Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          pC4EDsk/ircAq4QSBcoa+aNM2myk/s7x6EgP91yY2Fg=
Subject key identifier:   69:52:64:98:CD:32:2F:08:86:0F:F2:70:43:25:5F:7D:B5:C3:70:40
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       0521
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          0521
Signing time:             Thu 24 Sep 2026 03:20:44 +0000
Manifest this update:     Thu 24 Sep 2026 03:20:44 +0000
Manifest next update:     Sat 26 Sep 2026 03:20:44 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: 6i/n0Lb8zy0SUipPpx36LCsG+/sXTJ3n0i3VPzsXUDk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: Sep 24 03:20:44 2026 GMT
            Not After : Sep 26 03:20:44 2026 GMT
        Subject: CN=6ab4970c-d8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:b9:ee:00:c3:ae:f5:d4:79:46:e6:97:6e:
                    db:90:c3:32:25:47:86:dc:77:39:2d:02:56:61:18:
                    e3:ea:74:ae:f3:aa:39:35:74:56:93:a1:9a:2a:0e:
                    dd:3b:fe:72:b3:73:c7:46:3d:64:25:18:25:95:ab:
                    b3:a7:87:b2:e2:12:c1:4b:f2:f6:13:a6:85:56:77:
                    2d:c1:24:83:ab:70:7f:bb:e2:fd:ef:e8:c9:96:b8:
                    b8:a6:c5:22:c6:e3:1b:4a:a0:e6:fe:5c:a3:35:2c:
                    13:a4:b5:22:9a:5c:16:45:18:67:6a:d9:26:17:87:
                    8e:eb:e0:25:e3:25:78:97:30:2a:2a:44:c8:fa:40:
                    9a:6d:31:91:9c:da:aa:ab:c8:20:3b:bc:4e:43:08:
                    46:1a:0e:39:c6:6c:e8:40:ee:b6:6e:6d:8b:44:b5:
                    2a:4b:d7:1f:89:93:4a:13:06:60:74:84:f0:8f:b7:
                    cb:42:5c:f2:a3:2e:94:27:d5:a3:76:35:91:f9:00:
                    a1:1e:07:b1:ba:f6:0c:27:92:df:ad:4c:49:73:31:
                    3d:eb:4d:33:d2:c3:e9:56:d7:b9:8a:74:0a:18:e0:
                    b3:e1:83:2c:3e:f9:f6:38:8d:14:f9:4c:20:84:33:
                    59:63:94:e1:ea:7b:57:42:00:6b:f4:06:9b:98:9c:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:52:64:98:CD:32:2F:08:86:0F:F2:70:43:25:5F:7D:B5:C3:70:40
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:23:42:14:71:dd:5f:8f:9f:a4:f1:2d:7a:8d:e9:8d:35:4b:
         e0:61:08:ef:c4:19:7e:2c:2a:af:62:7b:e0:a6:1a:7c:6d:c2:
         5e:e3:3f:a2:b2:03:0b:57:d2:69:29:e7:e4:c1:39:1a:d7:9a:
         40:d9:65:c2:50:ca:16:2a:82:87:05:80:80:dd:a3:8f:c6:b7:
         22:c8:89:88:69:95:0b:00:d4:3a:29:ba:b6:d9:8e:66:50:35:
         7e:21:3f:46:ab:7d:28:25:5d:4d:a0:70:b7:88:68:cf:23:30:
         ae:af:2c:ac:f1:0f:81:f7:5b:ae:2e:33:31:cd:87:94:a0:6e:
         df:01:df:11:6b:b9:ff:34:e7:55:90:32:91:bd:a9:b2:e7:c2:
         84:04:de:df:d4:5b:be:6c:e3:bd:95:e6:7d:b8:46:1f:10:10:
         7f:ac:b2:6e:91:7b:3d:f6:2c:1b:76:05:78:b9:94:56:ad:d3:
         8b:4d:55:4d:ae:da:5a:3a:96:e2:aa:8e:5d:68:22:73:dc:05:
         40:54:f8:7b:d9:22:42:e3:ee:39:33:d6:8f:c5:b9:0c:86:ca:
         28:34:32:e7:23:a4:99:ac:68:ac:80:19:16:e8:22:bb:bc:f8:
         06:e5:57:bd:29:09:76:e0:3d:74:a1:bf:ec:72:a8:75:14:c2:
         79:0c:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----