Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AF0D/F5FC1BC0722C11F0AB373985DAE4EC9C/VoTaybsgWcQ84QxGmQbgM_32tBE.mft
File:                     VoTaybsgWcQ84QxGmQbgM_32tBE.mft (raw, json)
Hash identifier:          dKWr6zrGJmUgJjzWzlzHUIaLVEYNjsLtgpKqPr+Qg0M=
Subject key identifier:   6D:A9:94:85:4E:EC:21:8E:86:97:33:81:CA:F9:69:62:24:D9:86:CB
Authority key identifier: 56:84:DA:C9:BB:20:59:C4:3C:E1:0C:46:99:06:E0:33:FD:F6:B4:11
Certificate issuer:       /CN=F362AF0DAF/serialNumber=5684DAC9BB2059C43CE10C469906E033FDF6B411
Certificate serial:       01A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VoTaybsgWcQ84QxGmQbgM_32tBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/F5FC1BC0722C11F0AB373985DAE4EC9C/VoTaybsgWcQ84QxGmQbgM_32tBE.mft
Manifest number:          01A9
Signing time:             Sat 26 Sep 2026 05:03:15 +0000
Manifest this update:     Sat 26 Sep 2026 05:03:15 +0000
Manifest next update:     Mon 28 Sep 2026 05:03:15 +0000
Files and hashes:         1: VoTaybsgWcQ84QxGmQbgM_32tBE.crl (hash: SoBlLVIx8mZpdPpJ+4B6ljT3YjX8+ot/HKK+vZnfDgk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/F5FC1BC0722C11F0AB373985DAE4EC9C/VoTaybsgWcQ84QxGmQbgM_32tBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/F5FC1BC0722C11F0AB373985DAE4EC9C/VoTaybsgWcQ84QxGmQbgM_32tBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VoTaybsgWcQ84QxGmQbgM_32tBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF0DAF, serialNumber=5684DAC9BB2059C43CE10C469906E033FDF6B411
        Validity
            Not Before: Sep 26 05:03:15 2026 GMT
            Not After : Sep 28 05:03:15 2026 GMT
        Subject: CN=6ab75213-02f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:f8:e0:fe:8b:aa:50:cc:0d:1d:7c:9c:0b:
                    17:e0:25:a8:15:5c:3c:af:35:3a:e0:79:75:05:c6:
                    e4:74:12:7d:fa:66:79:f4:f7:5f:96:24:e3:48:e2:
                    7b:a5:25:9f:f7:7d:59:f3:9e:e6:d4:2f:49:a7:dc:
                    17:b2:bc:77:ce:49:a8:46:b3:f3:01:b2:dd:61:89:
                    60:06:05:ac:99:96:08:4e:64:4a:40:d1:e2:30:7a:
                    19:4c:7d:34:01:9e:c5:eb:db:ba:88:2c:0d:3a:03:
                    95:bb:83:ac:d1:cd:c6:9b:00:5d:21:3b:05:05:31:
                    2b:73:60:a9:66:8a:a8:95:6c:c2:c3:a6:00:37:b8:
                    35:1f:5d:6f:b4:b3:55:cb:6a:5d:c4:56:01:0b:31:
                    bd:9e:0b:92:eb:4c:d8:01:1f:63:c4:fe:53:5d:71:
                    5c:5f:70:81:e3:b7:86:f1:db:fd:2c:aa:7a:04:c2:
                    50:31:0e:b5:52:db:2a:75:c6:0f:7a:33:80:05:d5:
                    84:04:d0:69:ac:64:9d:88:e9:74:5e:ac:2f:02:63:
                    b5:56:ce:1f:1f:ee:96:62:9c:99:51:60:0a:73:68:
                    df:69:3a:de:fe:16:b6:ac:6e:d1:08:b4:97:31:88:
                    c1:4d:dd:ca:5c:f3:31:72:e0:08:f4:6b:96:2f:c3:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:94:85:4E:EC:21:8E:86:97:33:81:CA:F9:69:62:24:D9:86:CB
            X509v3 Authority Key Identifier:
                keyid:56:84:DA:C9:BB:20:59:C4:3C:E1:0C:46:99:06:E0:33:FD:F6:B4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/F5FC1BC0722C11F0AB373985DAE4EC9C/VoTaybsgWcQ84QxGmQbgM_32tBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VoTaybsgWcQ84QxGmQbgM_32tBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/F5FC1BC0722C11F0AB373985DAE4EC9C/VoTaybsgWcQ84QxGmQbgM_32tBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:49:6c:37:1c:95:4c:91:99:cb:8d:4f:c5:09:74:b6:d5:
         ca:5b:f5:f8:c0:b8:af:6a:3a:b2:c9:c2:70:d6:fd:26:e7:25:
         8b:41:4b:2f:cd:1b:84:c9:59:03:37:71:ff:29:cf:ca:d2:e7:
         ae:6e:33:03:ae:96:84:14:9f:15:26:a2:7f:aa:72:36:d0:64:
         19:30:a1:33:d9:a1:1f:3f:5a:4b:5f:31:a4:61:95:89:80:7c:
         6a:87:3e:d3:52:82:31:de:92:7e:bc:30:a5:b3:67:07:e6:82:
         02:b9:a0:cf:bd:44:8f:b9:43:1b:73:b8:ea:0b:b5:e8:1e:aa:
         06:5e:8d:46:ef:a3:78:45:99:dc:fa:df:bd:73:c7:d5:64:96:
         cb:b5:c2:6c:37:3a:ab:71:c2:3d:89:1b:6e:b4:c8:c5:0f:5f:
         c4:03:40:36:7d:dd:20:84:b3:7c:f7:54:b5:44:ca:43:99:01:
         94:3f:91:d7:40:de:46:e5:3a:34:21:2b:4e:e0:0c:d0:5e:79:
         5b:56:ab:37:7e:47:d7:19:12:65:ef:2c:cb:a7:dc:58:90:bf:
         5a:63:a7:71:97:31:d3:ac:5a:22:e7:67:f7:33:9d:04:23:bf:
         a2:87:8e:7f:3d:bc:30:8d:c1:99:52:11:cd:50:38:20:b1:0a:
         69:b9:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----