Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
File:                     NoqlwYM32LEA43kHcgA1BOIR25U.mft (raw, json)
Hash identifier:          zJoWLeoaQNEhx2VgQTjwPRTfAtfKWABDR0NbTsKSDJE=
Subject key identifier:   D8:16:C1:0C:F9:96:AA:8B:DA:23:40:AD:E3:FE:61:C6:A9:4F:9B:43
Authority key identifier: 36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
Certificate issuer:       /CN=F3664815AF/serialNumber=368AA5C18337D8B100E3790772003504E211DB95
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
Manifest number:          0101
Signing time:             Sun 27 Sep 2026 05:23:56 +0000
Manifest this update:     Sun 27 Sep 2026 05:23:55 +0000
Manifest next update:     Tue 29 Sep 2026 05:23:55 +0000
Files and hashes:         1: NoqlwYM32LEA43kHcgA1BOIR25U.crl (hash: ejQ/3ut182DJVI/u8HeG2FdGxjiolKCaOAQSozZXyEs=)
                          2: 728FCC2EF1D811F0A90A06B4DAE4EC9C.roa (hash: 6RL/4V6ZWEbg7BN3QUTvLxt/VnmJ1eoKO54see9w44I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664815AF, serialNumber=368AA5C18337D8B100E3790772003504E211DB95
        Validity
            Not Before: Sep 27 05:23:55 2026 GMT
            Not After : Sep 29 05:23:55 2026 GMT
        Subject: CN=6ab8a86c-a4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:03:29:a6:cc:30:11:c5:35:b0:8f:67:9b:
                    80:33:f6:08:29:64:b7:35:30:99:93:31:f4:1e:9b:
                    ca:4c:55:4a:c5:2d:16:ab:fa:26:45:9f:9d:4d:24:
                    2d:d7:5e:c7:78:83:7e:d2:c6:fe:4e:d9:5d:32:9f:
                    fc:cc:3d:cb:45:df:47:52:e8:9a:c5:ee:3f:a8:bf:
                    0f:79:53:9b:57:2b:f2:27:b7:8c:c1:f5:cf:da:bb:
                    bc:ed:f1:11:e5:8d:a6:da:25:5a:63:44:a0:34:a3:
                    b9:28:ce:81:3a:6b:b3:c4:76:4d:79:b1:a5:ac:4c:
                    46:0e:3a:50:41:00:00:a1:2e:0f:59:ac:cd:0f:bb:
                    95:a9:32:d5:a4:a4:ff:e7:ef:27:63:0d:68:18:44:
                    10:9b:f2:e6:46:40:f1:b6:e8:bc:b0:15:fc:24:03:
                    23:f7:7a:28:b8:bd:e8:12:ce:ab:69:56:8f:b0:60:
                    28:b4:e5:b7:34:94:98:01:2b:b3:37:fe:22:93:b0:
                    81:8b:e8:2e:1b:b1:ab:24:52:d4:da:8c:72:90:9e:
                    ae:09:40:95:1a:4e:01:a5:51:ee:d1:05:d7:fd:fe:
                    f1:e0:af:d5:b1:63:e5:be:35:29:99:d5:c7:4d:eb:
                    1e:49:62:f1:52:cf:ea:02:cc:b1:bc:98:f0:6b:ca:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:16:C1:0C:F9:96:AA:8B:DA:23:40:AD:E3:FE:61:C6:A9:4F:9B:43
            X509v3 Authority Key Identifier:
                keyid:36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b1:54:2c:2b:0f:22:0a:e4:ad:5e:56:1e:3b:de:ed:a9:5c:
         a0:50:2f:db:dc:f7:2d:66:12:62:08:49:bc:66:e1:91:e5:2f:
         7e:13:2b:93:a2:98:13:a1:1f:b4:8d:95:0f:35:9b:d9:34:bd:
         b0:4b:44:5b:16:57:5b:e0:c5:dd:85:e5:d4:2a:d1:4e:d5:e4:
         00:29:35:4e:75:11:66:43:36:d4:2a:d0:d5:0d:fe:98:3f:7f:
         8d:4b:58:ad:36:5f:d1:d8:b7:90:fb:e7:8d:1f:3d:22:8e:04:
         ba:59:15:85:98:ba:ca:e1:b3:33:25:36:f0:ad:41:dd:96:e5:
         5d:db:98:02:9f:eb:80:fd:11:43:15:26:c8:0f:25:50:bb:e2:
         4a:92:3b:5f:c7:3b:e4:5e:8f:e5:94:5b:b2:3b:d2:d1:e8:5b:
         c4:ea:c5:f6:39:4a:d4:47:48:eb:d3:f3:a3:9d:0f:8e:09:62:
         30:ac:09:c2:35:2d:83:bc:6a:f3:4e:d5:c7:9e:01:e3:0f:36:
         65:33:89:c5:a7:ab:67:c5:f4:1d:f5:41:3c:90:30:fd:ed:cf:
         ba:42:3e:47:fb:9b:b1:7b:6d:f8:63:65:97:fa:f1:18:f2:e2:
         5c:51:86:b1:9a:58:77:a7:4e:05:82:4a:d4:d4:e7:28:63:00:
         2a:e4:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----