Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File:                     zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier:          CFPUKZHqbrz3V+10Unpjn+8I899GTz5AbT4DVAVlQIE=
Subject key identifier:   F0:AB:6C:B3:03:07:65:DF:8A:EF:AB:8A:B6:49:EE:24:B6:F8:45:96
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer:       /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial:       03DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number:          03D7
Signing time:             Fri 25 Sep 2026 04:01:42 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:42 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:42 +0000
Files and hashes:         1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: aPLyR8MVbKT7fW262FD6aR03Z/4/i1pa7F3yQfWqZ4E=)
                          2: FC64D1D48EE011F0B3A4FFD5DAE4EC9C.roa (hash: zY17Hz4jbMGQpgxbaFtO0TqzRfRypKeMCm7nEpXL5dE=)
                          3: 2C041FAC923411F0874B46D6DAE4EC9C.roa (hash: tpKq8PaEgXxqsGmsi4xOkcd5uGMB++pELB/BO/L5apA=)
                          4: 1D9C2C128EE111F0A05232D6DAE4EC9C.roa (hash: 7/mPJegDzNGobxEPvcoOh9hmADeWp/7DZNVsknf5CfY=)
                          5: BDE21C828EE011F09E89A7D5DAE4EC9C.roa (hash: cEX5P0LZESnFW9UZ+j/fDOgJ1NZiXq4fEZ5TJVNJvnU=)
                          6: 22722218325311F0BEE5CBA8DAE4EC9C.roa (hash: 7FOq4iC+f8KGAzh35/6t4/kdL+NWHJr1WwivNfCgRGY=)
                          7: 06029CE8923411F0959B1BD6DAE4EC9C.roa (hash: KM6FaZ3N+6xYLUdr8UC2IJ+8T0cxiZ1kpB+SMdMA704=)
                          8: DE17D8988EE011F09D4FC2D5DAE4EC9C.roa (hash: Zz8H6d1f6QpmD+EtnMHU3iTAeKWNSu5vjH3b+kGHQZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
        Validity
            Not Before: Sep 25 04:01:42 2026 GMT
            Not After : Sep 27 04:01:42 2026 GMT
        Subject: CN=6ab5f226-bf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:28:62:b8:40:1d:93:ef:f4:eb:14:68:36:
                    1c:42:d6:67:b2:33:32:d4:33:10:c5:6b:e9:37:4f:
                    76:9c:71:10:60:2a:90:85:04:ee:b8:c1:c5:83:1b:
                    75:bb:59:e2:64:d1:7c:7a:37:0b:c8:59:37:98:f9:
                    8f:2f:ed:54:e1:f1:e0:42:f4:16:c9:89:0e:33:7b:
                    e7:8c:2c:09:84:d5:0f:a9:bc:a5:d9:06:a3:67:70:
                    d7:78:56:d1:9e:b0:8c:53:ee:aa:ed:58:6a:a9:01:
                    60:09:7e:fb:e7:34:95:06:67:9d:2a:42:76:0f:28:
                    89:b7:58:ea:b6:62:09:aa:07:ce:e9:88:01:e6:16:
                    91:7e:3f:d8:91:8e:c2:c8:4b:8f:72:09:57:81:75:
                    97:e6:5e:aa:b8:d0:22:f2:5d:3a:98:68:d6:f8:c1:
                    42:31:bf:f7:54:4a:d5:71:34:a8:14:85:98:f6:9d:
                    d3:77:ef:ea:fe:42:cf:fe:0c:a7:63:71:27:79:63:
                    9d:8d:62:12:c9:fa:b8:25:37:a9:34:ad:2d:e7:95:
                    a8:93:c8:76:15:e8:be:c5:72:59:ff:20:3c:c2:d5:
                    d8:11:c0:86:8a:11:f1:9c:6a:e8:47:fe:02:94:dd:
                    86:bc:e4:9f:7d:d3:53:cd:98:12:70:96:ae:cc:38:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:6C:B3:03:07:65:DF:8A:EF:AB:8A:B6:49:EE:24:B6:F8:45:96
            X509v3 Authority Key Identifier:
                keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:71:b1:d8:ba:90:7e:d0:02:59:4c:cb:b1:b2:5d:19:7a:b1:
         91:99:bb:e6:79:06:0a:33:ef:ae:08:c8:34:85:ff:33:49:a3:
         3d:15:8e:ae:10:28:2d:83:9d:8f:f8:71:bb:c6:73:58:96:cf:
         99:1b:58:90:36:73:f5:4f:21:44:29:14:c3:e7:53:04:62:db:
         f0:e6:dc:74:a7:49:49:01:8a:82:98:cc:fe:70:1b:16:c3:91:
         a4:fb:b5:d9:56:17:c2:4f:bc:86:c4:ce:62:b6:11:91:8b:0f:
         ed:8f:0c:7b:a2:a9:b6:67:6b:51:7c:3d:07:3a:ff:f5:47:6c:
         b6:99:32:53:f6:f0:e3:35:1c:29:f9:52:02:6e:ab:2d:e8:67:
         8a:44:2e:a8:ae:bc:0e:03:a5:06:85:d5:b3:9e:f8:3f:51:df:
         21:b5:fc:ce:da:29:82:dd:cb:0f:47:0f:35:1c:ae:ea:9c:f4:
         6a:d1:65:74:b9:3d:96:a9:b7:b0:c0:d6:49:2c:f7:30:62:bc:
         3e:93:b5:a0:d5:fd:31:49:18:e2:5a:09:af:88:d7:f1:cc:d6:
         86:63:57:bb:58:08:e2:e6:ce:3b:06:67:86:06:99:07:0e:23:
         d8:65:4b:66:7e:b8:d3:11:de:72:a2:29:f1:bd:a7:21:44:3b:
         ce:23:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----