Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier:          ZBq0eGcGJyQOyFUVeOvNm8FT97yphoWY1uByztx08YM=
Subject key identifier:   24:ED:44:31:AC:E2:DC:74:C7:B3:C1:0F:DC:C7:47:C3:33:36:8B:65
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer:       /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial:       0279
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number:          0277
Signing time:             Sat 26 Sep 2026 04:43:09 +0000
Manifest this update:     Sat 26 Sep 2026 04:43:08 +0000
Manifest next update:     Mon 28 Sep 2026 04:43:08 +0000
Files and hashes:         1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: 9i62LAWcWNDF4MqkdJExM+92au4YJ/IeXpRJ6AU4VMk=)
                          2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 04:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Validity
            Not Before: Sep 26 04:43:08 2026 GMT
            Not After : Sep 28 04:43:08 2026 GMT
        Subject: CN=6ab74d5d-bdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c8:91:55:45:73:39:dd:d6:86:47:ae:ed:fe:
                    32:8c:77:db:25:1e:ab:47:1b:e7:f4:98:0b:ad:27:
                    8f:03:66:83:0b:1f:cd:11:82:2e:31:53:63:e3:18:
                    f9:00:c4:bc:f1:2e:81:fd:f9:0c:0d:75:c2:b7:69:
                    14:92:77:63:69:76:ef:86:0e:38:9e:50:98:b5:94:
                    9e:30:ca:b5:cb:e3:0c:87:85:2c:85:5f:78:a7:4e:
                    4c:58:bd:b1:52:8b:07:a0:cf:85:ba:ed:fd:b7:7a:
                    ed:7d:11:b7:0a:fe:5c:2f:35:14:1a:9e:3b:79:67:
                    47:d5:34:ab:4a:18:8b:38:7a:9b:19:08:b5:6d:86:
                    57:35:da:87:3d:a0:6a:12:ad:36:8a:19:0a:34:12:
                    2d:9a:17:70:a3:49:2e:92:54:f6:bb:1a:db:c3:b8:
                    cc:5b:72:4a:01:06:20:40:5a:a7:8c:08:a4:30:aa:
                    55:d2:34:ba:24:11:75:df:df:b9:95:e2:5d:2d:d9:
                    42:f7:c6:c1:0e:a4:05:8d:09:e8:76:7e:34:21:9e:
                    af:d2:99:21:e4:2e:f0:15:bd:92:58:0f:c7:5a:eb:
                    83:12:c0:8a:0c:fb:e5:b9:d1:70:5d:49:1a:07:f3:
                    48:05:93:30:49:f4:64:f0:94:13:36:48:c6:9d:5b:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:ED:44:31:AC:E2:DC:74:C7:B3:C1:0F:DC:C7:47:C3:33:36:8B:65
            X509v3 Authority Key Identifier:
                keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7a:4a:15:76:2a:82:66:f6:74:c9:94:05:ef:d3:94:19:21:
         56:6f:b7:4f:2f:73:c7:79:e8:b8:3b:25:68:98:28:ce:a9:2e:
         cc:2e:7e:25:cc:d1:5b:fc:0c:73:c4:04:1e:af:a4:04:ee:14:
         f1:1b:23:14:c1:68:62:20:ce:f6:a6:e0:58:70:da:bd:99:5c:
         5d:d3:ae:21:2d:a6:9b:4b:23:86:39:21:9e:c7:9c:a5:d9:95:
         ce:2a:88:cf:66:7c:b6:81:f3:b6:b0:31:4c:c3:1f:a7:d4:58:
         ad:10:9f:85:3b:02:0d:96:de:8a:79:18:81:4e:b7:28:a4:43:
         2c:92:9e:58:a1:3e:cd:bb:d2:99:49:86:49:3c:bd:51:85:e6:
         06:a7:d3:ba:f4:1e:77:4b:58:fa:d3:23:00:ea:32:d7:37:67:
         8b:a2:fa:f3:1e:b4:61:6c:d3:b6:46:46:3f:1e:65:0e:b4:f7:
         02:e2:cf:c7:48:62:8a:0d:fc:d7:6b:07:98:c7:0e:0b:72:8e:
         23:6b:1d:84:46:d8:7b:20:41:c2:55:68:a3:2c:11:cc:04:7c:
         24:17:c0:f2:95:7a:81:4f:61:a3:92:4c:cf:1f:c3:42:65:c4:
         1d:94:2d:81:ce:b4:6e:f1:70:61:5b:7b:f2:14:12:f8:af:f6:
         46:58:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----