Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
File:                     2S3BlA86xFACYfqliK5STwS9244.mft (raw, json)
Hash identifier:          du9hSSVYym2FYJgkHDdHspjTHSIZxtzxb5WKjWlagh4=
Subject key identifier:   9A:AF:8C:A1:50:20:80:7A:A7:41:2A:DE:00:50:62:DD:68:04:C3:2A
Authority key identifier: D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E
Certificate issuer:       /CN=F363FC87AF/serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
Manifest number:          25
Signing time:             Tue 22 Sep 2026 05:49:36 +0000
Manifest this update:     Tue 22 Sep 2026 05:49:35 +0000
Manifest next update:     Thu 24 Sep 2026 05:49:35 +0000
Files and hashes:         1: 2S3BlA86xFACYfqliK5STwS9244.crl (hash: hqqAjad7nzLshpdMJwontwe9E1h9fGvOvPaGohJyCqQ=)
                          2: 05A0B69E9B0811F1A0808FE3CE1D38B0.roa (hash: pasTsat2fXh6YiGvMvYT8AvkfmPYbd9JwrzF0OlGv9U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FC87AF, serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
        Validity
            Not Before: Sep 22 05:49:35 2026 GMT
            Not After : Sep 24 05:49:35 2026 GMT
        Subject: CN=6ab216f0-d526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:e3:67:90:ad:8f:73:75:12:99:ba:79:38:
                    02:e8:5c:82:b6:b0:c7:4c:b0:20:d7:61:4b:7f:58:
                    8c:22:c4:27:33:3a:fd:ab:25:52:cd:09:3f:af:14:
                    6d:48:ac:75:16:ef:04:87:d4:64:b0:23:0d:90:0e:
                    38:24:86:91:bf:05:ba:e0:c0:70:4f:02:da:00:0e:
                    40:ed:5c:36:61:cc:f7:2a:08:f0:a2:f5:f8:1f:be:
                    a4:2c:09:81:86:33:6a:96:41:16:f5:38:e7:b3:af:
                    fc:21:23:8a:ce:3a:ce:cf:d9:55:c9:df:ca:af:11:
                    22:72:14:08:19:3c:44:48:ad:cb:b6:5e:83:56:44:
                    87:4d:39:21:cb:34:56:7f:70:96:99:a9:b8:6e:bc:
                    52:b1:12:8a:49:c0:21:3c:7a:fc:29:76:61:de:9c:
                    6b:2e:fa:00:a8:33:ca:ae:2d:0f:5e:74:c7:78:ed:
                    b0:22:a8:c8:4b:d2:e6:c6:f6:12:50:19:7c:71:ae:
                    93:ac:18:2b:3c:ef:cc:c6:24:44:cf:aa:1a:c5:f3:
                    b0:cd:cb:92:94:91:f7:10:f9:ff:e0:23:8e:ea:87:
                    8a:0c:26:59:8c:fb:d4:9f:11:8f:18:f9:b9:b8:2b:
                    f9:9e:c5:78:12:39:33:03:8e:53:9d:40:f5:72:c5:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AF:8C:A1:50:20:80:7A:A7:41:2A:DE:00:50:62:DD:68:04:C3:2A
            X509v3 Authority Key Identifier:
                keyid:D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:03:7f:bd:eb:8a:b7:15:26:4b:92:29:fc:01:43:70:14:7f:
         a2:9d:1c:a0:60:cd:ed:44:16:a0:ad:43:8b:36:b7:34:23:e9:
         f1:b7:84:ab:fb:75:d5:c1:f7:cf:55:ff:d5:ea:84:36:0b:4f:
         0d:de:13:27:67:f0:75:21:fe:0d:e3:e5:2d:fa:cd:46:11:c9:
         88:18:bf:aa:b8:60:86:6f:9e:c7:ae:4c:8d:4a:06:bd:54:1b:
         e5:be:af:b7:28:fc:ed:20:53:00:9f:47:22:a4:91:23:f5:f3:
         87:09:d7:d3:11:0d:c1:11:d2:81:5f:34:71:4d:1b:6e:ed:7b:
         38:e0:ea:6f:5c:07:cb:b1:20:a4:e9:9b:df:21:07:2d:93:ba:
         f6:5d:ee:92:7c:e3:ca:96:d1:0a:33:69:05:42:20:bf:1a:b0:
         4d:42:36:e1:59:ec:57:5c:61:be:10:41:7e:c9:6c:80:98:81:
         1c:87:6f:28:ef:99:b4:4b:04:92:58:c2:47:75:64:ca:89:ac:
         bf:8c:3f:be:56:34:49:a6:7c:51:0d:56:e4:47:c9:64:ae:5e:
         e6:36:52:ba:79:02:ce:7b:cb:62:ed:6c:a9:55:17:df:cd:b9:
         41:e5:ee:52:a8:27:28:91:21:13:42:de:ee:ae:ed:c3:88:f5:
         c5:9f:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----