Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36739A3/B4C8BD9C64DF11F1A409CFCBCE1D38B0/TY64DmThlcmYooPHLQJNBcs3suM.mft
File:                     TY64DmThlcmYooPHLQJNBcs3suM.mft (raw, json)
Hash identifier:          hZ9ktZEnN3ZrMzy8aE+bPXki0aEvH7avYEQw7QFBHNM=
Subject key identifier:   DA:78:B5:20:B4:D9:48:C1:6D:24:FF:1F:2E:23:37:10:80:D2:45:1C
Authority key identifier: 4D:8E:B8:0E:64:E1:95:C9:98:A2:83:C7:2D:02:4D:05:CB:37:B2:E3
Certificate issuer:       /CN=F36739A3AF/serialNumber=4D8EB80E64E195C998A283C72D024D05CB37B2E3
Certificate serial:       6A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TY64DmThlcmYooPHLQJNBcs3suM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36739A3/B4C8BD9C64DF11F1A409CFCBCE1D38B0/TY64DmThlcmYooPHLQJNBcs3suM.mft
Manifest number:          6A
Signing time:             Wed 23 Sep 2026 05:41:16 +0000
Manifest this update:     Wed 23 Sep 2026 05:41:15 +0000
Manifest next update:     Fri 25 Sep 2026 05:41:15 +0000
Files and hashes:         1: TY64DmThlcmYooPHLQJNBcs3suM.crl (hash: QMCUaWDdJCaB7r2gFdU8apFkCqG2F4KE6vEWq128Yio=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36739A3/B4C8BD9C64DF11F1A409CFCBCE1D38B0/TY64DmThlcmYooPHLQJNBcs3suM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36739A3/B4C8BD9C64DF11F1A409CFCBCE1D38B0/TY64DmThlcmYooPHLQJNBcs3suM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TY64DmThlcmYooPHLQJNBcs3suM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36739A3AF, serialNumber=4D8EB80E64E195C998A283C72D024D05CB37B2E3
        Validity
            Not Before: Sep 23 05:41:15 2026 GMT
            Not After : Sep 25 05:41:15 2026 GMT
        Subject: CN=6ab3667c-22c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:0e:e2:bc:d1:8f:12:ac:16:48:a3:c8:6e:
                    2d:fe:87:c1:0e:8a:6e:a5:d7:55:47:e4:5c:2a:09:
                    35:06:c3:48:12:8e:a4:11:ec:1c:ca:6a:ba:72:e8:
                    d4:bc:3a:37:2f:d9:da:f8:a0:46:8e:5b:a2:8f:ba:
                    43:a3:b5:e5:77:cb:2e:0d:94:9c:75:ed:e5:30:af:
                    93:39:9c:5e:48:be:8c:d7:84:b9:09:f6:f1:08:f1:
                    44:a5:e5:26:d8:f1:12:93:cc:7f:19:0d:97:af:05:
                    8e:3e:65:2a:fc:07:d4:75:78:64:0d:85:b3:a8:86:
                    59:d0:98:2c:b7:d5:3a:6b:af:96:cd:97:07:05:28:
                    f9:51:67:52:39:7f:0c:50:d6:7c:75:00:cc:56:e1:
                    ca:6c:de:db:fe:5e:3b:31:87:df:0b:3f:6d:e1:f8:
                    78:e0:a1:71:d4:b9:07:2e:08:ac:ed:2f:80:d4:91:
                    d9:b6:66:a5:89:40:05:77:6c:2a:51:ff:ff:ee:47:
                    49:5a:4b:79:9c:b5:f3:af:7e:73:7a:f1:75:4f:d2:
                    30:69:08:42:13:a4:74:a2:45:c1:2d:b1:3b:85:f8:
                    68:9d:da:f9:fe:a7:94:4b:90:0b:65:f4:ad:d0:cc:
                    a9:7d:75:c6:6b:6f:f3:6f:29:0a:8d:bb:41:90:6a:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:B5:20:B4:D9:48:C1:6D:24:FF:1F:2E:23:37:10:80:D2:45:1C
            X509v3 Authority Key Identifier:
                keyid:4D:8E:B8:0E:64:E1:95:C9:98:A2:83:C7:2D:02:4D:05:CB:37:B2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36739A3/B4C8BD9C64DF11F1A409CFCBCE1D38B0/TY64DmThlcmYooPHLQJNBcs3suM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TY64DmThlcmYooPHLQJNBcs3suM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36739A3/B4C8BD9C64DF11F1A409CFCBCE1D38B0/TY64DmThlcmYooPHLQJNBcs3suM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:2a:ad:46:aa:6e:a7:e5:de:f3:30:22:99:af:dd:89:b1:
         d5:9a:53:ba:4f:87:de:d3:16:73:56:e0:3b:c0:0c:76:46:61:
         b9:8f:ab:c1:d3:b3:02:b2:26:48:5d:0d:f2:42:60:4d:72:cd:
         88:e5:97:5b:89:ff:27:60:24:40:d7:78:d4:33:29:b5:5a:56:
         66:98:f5:9a:3f:1c:2d:c2:a6:d4:4e:4e:19:15:3f:2b:d0:6b:
         11:99:06:7b:ed:32:93:c3:43:a0:f0:02:59:d5:06:67:1f:29:
         8d:60:d9:a5:71:2c:3f:82:b3:93:5d:70:b7:ba:3a:66:1f:af:
         7e:6f:2d:e9:57:41:eb:92:6c:f7:c3:00:7a:5d:98:1b:f5:8c:
         9e:20:62:b4:5b:ad:20:43:b4:d6:b2:19:9c:66:50:58:cc:03:
         eb:af:4d:bf:39:c9:75:49:44:56:71:21:58:6b:17:da:ca:26:
         f1:89:48:d9:b4:ab:84:52:21:75:e5:3a:37:cd:4e:4f:78:a7:
         50:06:ba:2b:ab:8c:3e:3c:a1:ca:cf:b7:f1:82:d1:ed:75:5c:
         37:82:b3:56:b2:ae:d3:03:6e:88:fa:36:05:73:35:a8:f7:a3:
         ae:5d:8f:a7:2f:40:c1:09:b2:d6:a7:0a:a9:b3:ec:77:8f:35:
         a7:c0:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----