Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
File:                     M3RPEtwtkNArK4aFUwjsHAeEk8w.mft (raw, json)
Hash identifier:          hbsNNQ7tSjAoY915ljoMaRsvX0uKPtao5UJxW1KIguY=
Subject key identifier:   0F:06:1B:67:D0:ED:FD:91:21:51:7E:8E:AA:CE:F6:BA:E1:8E:70:A6
Authority key identifier: 33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
Certificate issuer:       /CN=F36693F7AF/serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC
Certificate serial:       0CB8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
Manifest number:          0CB2
Signing time:             Thu 24 Sep 2026 01:10:29 +0000
Manifest this update:     Thu 24 Sep 2026 01:10:28 +0000
Manifest next update:     Sat 26 Sep 2026 01:10:28 +0000
Files and hashes:         1: M3RPEtwtkNArK4aFUwjsHAeEk8w.crl (hash: FWe26F0VrLnVBXcXgsfFuwVHIDeZGoD1JGs/AYGneUE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36693F7AF, serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC
        Validity
            Not Before: Sep 24 01:10:28 2026 GMT
            Not After : Sep 26 01:10:28 2026 GMT
        Subject: CN=6ab47885-4b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5d:7f:b8:2c:64:e8:f3:49:9c:93:8c:5b:4a:
                    ed:53:fe:ac:da:0b:f8:93:86:a6:75:98:7c:5f:c0:
                    f3:35:4e:8c:0e:0b:6b:ad:bd:d4:67:14:16:06:5f:
                    c6:81:53:eb:f3:07:ab:49:6e:c3:cd:05:8c:01:cd:
                    a0:12:59:a1:d7:d4:34:77:a0:00:d4:9b:7c:7a:1c:
                    22:d6:40:b3:97:4a:6c:20:ef:63:c0:7b:83:b1:27:
                    a2:1d:eb:b6:81:28:70:4e:c5:37:c5:6f:7d:93:44:
                    ad:dd:63:fa:a9:db:80:69:98:10:44:e8:a6:df:ba:
                    70:cd:19:3b:b4:f5:a2:60:d7:44:d5:b0:ce:76:94:
                    b7:69:49:86:e6:96:f4:8e:9b:06:72:1b:0b:3a:37:
                    33:f0:f5:94:58:ab:60:ff:e2:18:df:72:6d:c3:e1:
                    47:0d:5f:90:b2:44:fc:c2:fb:aa:5b:da:57:37:c7:
                    62:1d:22:90:c2:49:b6:04:86:d3:eb:e8:2a:ee:41:
                    06:4b:eb:18:86:4a:f0:2a:3a:b6:c5:bc:79:bc:a6:
                    8d:f0:ff:f9:43:d9:b6:1b:1c:f5:a5:2b:ca:61:d1:
                    73:c8:26:c2:b7:52:0b:84:c1:61:13:88:da:37:f9:
                    03:25:ee:1a:02:f2:27:6b:cd:2f:c5:5a:4d:b4:f2:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:06:1B:67:D0:ED:FD:91:21:51:7E:8E:AA:CE:F6:BA:E1:8E:70:A6
            X509v3 Authority Key Identifier:
                keyid:33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:dc:fa:34:9d:50:5a:f4:62:c2:26:90:03:6e:18:5c:1f:fa:
         89:37:04:eb:8b:18:1c:42:5b:f6:6a:c8:b3:60:ca:d6:be:c9:
         9c:fa:04:fe:85:aa:5c:56:a5:14:e3:cc:42:ef:72:c4:ce:80:
         11:70:50:eb:ba:c1:23:bb:9b:cc:41:48:5b:61:5c:85:ba:29:
         70:72:51:ff:be:3e:13:49:cf:31:23:bd:37:b1:2f:55:8b:8b:
         63:80:7e:42:02:e9:67:57:3a:0c:69:33:b4:57:18:a8:2f:aa:
         e0:e8:bf:97:2a:03:0f:d1:d4:93:94:18:d0:d0:46:4f:d2:82:
         55:58:42:6b:58:59:15:6f:cd:d9:16:5d:98:08:21:98:7b:5b:
         c7:1c:8b:bf:18:ad:cd:1c:a1:f0:93:df:79:d5:42:e7:3c:07:
         a8:02:cf:09:25:aa:64:d0:d9:c5:5b:47:4a:a4:6b:2c:80:af:
         51:32:ce:dd:84:74:bb:91:2f:4a:a3:94:75:ad:88:7c:dd:6e:
         39:73:1d:67:ba:56:25:91:fb:15:c7:cc:60:5b:c3:7d:e5:1d:
         be:61:fe:aa:56:5c:a6:a9:dc:88:8d:91:38:86:34:08:8c:eb:
         f1:03:4c:19:6c:d1:0f:15:64:28:0d:16:87:57:6f:92:c0:e3:
         ec:ed:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----