Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
File:                     5hfTT1TsLbm6WEBc2glDH9OB8xY.mft (raw, json)
Hash identifier:          it4D6j7sB+MIZF6b6hR7UvCHGTP+Odnl2g8EggKscAE=
Subject key identifier:   A1:26:4F:DB:46:FF:D4:D7:86:68:9F:B7:E6:38:7E:0F:A8:17:DB:86
Authority key identifier: E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
Certificate issuer:       /CN=F3664674AF/serialNumber=E617D34F54EC2DB9BA58405CDA09431FD381F316
Certificate serial:       0858
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
Manifest number:          0857
Signing time:             Thu 24 Sep 2026 01:59:37 +0000
Manifest this update:     Thu 24 Sep 2026 01:59:36 +0000
Manifest next update:     Sat 26 Sep 2026 01:59:36 +0000
Files and hashes:         1: 5hfTT1TsLbm6WEBc2glDH9OB8xY.crl (hash: cCWoi3EboRY/8zFU5HkWK0qP3FHJA5KnLLiI0MoE554=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664674AF, serialNumber=E617D34F54EC2DB9BA58405CDA09431FD381F316
        Validity
            Not Before: Sep 24 01:59:36 2026 GMT
            Not After : Sep 26 01:59:36 2026 GMT
        Subject: CN=6ab48409-c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:f0:89:64:41:af:2e:d1:02:86:7d:56:43:
                    32:ae:8d:20:d2:24:52:bb:b8:be:36:46:3d:aa:dc:
                    ff:e6:4f:13:d7:fd:bf:4b:94:08:35:39:fd:51:b6:
                    ab:01:eb:29:e1:49:6d:ed:92:1c:72:3b:bf:28:e9:
                    b3:b0:8d:b3:3c:75:67:c4:a4:54:cd:5a:26:bc:6c:
                    15:00:e5:b7:30:dc:f0:ed:4c:87:55:4b:8c:8b:7e:
                    b4:a3:0d:63:d7:60:ad:63:1e:3c:62:8e:b5:7f:96:
                    ad:05:c1:de:9b:2f:b5:77:a3:fd:c2:07:4d:b7:ac:
                    4c:af:7a:59:6b:d2:07:d6:cb:20:1a:35:d4:5b:a0:
                    84:85:6b:a5:27:03:82:09:82:0b:ba:08:39:9a:51:
                    e3:f7:22:51:b9:d8:e0:1a:a3:71:02:ca:50:2e:48:
                    dc:79:55:39:f1:94:38:62:e3:9c:6f:61:45:3b:8f:
                    ed:ad:44:32:1b:60:aa:9a:e3:fe:76:7c:d2:c8:a5:
                    fb:c7:db:ca:ae:24:3f:a4:02:a6:9d:cf:a0:49:53:
                    b4:17:e2:79:1f:8a:6d:6f:31:1d:34:8f:27:72:7f:
                    40:99:78:1d:97:86:ad:6a:d4:1b:00:75:b6:1a:cf:
                    54:1c:f9:28:22:2a:41:d0:1e:5e:71:a8:1e:06:16:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:4F:DB:46:FF:D4:D7:86:68:9F:B7:E6:38:7E:0F:A8:17:DB:86
            X509v3 Authority Key Identifier:
                keyid:E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:89:98:01:ca:45:e6:04:be:53:ad:85:9d:1d:6b:c0:7e:6d:
         21:c4:0d:53:81:d2:db:06:0c:7c:18:49:ee:a3:33:8e:e9:0d:
         ec:6c:c1:19:cf:55:f0:5a:60:f8:31:7b:48:08:2c:fc:12:4d:
         dd:2a:45:63:27:17:a2:48:66:c6:12:ae:15:96:29:e5:8a:d5:
         f9:68:e8:dc:66:c0:8b:63:87:5f:8b:b6:64:59:46:69:37:31:
         b2:35:03:e7:d0:5f:77:bc:11:e5:26:4f:45:e3:9c:df:05:51:
         f0:76:b1:cf:3e:80:70:21:d8:7f:cc:09:a8:27:ee:8e:3d:27:
         38:ee:44:bd:6b:25:0a:67:be:36:9f:ae:e2:a9:0c:58:cd:9e:
         40:1a:09:e5:a6:a6:e2:69:39:46:d4:ee:cf:fa:8a:42:af:63:
         87:e7:13:5d:05:a9:13:51:07:fa:29:e5:ff:a3:fb:49:3e:0e:
         44:42:db:22:4e:c8:f8:60:8b:b7:2e:a2:90:55:3e:8b:86:c9:
         82:0a:90:1b:a7:08:bd:00:db:61:a6:1d:9f:ce:80:f3:f4:17:
         cb:c4:45:f6:6f:c6:e8:46:4d:2f:f0:4a:1f:0b:8b:70:ba:f9:
         13:ce:59:1d:e6:7d:4d:2d:7b:9e:c7:a1:09:68:88:e3:78:ec:
         57:3e:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----