Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File:                     LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier:          f+CiIfdh6jfYuD4S1HoME+sIIeAYmS4Q/+EAMUwwoTs=
Subject key identifier:   C7:05:30:0A:EF:AD:62:35:87:5A:4B:69:A2:96:93:78:38:98:50:26
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer:       /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial:       0987
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number:          0987
Signing time:             Tue 13 Oct 2026 01:44:11 +0000
Manifest this update:     Tue 13 Oct 2026 01:44:10 +0000
Manifest next update:     Thu 15 Oct 2026 01:44:10 +0000
Files and hashes:         1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: 556rNd4VoT6f76e33/YylYZC8pFSbhe26NJQbpF7y78=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 01:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439 (0x987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365CA10AF, serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
        Validity
            Not Before: Oct 13 01:44:10 2026 GMT
            Not After : Oct 15 01:44:10 2026 GMT
        Subject: CN=6acd8ceb-3c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ba:26:c1:61:3c:18:1e:f0:47:4d:0e:23:cf:
                    e8:0d:80:d6:0a:58:8d:00:f7:f0:1f:1d:09:d7:38:
                    f3:c3:af:ab:0d:f0:24:b7:2b:6c:27:ba:39:73:f9:
                    cb:ea:16:aa:68:c4:26:d5:f4:03:87:ae:27:0f:4e:
                    01:70:54:80:cb:f2:50:fe:c2:00:b0:f3:e8:7b:d3:
                    9e:53:d7:30:62:59:a8:ea:36:12:2a:96:89:8b:f7:
                    0d:e5:03:2b:3a:1d:98:6c:f4:7a:c1:86:94:d7:ac:
                    a3:39:24:c9:77:5e:af:85:ea:85:53:9c:6e:13:91:
                    36:5e:b7:0f:06:cd:db:4c:f6:97:ec:ee:7a:3b:58:
                    f3:44:35:db:bd:9a:2b:09:66:e1:48:fc:29:94:12:
                    59:f0:89:e2:60:12:0f:c2:39:f3:c9:11:32:cc:08:
                    6b:7c:27:5a:59:32:38:5f:50:90:2f:2b:8e:ba:6e:
                    82:3a:b2:52:8e:27:28:40:25:c0:67:57:df:4d:01:
                    de:8f:e9:95:83:75:0c:3b:b0:10:29:d7:fe:0f:ca:
                    9d:cd:f0:1b:8a:56:bb:20:d3:5f:e5:a4:2f:7d:d5:
                    9b:77:5d:aa:b1:35:8a:aa:23:66:30:cd:ae:93:bf:
                    f0:ec:54:64:bf:72:c0:ac:56:f2:74:48:f4:de:44:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:05:30:0A:EF:AD:62:35:87:5A:4B:69:A2:96:93:78:38:98:50:26
            X509v3 Authority Key Identifier:
                keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:19:0d:4c:89:94:89:6f:9a:3f:9a:43:40:3c:58:09:aa:
         d9:7c:e5:60:fc:0c:b1:c9:ad:9a:7c:7c:b2:8a:7f:a0:22:7b:
         24:5b:ec:13:13:6c:20:d9:84:ec:27:ba:68:b2:bb:f9:91:7d:
         8f:02:20:0a:6f:be:08:05:3c:39:e7:ab:3c:b6:47:99:54:93:
         d3:c6:06:15:4d:11:2d:f6:a2:d2:a5:05:de:47:17:c0:b6:6f:
         42:8c:ef:e7:4f:d3:f9:de:36:86:82:73:85:e6:17:0c:c5:4d:
         cb:5d:d0:79:06:e1:0f:32:38:24:b9:0b:db:9b:c8:03:f2:37:
         87:c6:94:16:6f:3f:4b:60:cf:a3:aa:79:45:a7:99:72:c6:9a:
         67:ed:d5:71:47:05:12:58:de:ae:87:79:a9:97:f5:ba:18:61:
         93:f0:3a:17:44:29:c7:46:a9:99:f5:8c:fd:39:73:83:05:f1:
         96:9e:4f:01:85:ee:12:da:83:d8:e4:b5:cf:35:66:48:3b:a7:
         13:59:06:89:e2:42:6f:3f:a5:e7:6e:13:f5:80:67:d5:74:23:
         fd:2d:2c:69:17:a1:82:f1:10:e7:24:0a:31:21:5d:01:c2:55:
         21:2c:93:fa:55:b8:a9:fd:60:27:1a:f3:13:e5:36:a4:e7:69:
         2e:26:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----