Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
File:                     a5qEGbi8uumMQQnFsT9T3CAtmnk.mft (raw, json)
Hash identifier:          m0LzT4G/R0BQerCBD5KHGv3Uk+CmUwasFptjNM+XExc=
Subject key identifier:   70:35:30:FA:F5:21:7D:AD:AF:85:E9:C2:AD:7C:A7:9D:9A:DB:A3:52
Authority key identifier: 6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79
Certificate issuer:       /CN=F36250A1AF/serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
Certificate serial:       25
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
Manifest number:          22
Signing time:             Sun 27 Sep 2026 05:53:00 +0000
Manifest this update:     Sun 27 Sep 2026 05:52:59 +0000
Manifest next update:     Tue 29 Sep 2026 05:52:59 +0000
Files and hashes:         1: a5qEGbi8uumMQQnFsT9T3CAtmnk.crl (hash: 8PCyFo4KsxntpWtGbHnrA7ybxaWVx7t8hOauoTK1ePY=)
                          2: F312CFCEA5C711F1B3FC18CECE1D38B0.roa (hash: EFMA6YNMYBhoHPMBTT30p4Lctr0AmQ5qhgphyC0IGSw=)
                          3: BAF5007CA5C611F18A373AC4CE1D38B0.roa (hash: /F1vWOzW0fg+2W1kCzqXuu5VBgL5pobx9VVGHh2FCq4=)
                          4: 7C673F94A2A811F1AA24A8E7CE1D38B0.roa (hash: dxBgg9SKGVOPFMpt363i3eflK4txWh7F49pZpdKEnSs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 05:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36250A1AF, serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
        Validity
            Not Before: Sep 27 05:52:59 2026 GMT
            Not After : Sep 29 05:52:59 2026 GMT
        Subject: CN=6ab8af3c-523d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:fa:3e:61:05:65:06:25:17:82:db:86:bc:
                    62:6c:6b:3e:fe:4e:44:c2:57:ad:32:82:e8:7f:60:
                    09:5c:fb:c3:2a:42:7e:9c:54:57:59:07:5d:15:6c:
                    81:f5:8d:45:f8:eb:64:bb:7e:5f:b6:31:03:7a:6c:
                    66:3f:fb:90:bc:5b:c6:27:93:c4:c6:f5:be:c7:97:
                    a6:9d:96:d6:67:0d:5b:d1:c9:ea:c2:0f:de:49:86:
                    df:0a:cf:9e:ce:45:84:cc:af:78:7d:9c:67:22:df:
                    eb:3e:ae:86:ae:a4:7e:dc:df:f7:9c:f9:e1:9d:2d:
                    c2:4d:10:a6:90:c1:1b:57:38:27:04:6d:07:48:37:
                    5e:34:12:3b:99:36:7d:9d:b0:85:3c:70:85:e4:9f:
                    83:ad:76:cf:7e:58:70:64:aa:4e:1b:37:69:f9:df:
                    c3:ba:6d:8a:b0:77:35:44:9a:3e:b0:f6:0a:9b:1d:
                    63:ec:36:50:ae:df:76:e6:c6:42:9a:68:a9:99:c5:
                    e3:8c:ba:73:37:8e:45:75:69:4e:52:01:3a:7b:7f:
                    77:20:fb:d2:29:82:9d:48:9b:c1:d0:22:c8:1e:01:
                    ff:51:a8:f7:a5:bf:d5:8a:d4:f4:1e:93:1b:34:c8:
                    d4:eb:2a:3d:bc:2c:1f:64:7d:45:e6:4a:c7:0d:fe:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:30:FA:F5:21:7D:AD:AF:85:E9:C2:AD:7C:A7:9D:9A:DB:A3:52
            X509v3 Authority Key Identifier:
                keyid:6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:1c:db:10:8e:9f:74:b4:76:31:f5:fb:30:8c:b6:3a:76:
         d0:f2:84:d7:81:f9:ee:1b:85:d7:d5:1b:84:77:3c:08:ca:32:
         00:33:00:41:0d:93:25:78:a0:8d:37:b9:2a:74:6e:02:f0:cf:
         80:2a:f6:40:b2:e6:95:7d:6b:a9:38:15:5b:82:0a:e2:18:79:
         d8:6a:c1:b5:37:e0:11:2c:81:bc:1d:0e:69:b7:a7:53:70:0e:
         23:ef:b7:ac:87:5d:82:3f:ad:be:01:5f:3e:3d:1f:33:df:87:
         10:61:98:ee:d8:cc:72:5a:96:64:42:07:0a:c2:91:e0:2d:f9:
         eb:8c:cf:5e:e5:05:9e:61:22:a5:4a:fd:9c:90:06:f9:1a:78:
         75:b3:0b:c0:4f:3e:f2:c4:07:6f:e2:86:ab:36:7a:e3:11:2d:
         67:50:ac:d3:d5:f9:bd:cb:34:e8:cb:e0:43:72:e7:d6:c1:58:
         4e:e8:88:bf:fb:d2:c1:d4:23:2c:aa:00:21:f4:ad:d3:61:9f:
         b9:3c:bd:e1:a5:16:04:ef:57:60:7a:85:7c:6b:68:43:81:12:
         42:63:af:17:3c:25:41:1e:54:37:03:c6:a6:58:6d:10:c4:14:
         48:f3:3a:10:95:1c:a8:8a:fe:77:9c:45:7f:54:79:72:7a:30:
         99:b6:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----