Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
File:                     pyKwoONloK3D2e6zzL_MBi2Q76k.mft (raw, json)
Hash identifier:          ZBJc695gevagF+r921YieouKTCA0Z8YF+BSYPYdumL0=
Subject key identifier:   39:3A:A2:3E:55:78:24:89:45:32:54:2A:C1:C7:2E:E0:46:F2:E7:41
Authority key identifier: A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Certificate issuer:       /CN=F363BEDERI/serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Certificate serial:       02F2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
Manifest number:          02F1
Signing time:             Sat 26 Sep 2026 04:30:26 +0000
Manifest this update:     Sat 26 Sep 2026 04:30:25 +0000
Manifest next update:     Mon 28 Sep 2026 04:30:25 +0000
Files and hashes:         1: pyKwoONloK3D2e6zzL_MBi2Q76k.crl (hash: 70ktBPNcwxTT8iUvTZ1iZVZd2nTxQ1lUaj8jFcERhWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                          rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
        Validity
            Not Before: Sep 26 04:30:25 2026 GMT
            Not After : Sep 28 04:30:25 2026 GMT
        Subject: CN=6ab74a62-7641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:fb:a8:b7:2b:eb:46:ab:57:2b:a5:29:2a:
                    32:f3:6b:4c:cf:ba:b6:fd:0a:64:13:5c:d3:3a:08:
                    e7:4c:7e:1d:76:44:ed:cf:3e:c5:78:ab:88:d2:9b:
                    9a:a2:96:68:51:f4:ea:89:de:db:cc:03:3d:d4:ab:
                    72:80:83:54:b6:a5:ba:f4:92:14:7c:fa:fe:d5:ee:
                    ba:bc:8b:5b:11:65:7a:2e:12:67:d0:cb:39:6d:43:
                    7a:fc:b2:b0:4a:d1:58:51:10:6a:09:6c:74:b5:6e:
                    9c:f9:96:d5:ac:0b:d5:de:82:e2:2d:fd:06:e4:99:
                    b9:48:e7:29:73:27:dd:5c:07:f6:70:bf:3c:16:4a:
                    9a:c5:fa:59:cb:79:24:21:3d:16:61:ad:77:01:7f:
                    e2:47:24:bd:85:f7:f6:97:88:81:7c:35:73:b7:cf:
                    52:df:64:2f:c5:51:c5:ce:ce:a0:cf:e8:7b:20:bf:
                    7e:10:4c:37:ea:15:57:6e:1c:d8:40:12:24:1f:7c:
                    bf:80:ad:9d:ec:f9:6c:e5:ee:89:bd:8d:7a:a2:79:
                    b2:a6:68:2e:4e:27:df:18:1c:23:25:0d:74:bd:9d:
                    b3:06:3f:1e:a2:5b:e2:09:da:95:fd:7f:88:ed:8f:
                    bb:3c:3c:72:1d:f9:31:2a:10:a4:f8:1d:5e:1f:d4:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3A:A2:3E:55:78:24:89:45:32:54:2A:C1:C7:2E:E0:46:F2:E7:41
            X509v3 Authority Key Identifier:
                keyid:A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:72:0d:76:57:05:37:27:cd:35:13:94:59:c0:2a:46:a5:
         60:f4:87:18:04:df:d0:2f:58:fc:68:a3:39:e1:71:34:f5:2a:
         6f:80:8d:bd:72:3e:e4:c4:09:79:e9:1b:e5:1f:0a:d8:48:1a:
         81:bb:5b:b7:ec:0c:f0:08:3e:a4:9b:25:8c:c3:a9:d8:26:d5:
         b2:da:66:44:6a:96:19:1a:ee:0e:1c:13:61:8a:8a:9d:97:15:
         44:e7:b2:c5:2d:81:38:0b:f4:7a:e3:6d:91:6c:48:d9:ac:5e:
         54:eb:e1:e1:dd:36:5d:d1:9d:ef:f7:36:d8:5b:4e:82:20:98:
         48:d8:b3:7e:c4:fb:01:85:e0:04:20:87:68:ed:24:f3:f7:f0:
         51:5e:9e:95:09:87:06:1d:f6:dc:45:9b:de:01:7a:44:9c:11:
         12:26:58:8e:af:b8:d8:ce:93:af:28:68:93:f1:dd:84:d3:56:
         aa:fc:f2:82:8c:cd:fe:2c:1b:97:5f:bd:aa:4b:8d:51:bb:19:
         6d:6c:9b:d0:4b:d1:39:ef:e3:0e:70:79:dd:19:38:8b:8b:60:
         8f:6e:9c:81:64:e1:1e:21:bf:64:c1:40:15:43:de:1d:1f:48:
         f7:35:dc:25:d3:4a:7c:0e:bb:6b:8d:1d:5c:6a:a9:8a:b8:c7:
         fe:db:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----