Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File:                     opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier:          PrJU9ESoA9hwvjs0CPJT5Gyt98CRmr0+6z5mUs4rxIM=
Subject key identifier:   23:81:64:A4:A0:6C:80:51:FA:8F:53:1B:6F:0A:01:96:46:3C:45:46
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       05F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number:          05E2
Signing time:             Thu 24 Sep 2026 03:03:57 +0000
Manifest this update:     Thu 24 Sep 2026 03:03:56 +0000
Manifest next update:     Sat 26 Sep 2026 03:03:56 +0000
Files and hashes:         1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: SkiKMa7lfSQOCYMJXTRxRqnSmAWMHt3h2cFrWvVLWUU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Sep 24 03:03:56 2026 GMT
            Not After : Sep 26 03:03:56 2026 GMT
        Subject: CN=6ab4931d-dd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:91:2c:09:79:c8:ce:3e:79:83:aa:28:92:
                    f4:32:05:65:5b:29:36:84:6d:fb:0f:6f:0f:f2:7c:
                    59:0d:bd:ba:d3:73:42:18:47:aa:2e:32:4e:2f:46:
                    d1:23:f9:44:1b:cc:6a:95:fc:7a:2f:0c:9a:52:d4:
                    1d:c0:ad:c4:5c:16:79:94:4b:db:44:b3:6c:1e:8a:
                    ac:05:cf:2c:86:34:93:4a:01:9f:46:e3:f5:92:ef:
                    74:61:d9:70:e0:23:f3:57:e5:81:71:66:01:af:cc:
                    fd:e9:2d:4f:f4:fb:1a:3e:e1:07:6e:e0:94:53:f4:
                    85:33:62:e2:fc:91:79:b3:01:6c:5f:2b:57:d5:56:
                    f0:0b:35:41:03:c1:34:da:dd:62:1a:fc:a3:84:8a:
                    5b:98:b4:11:99:9b:50:fe:ed:bd:77:33:a4:51:a8:
                    d8:d2:6b:77:d7:fc:86:fe:7c:82:7b:c0:0e:5b:88:
                    c8:c4:5b:99:ca:0f:2d:b7:0f:54:3b:07:97:5e:dd:
                    75:27:0a:42:2c:8a:69:d6:15:2f:23:06:f2:c2:03:
                    1d:37:26:c7:c2:ad:29:ed:2c:bb:31:a7:62:e0:78:
                    7f:78:19:40:3c:f9:aa:aa:03:5d:e9:85:d0:7c:7b:
                    0d:4e:ff:7a:4e:d3:95:28:de:a2:d2:27:90:42:ae:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:81:64:A4:A0:6C:80:51:FA:8F:53:1B:6F:0A:01:96:46:3C:45:46
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9c:81:56:c5:5c:96:f7:b1:3a:09:d8:f1:f4:6c:65:9d:d8:
         6c:3e:32:76:b1:a2:ef:67:4f:ea:b1:0a:83:c7:cb:33:4a:dc:
         e4:83:de:51:15:23:8d:73:e6:34:df:0b:42:3f:01:d9:94:5f:
         4e:7b:d7:2d:db:d6:71:9c:71:9b:34:27:0c:6e:46:b0:ae:9b:
         44:c4:e3:3a:c0:3f:ed:71:23:76:1c:f2:aa:46:f2:ab:80:89:
         e4:a3:ca:5e:31:f4:e1:0f:92:b5:85:ac:cc:d2:46:e7:2a:50:
         c5:6a:a0:05:26:68:92:e9:8c:3c:87:7a:10:59:f4:88:50:d2:
         3c:e0:57:ab:bd:eb:81:f0:ea:bb:cb:04:3c:2f:b3:a7:75:ec:
         a6:62:64:45:9b:39:cb:69:fa:01:9b:a2:f8:07:86:af:a6:85:
         cd:b9:aa:ca:4c:36:91:07:4c:ec:03:30:a0:c2:e0:5d:ee:b2:
         12:57:da:26:32:85:6f:5f:98:4d:2a:ac:59:c0:b1:d9:9a:cc:
         84:02:c0:9e:94:87:d4:3a:cd:ba:f9:44:1f:93:6b:b3:82:84:
         24:21:20:d1:32:82:4a:a3:eb:b0:2d:09:d4:9b:85:8f:44:56:
         e8:f5:45:57:18:5c:a3:83:cc:1d:11:03:13:21:7d:c8:4e:47:
         7e:14:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----