Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.mft
File:                     8s4Gvmzfp90I--NZHFt9wmpfLGA.mft (raw, json)
Hash identifier:          4nW2BnsIFLXP+RQtjIyagxxOYWiiQVycFHLY6xWpFgg=
Subject key identifier:   A2:8E:36:B3:8D:3F:10:70:53:8E:D6:D9:9C:44:EC:F3:21:27:8D:07
Authority key identifier: F2:CE:06:BE:6C:DF:A7:DD:08:FB:E3:59:1C:5B:7D:C2:6A:5F:2C:60
Certificate issuer:       /CN=F362E9C4AF/serialNumber=F2CE06BE6CDFA7DD08FBE3591C5B7DC26A5F2C60
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8s4Gvmzfp90I--NZHFt9wmpfLGA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.mft
Manifest number:          34
Signing time:             Wed 23 Sep 2026 05:49:02 +0000
Manifest this update:     Wed 23 Sep 2026 05:49:02 +0000
Manifest next update:     Fri 25 Sep 2026 05:49:02 +0000
Files and hashes:         1: 8s4Gvmzfp90I--NZHFt9wmpfLGA.crl (hash: AvBMsPWLblw+WxHVjEipvTlHseANr6l9axOlRoO5dRs=)
                          2: A13BF08E901B11F1805BCFA7CE1D38B0.roa (hash: mDDO/i1Pc7AB7KazNElE2Nzyn1AB7gGQWJo0D+efT6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8s4Gvmzfp90I--NZHFt9wmpfLGA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E9C4AF, serialNumber=F2CE06BE6CDFA7DD08FBE3591C5B7DC26A5F2C60
        Validity
            Not Before: Sep 23 05:49:02 2026 GMT
            Not After : Sep 25 05:49:02 2026 GMT
        Subject: CN=6ab3684e-4cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3f:ad:1b:01:bf:03:71:ec:4a:2f:7f:65:b1:
                    25:3f:05:41:dd:d3:df:46:b9:9f:02:0f:7b:63:29:
                    f9:48:f1:5d:6f:cd:74:f6:ec:61:b7:19:25:95:5a:
                    40:e3:37:06:76:4b:48:fa:e7:74:3f:b8:62:6d:f3:
                    07:72:1a:49:7a:9b:ad:66:2e:46:0c:15:73:df:2b:
                    1b:ee:51:74:60:f6:17:ca:b7:7c:c2:86:5d:92:9f:
                    90:f8:31:c2:f8:a0:bc:fd:0d:56:9c:77:7d:e8:38:
                    4f:31:84:b3:2b:0c:8d:ba:5e:fa:f9:5e:a9:30:60:
                    c0:33:a0:98:42:44:58:1b:6c:9e:7c:ef:be:f4:7a:
                    b0:17:f0:95:d2:e6:48:36:91:6f:02:b2:76:cf:b4:
                    85:73:f2:91:50:74:85:a3:da:93:57:ca:70:5c:bd:
                    47:9b:4d:fc:ac:35:e0:32:91:d9:f4:c7:f2:00:e8:
                    3d:d0:34:3c:59:6f:18:b0:ce:ef:6c:d7:24:d1:99:
                    5c:59:ef:c5:74:ec:61:49:e4:37:44:88:83:ed:26:
                    eb:81:47:ba:b4:58:2b:ba:a2:6f:f9:fe:4f:bc:2f:
                    f8:84:e0:3d:0d:b1:c2:e9:fd:9a:3d:db:c5:e2:b0:
                    5b:89:a1:ca:2b:13:cf:b7:bd:ce:9c:f6:43:f7:97:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8E:36:B3:8D:3F:10:70:53:8E:D6:D9:9C:44:EC:F3:21:27:8D:07
            X509v3 Authority Key Identifier:
                keyid:F2:CE:06:BE:6C:DF:A7:DD:08:FB:E3:59:1C:5B:7D:C2:6A:5F:2C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8s4Gvmzfp90I--NZHFt9wmpfLGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:58:77:90:30:72:a9:38:3b:02:cc:26:b6:f4:86:e2:a8:76:
         6c:d7:13:a9:1e:32:76:0c:c2:65:a7:94:88:a0:83:5c:cf:15:
         f2:88:3b:1b:e0:d4:d7:bb:b3:7e:50:9d:47:ea:e3:64:a8:49:
         0e:0a:84:17:11:4c:cc:26:06:bf:b0:a8:db:1d:40:b9:a1:ca:
         b2:28:eb:0a:b0:2d:98:02:5c:6e:a8:01:bd:95:08:e4:3e:bb:
         f1:aa:7e:90:46:0f:0a:1d:bd:11:3d:e0:3a:eb:fb:89:10:91:
         28:8e:48:49:4d:d2:d2:20:3f:09:d9:ee:8f:23:32:c0:4a:15:
         f2:71:e9:12:db:4f:54:b1:8f:66:b4:34:a7:67:4d:8f:2c:d7:
         f7:a5:c3:f0:cb:98:ab:ea:5b:31:be:16:c0:1f:51:fd:f1:e4:
         dc:5f:ec:86:ea:f6:03:f2:27:5b:a3:54:fc:d4:f4:47:3a:d9:
         aa:39:c3:03:91:76:5b:54:76:64:b6:84:a3:eb:ad:e1:e3:59:
         93:8f:7c:6c:ce:42:50:5c:d1:f9:3c:c3:ea:5a:08:4e:3e:a0:
         d6:77:8b:d4:19:48:42:23:4f:78:38:16:f7:cb:05:07:b3:5b:
         02:58:61:ee:b0:bc:29:53:9c:1a:27:2d:5c:bc:12:c9:43:57:
         24:80:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----