:05:71:
         d7:d0:82:be:47:0e:3f:fe:aa:48:04:07:d4:a8:96:84:c3:a7:
         0d:14:9d:87:25:e3:ab:ac:da:14:e2:47:bb:04:63:4f:23:95:
         b2:76:1e:40:c2:74:c0:00:84:a0:d7:89:c5:10:5d:3a:b3:45:
         69:b1:e1:8c:03:17:a3:db:35:e7:75:74:c5:65:96:90:73:54:
         fe:a5:c1:92:36:54:0d:54:fb:22:8a:06:cf:0b:c2:42:6e:bd:
         99:86:6f:b8:87:81:02:45:c1:05:71:b6:b1:de:7f:87:9c:12:
         bc:26:e7:27:63:1b:a5:a0:c8:14:f2:8b:85:0b:f6:2d:63:70:
         f4:d4:b8:5d:5f:21:cf:94:af:5b:73:03:79:2a:cb:ef:9c:fb:
         f3:6e:a7:87:98:70:c9:b6:1a:69:c7:2a:25:27:cc:9e:9a:1d:
         66:41:2a:97:de:67:fb:98:e6:df:5f:e2:90:bb:22:ab:8d:25:
         88:e7:c6:46:cf:77:8f:4b:75:7e:7f:ac:fc:a2:ad:8b:e4:23:
         a2:9c:fd:b8:89:3b:69:42:09:8c:0d:ab:17:af:0a:90:4a:71:
         69:cf:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----