Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          WM8IAH4KhYyJm2rm7Cl2ucb4zpWtWZoYP2x5TS6mC9M=
Subject key identifier:   85:32:84:02:12:F1:49:63:AA:86:62:52:C4:08:3B:98:84:AC:9C:78
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       0498
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          0498
Signing time:             Thu 24 Sep 2026 03:37:24 +0000
Manifest this update:     Thu 24 Sep 2026 03:37:24 +0000
Manifest next update:     Sat 26 Sep 2026 03:37:24 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: 3ZKkIbSi4/QnDaBUB+tPizCwa0Wr/7Z9XC9F7sBGKs4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Sep 24 03:37:24 2026 GMT
            Not After : Sep 26 03:37:24 2026 GMT
        Subject: CN=6ab49af4-7588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:9c:02:d8:dd:15:28:15:d1:3d:bc:50:98:
                    4e:84:a5:a7:24:24:4c:e2:7b:88:61:d6:d8:23:51:
                    ca:19:62:99:e1:b5:3e:39:12:03:39:33:60:bb:61:
                    64:ed:c3:95:34:3f:58:39:ab:ee:ee:07:2b:2f:81:
                    5a:b4:da:5f:e5:91:eb:3a:ea:64:7a:73:05:70:a6:
                    55:57:e5:67:7e:70:0a:03:7d:a2:1b:fa:45:e6:b5:
                    55:d2:28:77:8e:3b:ec:9e:46:88:c1:f8:10:37:65:
                    5f:7a:cd:0e:e8:2d:78:9d:a8:e6:38:26:45:ec:9e:
                    8c:9c:a5:0a:86:ed:ce:89:5c:0a:87:ec:a8:42:60:
                    fe:bc:e1:1c:e9:91:1a:6c:f9:99:ce:ca:b9:2f:79:
                    0f:2e:a9:f7:e1:f7:c2:61:94:30:c5:f3:1a:96:a7:
                    88:bd:0a:93:96:c8:10:0d:86:d5:a5:c1:bc:e4:0e:
                    e2:c1:a5:98:5d:8b:1b:8f:b6:b9:eb:d6:35:0d:f0:
                    3a:b6:6f:ed:02:7f:50:14:d4:8d:d8:4f:f7:bf:4a:
                    0d:be:66:59:93:8a:e5:bc:11:84:76:eb:47:9f:57:
                    0d:be:f7:2e:76:ab:af:f3:c9:fb:a9:4c:48:40:e7:
                    fb:0e:de:b3:b0:72:8c:d5:ae:04:ce:29:d7:a1:30:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:84:02:12:F1:49:63:AA:86:62:52:C4:08:3B:98:84:AC:9C:78
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:48:f6:47:c8:1c:21:a2:f2:d5:0b:5f:16:b8:5a:2b:b0:
         75:09:bf:69:99:c3:83:a3:4a:82:25:50:60:8e:0b:16:83:2a:
         c1:35:ee:66:70:f4:98:ab:11:eb:7c:15:49:77:bc:1f:48:6f:
         22:0b:ca:62:64:1c:48:d3:c8:41:7b:bf:d6:e6:1a:46:f9:41:
         ac:d8:45:d0:a8:3c:df:20:73:ee:50:8c:7b:6a:2a:94:fc:bc:
         a3:a8:69:c7:23:72:cd:ae:39:d8:7b:ca:f7:e3:dd:78:ad:a2:
         28:ab:58:82:ec:8a:05:45:87:13:65:47:0a:d9:36:d0:b2:9e:
         10:f8:79:e0:1a:54:de:e6:7a:e0:c9:3e:78:b1:b7:ee:a0:6a:
         24:fc:1b:cb:64:53:c6:6e:02:12:9e:2d:93:a7:91:4c:07:29:
         92:7d:2d:3a:c8:6a:1a:ce:02:e7:59:a2:d1:9d:f8:e0:28:3b:
         3e:4e:41:2d:1e:7e:37:a2:fd:e3:dc:76:95:32:2b:a3:a9:ff:
         80:fb:15:1b:47:b3:ee:bd:16:59:05:18:23:e8:bf:b4:93:cd:
         57:19:65:39:17:36:58:d7:0a:6d:30:05:bc:5c:3e:11:d0:a9:
         81:85:b4:50:90:28:f9:fd:70:77:f9:ff:7c:b7:a0:ae:76:3b:
         04:e2:cf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----