Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          quAA+m/fgcrh2oXj4WlyqXe665YV2e4xPaytwEoNHaQ=
Subject key identifier:   C0:7B:F4:BF:A6:7F:A4:53:D8:BD:4F:7E:1B:29:AD:B2:9E:0D:2D:47
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0EBC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0EB7
Signing time:             Sat 26 Sep 2026 01:04:01 +0000
Manifest this update:     Sat 26 Sep 2026 01:04:00 +0000
Manifest next update:     Mon 28 Sep 2026 01:04:00 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: yu3AJo0A3A3oLt6g1d2jGY+XjSU+HFvMCksHdI6wcIc=)
                          2: B1757762C48911F0B5A12AF6DAE4EC9C.roa (hash: b5Wcnn4AFWyn401Xj8s2haIgucvxNhp1qnKFpV0Gekw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 01:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3772 (0xebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: Sep 26 01:04:00 2026 GMT
            Not After : Sep 28 01:04:00 2026 GMT
        Subject: CN=6ab71a01-9d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c8:f4:fd:84:81:b3:68:56:42:ad:92:9d:6b:
                    54:b8:d4:d2:c2:83:ec:27:e5:c2:94:a0:7f:55:b2:
                    48:84:56:36:ea:57:91:6f:aa:5f:2b:3c:4c:f5:89:
                    9d:f5:c8:da:4f:2e:d0:f5:2a:a2:f1:48:64:a5:c6:
                    ba:61:3e:ac:33:01:8c:24:4f:be:87:4b:7a:84:9c:
                    b6:41:a0:9a:0a:ba:ee:0a:7c:73:6b:e5:6e:9e:5f:
                    80:bb:fb:09:a5:64:9e:87:c3:e0:a4:91:24:13:92:
                    b2:f2:b8:f1:6f:9b:22:0c:31:6a:d2:b1:e3:3a:07:
                    44:d9:43:ca:52:bb:ec:52:9c:33:60:70:e3:06:d0:
                    0d:75:12:ee:b9:8a:d2:9f:c2:6b:db:7f:a7:20:4d:
                    ec:8d:ae:5a:45:dd:60:09:80:a1:ab:b5:9f:fb:ab:
                    79:ed:d0:55:37:3f:84:0b:c0:af:d6:d9:a4:c7:da:
                    31:26:49:ce:5c:b3:2f:ec:fc:48:69:20:d1:ff:d4:
                    af:ac:f3:1c:47:5c:d3:5a:5e:a2:ba:dd:15:cc:7e:
                    01:c4:dd:2a:0a:78:7c:ab:d8:ac:50:d9:e2:db:12:
                    19:69:9c:82:67:73:6b:ba:c2:79:5c:fd:ab:3a:e9:
                    5d:b0:7f:5a:5a:e9:f6:e6:56:fa:a0:5f:90:c0:bc:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7B:F4:BF:A6:7F:A4:53:D8:BD:4F:7E:1B:29:AD:B2:9E:0D:2D:47
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:28:b0:db:4d:49:6b:c8:00:c0:c9:b9:bb:05:1a:ca:7f:08:
         e7:88:ff:66:0d:60:ba:92:13:b2:69:71:e0:28:51:99:56:9d:
         42:c0:68:eb:7f:36:a6:6c:21:36:58:80:4e:45:8c:be:9c:fe:
         1b:1e:d9:ca:36:06:bb:3c:2c:59:5f:48:13:b7:fd:d0:42:26:
         b5:eb:72:88:02:59:3e:eb:cf:22:0f:24:be:5d:f4:26:58:c4:
         fa:c7:83:fb:ee:ef:cd:5c:4b:1c:50:ce:18:fe:8e:60:5d:44:
         f5:b0:1c:35:2d:00:58:27:b2:b4:1b:5f:6d:58:e7:a7:a9:6a:
         89:d7:f4:e1:15:3e:ee:21:d4:bf:ce:81:23:a0:2e:bf:d3:3b:
         fc:c4:11:a0:69:1d:f7:f3:75:a1:a0:7e:76:fb:0b:33:63:8f:
         7b:a2:58:9b:a0:c9:f2:77:03:9d:ee:9a:65:35:14:06:91:4f:
         18:97:64:4f:d9:e1:9e:77:63:75:be:de:df:84:bf:a4:f5:39:
         c9:39:3d:71:ec:0a:84:ab:c8:7f:69:46:9d:5d:0d:ca:cd:f5:
         4e:33:e5:71:1c:c3:ed:ae:18:e9:74:b5:c1:31:d2:e0:d4:14:
         89:cb:84:6a:d9:c9:fd:bc:a3:fd:3b:fd:f5:48:a6:b2:a5:e5:
         f0:12:13:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----