Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
File:                     bJsrNyrAnSupJEghWppeH0zsS-g.mft (raw, json)
Hash identifier:          q4A/3EZqtw2RGL3G10bAj86hFg7O50utPvtEZqvRPBU=
Subject key identifier:   85:07:44:96:59:B0:B2:EF:E6:E6:EF:1C:7C:44:B6:C5:0D:E2:D8:AD
Authority key identifier: 6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
Certificate issuer:       /CN=F3676F2FAF/serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Certificate serial:       05CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
Manifest number:          05CA
Signing time:             Wed 23 Sep 2026 03:03:39 +0000
Manifest this update:     Wed 23 Sep 2026 03:03:39 +0000
Manifest next update:     Fri 25 Sep 2026 03:03:39 +0000
Files and hashes:         1: bJsrNyrAnSupJEghWppeH0zsS-g.crl (hash: j0kYM1mi+3NYA79V+iUAe5s91ErT258pEISmpdWiTGo=)
                          2: BCC0C0828A4E11F1AF8FB4D7CE1D38B0.roa (hash: jI/cKEdATEeH2PHfBDf2iu3vd6SLnRo4mjZ4eb8OCSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676F2FAF, serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
        Validity
            Not Before: Sep 23 03:03:39 2026 GMT
            Not After : Sep 25 03:03:39 2026 GMT
        Subject: CN=6ab3418b-9c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:f9:73:8e:0b:44:de:6e:e0:6b:03:18:41:
                    32:1b:91:60:ad:f6:e6:0c:7c:cc:2a:8d:ed:f0:77:
                    86:71:f9:9a:52:d5:82:bf:c1:b5:84:34:25:88:bb:
                    b5:10:5b:4d:0d:f1:a6:47:ae:06:a4:bb:b7:e2:1e:
                    2e:e3:c5:e3:64:8c:88:76:d3:de:4a:66:4a:ba:64:
                    3f:0d:a3:a1:4e:b8:bc:1b:32:4d:6d:61:ec:06:8e:
                    ef:1a:88:4d:81:cc:3f:93:0c:67:c4:8c:16:59:1f:
                    28:e2:7d:a9:6e:03:df:5b:2a:06:19:57:58:00:b7:
                    5a:04:cc:06:d7:f3:4a:91:0c:cc:19:8a:ec:24:a5:
                    a5:b7:24:f0:e2:2d:54:00:96:3a:70:cf:b7:5f:f1:
                    42:3a:e2:af:5e:7e:b6:31:c1:b0:45:5c:da:a6:4f:
                    30:f8:21:43:e9:21:79:a2:0b:01:49:e3:14:17:a7:
                    94:24:cb:d0:3b:1c:cf:56:f4:59:81:da:56:74:56:
                    f5:45:fa:55:c3:b5:21:20:d5:17:c8:d5:01:60:21:
                    67:ad:2d:7e:ae:2c:bb:7b:ce:0c:94:8d:43:2b:59:
                    46:4c:ee:3a:5d:86:22:93:bc:67:d9:9c:55:ca:65:
                    96:db:5a:aa:8b:c9:54:30:20:4f:71:a0:13:0d:11:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:07:44:96:59:B0:B2:EF:E6:E6:EF:1C:7C:44:B6:C5:0D:E2:D8:AD
            X509v3 Authority Key Identifier:
                keyid:6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:ec:df:10:57:d4:d4:39:1f:e8:07:4d:31:22:07:25:f2:
         7b:90:5b:d3:7e:fd:6a:85:d3:b2:d9:d5:c2:a4:fc:7a:77:f7:
         db:0b:88:02:a2:b8:2a:2c:d6:33:9b:ce:9c:2a:6f:83:6e:5e:
         0c:5b:c6:3b:e8:77:34:2c:fa:c9:b5:27:3a:eb:f9:98:6a:88:
         10:83:be:ae:6a:f9:0e:0b:64:e0:d5:65:06:ab:b8:0a:89:20:
         79:28:98:98:18:88:e1:22:3e:b5:41:b5:10:bb:8a:e8:98:30:
         e5:2b:e5:3e:a7:64:a9:0c:28:7c:53:7e:d5:09:18:1d:4e:1e:
         7c:9e:4a:5f:b4:f4:e1:62:1d:30:12:ff:c6:57:8d:9e:43:93:
         d2:d2:b3:b4:50:92:7f:5f:f6:2f:d6:45:e2:a8:9b:20:18:00:
         48:bf:c5:fd:c9:36:65:a8:98:81:12:e4:2e:d5:c2:d3:d3:c9:
         cc:07:3b:42:f7:74:73:cd:7c:b5:1b:0e:fd:5c:c3:a3:31:9a:
         1e:89:9c:3d:24:ce:36:16:4f:a6:c1:83:6b:96:9d:45:15:ec:
         63:ea:49:21:d4:d9:64:3a:6f:5e:d0:41:56:a7:5b:2c:6a:79:
         6f:6f:ff:19:2f:93:ac:7b:fd:89:05:b0:15:6c:69:0c:dd:b2:
         fe:d4:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----