Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
File:                     IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft (raw, json)
Hash identifier:          he46LXQ132DvkwOXYNoOuFKx6WHaqzHp5JoLsmXUGi0=
Subject key identifier:   C7:1C:B0:B7:B5:55:97:0D:90:AD:1F:5F:87:E3:11:95:DF:9E:53:6B
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0662
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
Manifest number:          0657
Signing time:             Thu 24 Sep 2026 02:47:47 +0000
Manifest this update:     Thu 24 Sep 2026 02:47:46 +0000
Manifest next update:     Sat 26 Sep 2026 02:47:46 +0000
Files and hashes:         1: IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl (hash: BOgRXJ9WqTE00OaZGGZQOGxB6qCB16Y02wlPp6havMs=)
                          2: 7A8800C28A7111F180F127ABCE1D38B0.roa (hash: 2ehSc60zY3y4+5rl9i2l3o4/3/0osjXnhIwaZrI/PV4=)
                          3: 7338398EA39111F1925398E7CE1D38B0.roa (hash: KklqFodPk024WmEeD9hmlTQAo902LvAfcUVbvASz7Uw=)
                          4: 3A47BBAA8A7211F1B70D4BAFCE1D38B0.roa (hash: 9YxCC6XFigvI59ReTL1/gq9EKcFYu9AFVIy5WOLkals=)
                          5: D34D76AAA39011F1B63C8FE3CE1D38B0.roa (hash: fnJY6qM/XgZeiDqjF9qeQjNp6VvA4rCuICciFhfFGCg=)
                          6: E12966E48A7211F1AE9266B3CE1D38B0.roa (hash: G3gOlfSioE5sHcHggulA4GQis9x4ecOeCpryWDgr1yw=)
                          7: 260F9184A39111F1AFE100E4CE1D38B0.roa (hash: FsYETWCLrSw7ouKsJazu2E2w8f6wEBerzl6J6tAxKMI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Sep 24 02:47:46 2026 GMT
            Not After : Sep 26 02:47:46 2026 GMT
        Subject: CN=6ab48f53-0f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3d:3e:f7:4e:cf:3f:47:97:7e:51:a3:f4:7c:
                    74:b4:15:2b:ff:57:50:d2:8f:01:48:1d:81:d9:2c:
                    f3:47:09:b8:ac:14:8d:c6:72:7b:98:53:37:80:47:
                    58:65:9d:39:40:2f:9b:de:3a:8e:8b:19:c2:13:cc:
                    00:53:0b:0f:e1:34:91:a1:99:e5:84:87:2e:d2:0b:
                    a8:fc:06:16:04:bc:3b:e0:c1:ab:39:80:95:ff:7b:
                    e6:06:ea:b1:90:9e:f6:bf:e0:65:02:87:12:18:89:
                    57:55:27:f4:e5:c1:42:c0:39:df:4f:dc:68:2f:99:
                    35:ca:a1:05:a8:50:d1:30:9f:bb:9d:b9:42:50:fe:
                    7e:b4:50:8a:0d:fc:db:71:63:34:40:70:dc:1f:03:
                    9b:85:61:04:d1:de:25:6b:84:33:f6:74:5c:cc:e9:
                    8e:04:01:9f:09:b7:76:66:8c:1a:48:ef:74:db:e4:
                    88:eb:30:e6:bf:3c:60:2c:10:2b:d3:03:d2:43:c2:
                    8a:82:ac:07:37:b3:bd:1f:33:f1:ba:0a:85:7b:51:
                    76:ad:31:7f:da:a3:25:7e:37:a9:29:1a:95:a2:a9:
                    85:07:21:17:77:fa:2e:02:ce:38:29:63:e8:dc:b9:
                    35:1a:f6:99:79:ba:26:ba:96:4f:dd:6e:24:6f:e4:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1C:B0:B7:B5:55:97:0D:90:AD:1F:5F:87:E3:11:95:DF:9E:53:6B
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9e:83:87:85:84:61:a3:6b:1c:57:07:53:14:80:97:fe:ad:
         ea:3e:2a:e5:83:70:4a:62:2f:6e:bf:a4:8e:ee:95:63:2c:48:
         3b:e3:e5:6c:f5:e7:b1:f1:8e:e5:39:ba:8f:f8:00:3a:ff:1f:
         b2:7a:7d:7e:52:94:1e:f3:3d:6c:21:69:23:98:f4:08:ff:56:
         bd:6d:cc:ce:04:98:9c:ee:4f:73:b9:0b:96:e0:a7:fa:1e:b2:
         9a:54:a9:cb:5a:e7:63:a9:66:ab:3d:54:f4:7d:22:f8:cf:61:
         aa:ff:82:a2:db:69:37:94:42:b7:22:5e:05:f9:be:24:43:f7:
         98:b7:ca:84:ab:34:1e:86:27:25:30:4f:99:3d:f0:38:96:66:
         a2:90:7c:30:67:16:8f:6a:c6:bb:10:5b:9c:da:74:68:f3:06:
         af:ef:f8:21:8b:b7:90:ea:5a:90:60:fa:46:02:ca:8a:ee:69:
         67:b1:e1:f5:05:87:e0:8e:1e:d7:30:be:61:de:23:7f:ab:dd:
         dd:53:88:4f:29:01:f1:ca:2f:6b:3a:3c:7e:02:bb:ba:1a:62:
         ec:70:e5:d2:3a:29:47:4f:c2:da:87:cc:91:0b:f3:71:ae:b6:
         81:96:45:2c:e6:d5:e0:5b:be:58:c2:e7:f5:e3:15:e3:84:c8:
         a8:6a:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----