Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          JQJp+cujuBusLVX57R3ghcx+2W+mInPNc7MOoWMOfTM=
Subject key identifier:   5B:37:07:6F:F0:E6:97:19:C3:3D:F3:13:E1:5E:98:EC:8D:F7:88:99
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       04C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          04B8
Signing time:             Thu 24 Sep 2026 03:35:09 +0000
Manifest this update:     Thu 24 Sep 2026 03:35:08 +0000
Manifest next update:     Sat 26 Sep 2026 03:35:08 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: gKGfUjM1leWQneFiq8y3ylbmTsrYoVLHzp9eRiideWQ=)
                          2: 2CF3A3EEF23111F08DE709CADAE4EC9C.roa (hash: E/G6AxJRTy6BWkfQETWJC1LpmEof5Nqv6ggmyx/krZg=)
                          3: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          4: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          5: DBC4D84EF19F11F0BB0D92C4DAE4EC9C.roa (hash: 0w11dAl0ZHuL4r3C+H0Cy861F6dvJBOgzONU1ELikMM=)
                          6: 3333CFFEF22C11F0B7B687ABDAE4EC9C.roa (hash: n9BHCAIHciXSckg0OkYupto8mNVTVrnQREgeCL2seHc=)
                          7: 7977DC10F13E11F08E43847CDAE4EC9C.roa (hash: S6SqyKuMuszdFgWYXKbiOJ/eUFMOthzgeUjko1wpZeI=)
                          8: 857C6338F13811F08947FFD6DAE4EC9C.roa (hash: EQjufZY+Ld4Nc6rRRR5Pa+LhyHbL3SiAVgHsy5rcUII=)
                          9: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: Sep 24 03:35:08 2026 GMT
            Not After : Sep 26 03:35:08 2026 GMT
        Subject: CN=6ab49a6d-8ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:d4:a7:dd:13:68:5b:57:86:b1:b8:19:9d:
                    9b:d8:bc:00:6d:b7:f5:2b:c9:e2:44:dc:8c:57:8f:
                    e4:aa:6b:3e:a4:dc:7f:45:0c:71:be:a1:f1:a0:28:
                    0f:44:3f:ef:46:1f:18:77:5a:fd:fe:c6:cd:16:24:
                    44:5e:4a:32:73:21:5b:0e:a2:7b:bc:2b:2c:4d:01:
                    70:0f:b5:05:b8:63:5b:d2:4a:6d:b9:f6:d3:95:80:
                    9a:f5:da:65:83:02:04:c9:98:cf:cd:3e:5c:7b:48:
                    37:58:66:db:72:b0:41:db:02:77:fd:13:2e:de:40:
                    2b:93:51:76:1e:e7:b6:f3:2b:0f:05:9f:f1:06:8e:
                    5b:4b:0a:3b:c0:86:ec:93:66:d8:8f:f4:f4:ac:60:
                    d0:84:8b:5a:b4:f0:d6:cc:85:6a:79:eb:fc:ee:29:
                    bc:a3:df:0d:06:7b:a5:ae:56:2f:cc:0d:fa:08:fa:
                    03:67:e5:4a:01:ee:2c:24:d7:3f:e0:ef:9f:0f:1d:
                    bb:5c:6f:a4:41:18:58:05:fe:79:81:75:c0:f4:14:
                    6b:91:49:2c:6e:3e:4a:d1:28:8a:af:17:da:20:5e:
                    5a:08:bf:18:84:f2:64:71:b8:19:cc:d3:58:26:57:
                    61:37:c8:39:89:03:d7:17:a2:22:e5:ce:39:d9:17:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:37:07:6F:F0:E6:97:19:C3:3D:F3:13:E1:5E:98:EC:8D:F7:88:99
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:88:4a:1c:98:61:01:f9:58:6a:c5:05:0c:c0:4e:68:19:31:
         09:56:16:c6:51:db:cd:a8:3c:b2:16:db:b8:1b:ad:d4:df:cd:
         e4:21:31:4c:11:a7:7a:f8:1c:eb:34:04:68:75:a7:b0:89:96:
         eb:10:c2:b7:b6:94:de:40:db:e9:ea:f1:f1:69:c1:cc:31:18:
         c0:9f:de:13:b2:bb:8c:dc:fa:3e:1e:4e:b3:95:6e:fc:ce:2e:
         68:d2:e5:05:1a:a4:3a:f2:51:21:ee:7d:28:9c:8a:0a:44:97:
         c2:e5:f9:5c:a5:9d:0a:22:39:01:88:6b:01:de:5b:d9:dd:71:
         0e:90:2e:92:21:33:d6:a4:3f:12:06:fe:a8:e9:ac:cd:37:b9:
         49:45:f6:19:c5:01:49:b0:ca:4e:cb:a8:35:ab:33:85:8c:f4:
         07:a1:ea:ed:8b:a3:56:44:54:f1:87:b4:05:74:df:72:d7:07:
         a3:0d:9a:cb:71:72:18:7d:10:f9:ae:d6:83:fd:e3:62:d9:dc:
         2a:be:85:cd:53:07:e9:31:3b:2f:20:91:19:20:46:66:b5:7f:
         93:7b:93:9d:c5:f6:d2:ee:81:ef:f0:8c:73:5f:dd:05:61:42:
         30:8e:d1:98:5f:30:54:6b:c9:c3:9c:dd:85:a4:ed:a2:c9:09:
         c9:e2:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----