Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
File:                     sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft (raw, json)
Hash identifier:          APcr/hkvJEwvgYmpqLxgog39V9KRuIIg0KCr08cTqzI=
Subject key identifier:   A7:46:BD:0B:47:92:85:72:75:7C:D8:9A:7D:30:F5:2A:9B:EB:05:FC
Authority key identifier: B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C
Certificate issuer:       /CN=F36702EEAF/serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
Certificate serial:       080F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
Manifest number:          080D
Signing time:             Fri 25 Sep 2026 02:04:16 +0000
Manifest this update:     Fri 25 Sep 2026 02:04:15 +0000
Manifest next update:     Sun 27 Sep 2026 02:04:15 +0000
Files and hashes:         1: sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl (hash: xBvG9RuaYk/e2v5HYkkRBayA2ZbpfnCoDQ2AvxQWndo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36702EEAF, serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
        Validity
            Not Before: Sep 25 02:04:15 2026 GMT
            Not After : Sep 27 02:04:15 2026 GMT
        Subject: CN=6ab5d6a0-7f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:bf:74:4b:b6:29:13:6b:b0:7f:11:dc:60:
                    08:71:53:d1:26:56:35:f0:d3:c0:ab:3d:dd:83:d1:
                    7c:af:a1:69:1d:59:68:d8:d7:5e:b6:e2:86:24:a3:
                    cd:32:54:c1:81:c6:aa:e2:2c:74:1e:52:1b:5a:d4:
                    4a:f1:e8:d0:91:ac:77:d9:ef:67:46:7e:3f:5f:20:
                    b7:dc:ec:a8:a4:6f:fa:05:34:8b:5e:27:d0:10:7b:
                    d6:78:19:37:78:b7:f9:85:c1:46:e8:4d:00:02:8b:
                    3f:bd:12:85:ea:f9:d0:60:00:fa:f8:27:88:57:bf:
                    6f:b1:d7:16:bd:45:29:98:b3:de:2c:1e:9c:94:af:
                    78:44:a9:4d:8a:04:b1:3d:d4:f7:5d:10:ec:ce:b9:
                    13:96:dd:ec:cb:77:02:fc:be:88:a9:f0:96:0e:e5:
                    18:d3:af:b6:74:d8:e7:62:12:34:ca:a5:e9:ee:97:
                    62:54:99:2c:52:fa:09:33:a4:25:61:a3:16:fb:d7:
                    1f:21:42:b4:0d:ad:6b:54:ce:43:14:c0:ca:be:64:
                    5b:26:09:55:9b:85:4d:a8:86:7c:02:07:00:b1:a3:
                    37:5b:9b:f2:30:9e:4f:b1:6b:6a:3a:9c:12:ec:a9:
                    42:8a:3a:37:96:19:96:f1:d3:8e:33:8b:4a:83:f7:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:46:BD:0B:47:92:85:72:75:7C:D8:9A:7D:30:F5:2A:9B:EB:05:FC
            X509v3 Authority Key Identifier:
                keyid:B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:c1:7c:6e:f2:bd:7f:c5:bc:91:81:cd:e1:42:ea:79:a3:
         4c:19:e2:81:55:f1:71:af:06:d1:d9:d2:86:74:25:33:0e:8d:
         5c:5b:bb:1d:4c:ca:38:af:55:89:f1:77:e6:e8:8f:34:dd:44:
         56:70:7a:17:d7:33:e6:3e:31:f2:57:66:49:aa:c0:ce:6c:9c:
         ac:8b:94:b8:e1:c9:d6:67:8b:63:6f:b3:8f:b3:38:2f:36:7d:
         63:84:a9:1e:44:25:8c:8e:89:64:ba:45:a6:78:37:f7:8e:18:
         cc:d6:e0:3c:ed:24:83:0d:7f:24:f2:51:4c:a2:b9:22:fd:1a:
         78:d9:f4:84:c5:72:46:16:e2:b7:6b:4a:1e:c1:e4:72:b4:d3:
         7b:5e:af:a6:28:0c:ae:a6:d3:89:98:12:dd:7a:8e:aa:a2:5f:
         6d:b3:ea:b6:22:39:04:45:21:a0:b9:65:d3:3e:41:c1:15:ef:
         5a:fa:ab:a5:90:97:36:97:43:1f:89:9e:02:02:ec:ef:26:ae:
         d1:e9:11:df:b1:1c:4f:d3:5f:39:c7:fe:79:69:ac:86:5f:33:
         9a:9e:ad:ad:b0:e8:e2:2e:2a:57:7e:e8:86:6e:f6:47:0b:17:
         3e:a7:f8:ff:b7:a6:a6:36:a7:cb:61:6b:a6:b3:06:ae:35:16:
         4c:bb:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----