Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
File:                     pCKYJAT-Aumg8-y5hTV-RG-IID0.mft (raw, json)
Hash identifier:          yYKYgeOKKtrJPZcLp3ddMd2SixtG4YC8UGHsnFrcTv8=
Subject key identifier:   C8:41:8C:5A:3D:3E:C4:0E:0E:37:3C:16:20:E8:EA:77:FD:B7:CB:A3
Authority key identifier: A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
Certificate issuer:       /CN=F362FA5FAF/serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
Certificate serial:       0129
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
Manifest number:          0127
Signing time:             Thu 24 Sep 2026 05:18:42 +0000
Manifest this update:     Thu 24 Sep 2026 05:18:41 +0000
Manifest next update:     Sat 26 Sep 2026 05:18:41 +0000
Files and hashes:         1: pCKYJAT-Aumg8-y5hTV-RG-IID0.crl (hash: LbkDnTZZ9Hn9DIJ6UayfEQwdQRdpsqF9UepXTO+fG3Q=)
                          2: 02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa (hash: 6Mw6IJOKCFiOFJKPzw6NDpNLOWvwX8+ywwAHH8ia5xU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FA5FAF, serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
        Validity
            Not Before: Sep 24 05:18:41 2026 GMT
            Not After : Sep 26 05:18:41 2026 GMT
        Subject: CN=6ab4b2b2-172c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:d3:95:39:8a:c9:96:82:21:3c:46:54:05:
                    ec:26:9f:a1:d2:9c:c0:5e:f0:4e:93:76:33:5b:45:
                    b0:0c:44:91:f3:03:f9:27:83:2c:27:66:ad:fd:a9:
                    eb:3c:29:be:de:4f:2c:a0:7c:7f:0d:33:8a:2c:36:
                    d2:a2:33:23:47:d9:64:c2:c3:2d:15:4e:22:99:d2:
                    39:91:48:fa:9c:79:e7:eb:f4:8e:21:1e:e3:d4:4f:
                    14:5c:9c:90:f7:c2:88:ef:0c:9b:18:62:dc:4e:b9:
                    05:ef:12:3e:32:d0:98:5f:ac:13:d9:6f:4b:ba:03:
                    c7:92:fa:7e:ea:72:b1:7a:be:46:9f:ed:0a:38:59:
                    be:03:25:90:9a:fd:c9:f7:67:e2:92:28:a7:8b:7b:
                    65:32:33:b7:b4:ac:cf:2e:07:8f:1e:73:c1:50:69:
                    9d:d9:cd:d7:98:75:d3:03:9e:d3:4b:6f:3f:d6:80:
                    3b:bb:f0:36:d7:bc:30:c5:18:54:f4:aa:c8:97:1e:
                    26:da:cc:db:87:80:a9:24:d7:fd:2c:bf:d7:38:91:
                    5d:f1:f2:06:be:8c:10:f2:04:79:43:df:ea:f3:30:
                    fc:d9:bc:64:37:73:a3:83:ca:2d:8b:93:71:71:c8:
                    e6:0f:17:95:21:a2:a1:94:97:fb:96:9c:d9:60:0d:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:8C:5A:3D:3E:C4:0E:0E:37:3C:16:20:E8:EA:77:FD:B7:CB:A3
            X509v3 Authority Key Identifier:
                keyid:A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:35:64:24:16:c4:fc:ec:96:44:cf:61:7f:12:81:2f:49:
         d5:11:a3:1d:fe:28:94:86:ed:45:b6:cb:e3:d8:d5:fd:1f:ce:
         6c:85:33:20:75:1b:15:ab:4e:7b:93:b2:f1:fb:6e:3f:7e:76:
         91:df:d1:54:a6:09:72:ff:22:69:43:89:94:94:4d:23:33:47:
         83:79:60:e4:3d:dc:f3:74:cb:72:71:26:02:44:87:f2:38:d7:
         32:fb:56:c3:08:1c:d1:21:ff:52:38:15:40:c9:de:e1:fb:e0:
         93:71:e2:4f:7d:65:b5:9b:11:3f:46:b8:bf:cd:08:18:fd:eb:
         9f:47:01:76:c8:49:8d:ab:b7:64:d9:58:3a:3a:60:16:67:16:
         10:72:09:ab:e2:ac:e3:63:5c:5f:44:92:55:f1:65:06:a0:3b:
         6d:cc:35:52:55:12:68:9d:0f:33:0d:2f:8e:bd:0d:b3:fd:39:
         02:0c:39:f4:b4:ea:0d:92:31:02:35:bb:08:3e:58:d8:1d:a0:
         a6:41:3a:26:1c:d3:51:91:a2:44:a7:d3:61:ba:4e:b4:be:41:
         73:04:70:e7:37:39:75:03:46:18:9a:28:31:5b:da:34:fc:65:
         5c:95:d3:e8:fd:0f:72:2e:62:73:bc:e3:86:e4:10:df:20:a8:
         e0:a3:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----