Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File:                     X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier:          Hkwn0mefuQwjarCpe+2XDtXdU9PTo9Xk5ivTYDoalKY=
Subject key identifier:   1F:A1:72:FA:DB:D2:D6:C7:5B:D6:E8:43:1B:EE:14:55:84:37:93:A8
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       0455
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number:          044C
Signing time:             Thu 24 Sep 2026 03:47:38 +0000
Manifest this update:     Thu 24 Sep 2026 03:47:38 +0000
Manifest next update:     Sat 26 Sep 2026 03:47:38 +0000
Files and hashes:         1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: yzjoMFp8wMSzWlAbFn7HsMeaG0eTCo9ivTKp6tC0oaM=)
                          2: BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa (hash: QgCzz1u02jAncdSqmMDgneUgSDpivS4kunm1jBqDAMg=)
                          3: AE083B9A221D11F1B6A7C7B1DAE4EC9C.roa (hash: BZz928+JG9DymUs/tfXn2o5xj9tzz1PFhKTIyjMNWuU=)
                          4: EEED23E0221E11F1929878B9DAE4EC9C.roa (hash: PIbvfw2+WuzsuifwkM5C+2Xq3LEZFo6ygJtOvVyzU5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: Sep 24 03:47:38 2026 GMT
            Not After : Sep 26 03:47:38 2026 GMT
        Subject: CN=6ab49d5a-00ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:c9:69:b1:17:2f:68:5f:2f:7e:7c:3e:ef:
                    d8:f8:30:be:c4:95:4f:15:b6:73:e9:69:68:86:da:
                    ab:8d:e0:71:95:15:40:49:0a:d4:7f:94:bf:8e:91:
                    37:b0:c8:eb:3c:be:09:18:33:6d:17:f8:71:47:cf:
                    bb:33:ad:1b:48:5b:f7:ee:86:40:2d:92:85:ab:55:
                    df:34:a9:4c:96:40:53:46:85:4d:17:a7:22:07:33:
                    a2:51:90:7f:8b:88:19:52:99:ea:ce:2f:98:17:cd:
                    1b:86:6a:8b:28:5e:ba:3d:c9:a9:e4:e6:b4:50:9a:
                    67:72:df:e1:14:1f:6c:8e:9c:82:02:67:49:c7:c3:
                    f9:db:bc:7e:2d:5b:5d:4c:e4:1d:bf:6e:9a:1f:f9:
                    47:f2:96:31:af:8a:ea:eb:30:1e:bf:bd:0c:3a:b3:
                    1a:a2:cf:1b:ef:cf:7f:02:e0:f7:d7:8a:a8:7c:eb:
                    0e:16:bb:92:bb:a5:f0:e6:71:ce:31:bd:7e:2e:7a:
                    e5:42:3f:85:a6:2e:de:0b:83:20:90:82:84:45:c2:
                    36:37:e6:21:c8:cc:6b:a8:b2:71:34:e4:0a:9a:40:
                    84:26:26:bf:67:63:99:37:73:92:ee:46:57:60:78:
                    b5:19:64:c9:79:e8:31:f6:0d:b4:95:47:86:8e:66:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:72:FA:DB:D2:D6:C7:5B:D6:E8:43:1B:EE:14:55:84:37:93:A8
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:4a:5e:1e:0c:c6:e9:5e:02:9c:e0:60:84:9b:2d:14:09:
         a8:1e:df:ae:73:62:44:0b:a5:53:e7:7b:66:aa:59:79:92:fe:
         f4:c8:bb:4d:b4:e1:9f:51:44:88:e3:78:4d:85:6e:43:14:93:
         40:f5:50:01:85:3d:2d:8a:9a:e1:73:67:28:68:64:b5:41:3b:
         ea:d2:92:af:cd:84:d0:3a:5d:ef:53:77:cd:84:9f:83:d3:70:
         c9:b3:8e:83:6f:ee:f8:15:b4:d7:6f:ec:61:c7:94:ab:5c:0a:
         7b:7c:63:55:6b:1c:1a:b1:e6:bf:e1:9e:45:d9:28:8c:64:ec:
         7e:26:70:69:6f:c3:ad:62:f2:1a:71:3b:33:d2:24:54:6f:fb:
         99:f8:61:98:54:1e:50:08:8f:5e:7d:c1:5b:a5:a8:38:46:28:
         b7:28:a7:dc:7d:94:10:10:12:41:bc:f9:fd:12:c4:73:8f:7d:
         f3:ee:cb:4a:17:4c:9e:9a:9e:15:0e:96:fc:dc:a9:ad:df:3b:
         fd:c4:ee:7d:83:21:b1:07:ea:b5:49:ba:ed:d7:ea:d1:38:84:
         07:1b:fa:80:e3:b1:0b:46:66:6b:70:e6:e4:67:f4:55:7b:5e:
         24:6f:f8:41:84:57:47:e8:98:ce:6a:9f:0d:cc:5b:5a:9a:59:
         13:dc:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----