Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          cc7VZ/fqOH8ytDZfIhg8irMf4tR5v1+wydOZT4tVwBY=
Subject key identifier:   1E:5B:7C:2C:A4:48:94:A5:0C:FC:C2:6C:1C:B7:F1:9B:8E:06:D8:60
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       04F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          04F1
Signing time:             Fri 25 Sep 2026 03:25:59 +0000
Manifest this update:     Fri 25 Sep 2026 03:25:58 +0000
Manifest next update:     Sun 27 Sep 2026 03:25:58 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: smXhh8PjTleqWeBo0voJkEpa0p/24emKfUHTsWs3VyU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: Sep 25 03:25:58 2026 GMT
            Not After : Sep 27 03:25:58 2026 GMT
        Subject: CN=6ab5e9c7-4f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:8c:81:c1:60:9e:bf:9e:4f:c4:bc:a8:06:
                    89:c5:b2:51:b0:fe:a2:64:fc:c9:8f:b9:ef:17:02:
                    51:63:10:ff:c5:8d:fa:4c:0d:ad:10:f0:1c:5e:b2:
                    ff:54:f6:05:eb:64:2a:a2:f2:9e:c5:2c:4e:28:b2:
                    6d:77:4e:27:b7:7a:69:a4:1d:68:0e:0b:7a:e4:75:
                    35:06:6a:fc:d3:c0:80:85:b7:62:d1:80:0e:b2:40:
                    49:8f:fa:9f:1c:c5:43:f9:47:96:10:a7:fb:ca:0b:
                    ec:58:d4:21:27:7a:d1:fe:7e:1a:21:c1:d8:f9:be:
                    b5:d2:94:75:97:7e:4b:21:9e:d5:65:c6:aa:f4:d7:
                    1e:fe:69:d3:0a:52:43:66:5e:6d:e4:7b:de:0e:fe:
                    29:7f:d4:9c:f8:86:8b:f6:73:9e:ed:be:ae:1e:9c:
                    0e:57:9a:0b:93:8d:94:ce:38:93:d3:8d:bd:f5:76:
                    28:03:67:9d:0b:66:c4:f8:6c:1c:6f:66:48:30:f6:
                    ba:b8:ff:f3:60:bb:48:71:11:80:c8:77:ff:39:19:
                    fd:51:81:00:22:5a:d3:f2:ca:0a:d8:f4:33:9b:33:
                    fd:5a:1e:0f:79:0e:d2:c8:8e:1e:9a:d6:c3:f6:17:
                    8c:72:39:cd:1d:2e:20:a5:87:ed:d4:ed:c7:99:72:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5B:7C:2C:A4:48:94:A5:0C:FC:C2:6C:1C:B7:F1:9B:8E:06:D8:60
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:71:37:c9:e7:9e:17:10:c2:d1:47:cf:84:16:a1:bf:85:bf:
         70:7b:32:fd:20:a2:6b:f1:73:7c:79:ee:89:db:19:0e:f3:92:
         94:c1:b6:32:ec:98:c5:6b:7d:a8:b2:f1:0a:4d:d0:56:7e:5b:
         78:8b:b5:3f:4b:6b:e4:21:68:6d:44:2b:cd:ea:be:2e:66:d4:
         20:f8:2c:07:2a:89:f7:97:81:2f:94:92:7c:04:41:e8:0c:c4:
         1e:d5:11:18:6f:a6:54:15:b4:12:e4:b1:d8:8e:9e:a3:25:b6:
         0c:18:a0:88:35:0a:0b:2a:1b:33:60:d1:2c:0a:d3:a9:1d:0b:
         52:17:d1:56:99:0b:a8:06:cc:41:40:47:9d:c9:eb:3a:76:b1:
         dd:c3:99:2a:c8:c9:e3:32:a4:1e:af:ad:f0:4e:1d:31:98:12:
         07:bb:f6:19:31:e6:a4:ea:f5:21:6a:f8:a8:bf:32:b3:43:b7:
         0a:a2:27:dd:ac:e8:d1:39:19:6f:61:53:99:31:a8:75:10:57:
         21:8f:d0:40:d7:5c:8d:0d:a9:05:40:7b:8c:83:f9:b9:78:c6:
         42:d4:c8:a1:75:0d:07:25:78:2a:55:31:d6:d7:ad:48:fd:79:
         d8:22:b1:a7:6c:45:af:4b:e5:7e:e6:02:38:4e:65:f1:b2:7d:
         fa:49:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----