Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          yKD/338zIIRknhczDhR7NkneXp6N3C9Tw3R2qaOcBDg=
Subject key identifier:   AA:97:D4:51:51:CD:0C:88:35:FC:41:D5:B4:00:77:D7:F0:FB:24:B9
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0A51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          0934
Signing time:             Tue 22 Sep 2026 02:04:53 +0000
Manifest this update:     Tue 22 Sep 2026 02:04:52 +0000
Manifest next update:     Thu 24 Sep 2026 02:04:52 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: 81JUVRs4IAjX9JtOl7zm5DDTwy+U6IXNdZsl6fbhR68=)
                          2: EBEF01B4B39011F1AB143DB3CE1D38B0.roa (hash: zTSTEil+00JSU10YZOnNSTSqUr6EUTtKfQAH6mWtDoQ=)
                          3: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          4: 14DBDD40397F11F18F7D251BCF1D38B0.roa (hash: 7JorfiIlTDbNmduHmYrQZFBXPxFlQKaOmXJt1ogKFiw=)
                          5: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (hash: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=)
                          6: 6C8BC3E0B38F11F188721BABCE1D38B0.roa (hash: NmVNffd/BEPiXRR/AAqK+iMslvy5hURM3Q+ykDxHz0E=)
                          7: DE2FE726163011F1829CE9EADAE4EC9C.roa (hash: TMIMgwsogkJNyAx0X77xxGocwvE2m5HEfSTcrhrwoyI=)
                          8: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          9: E8B4523C187D11F1A5DD0B93DAE4EC9C.roa (hash: N/GBo7sJ9sVz40T3E38ntjv4vl5jXnFQj2Tw1+btscU=)
                          10: 087B5DDA187F11F1B908269BDAE4EC9C.roa (hash: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=)
                          11: 71B540ACB39011F1B8014FB1CE1D38B0.roa (hash: CwZ6Znsms5tlQuV4ajJ93AfNQRjxSb7NhGK13DruOLI=)
                          12: 21129F90B19311F1B9ABB6B7CE1D38B0.roa (hash: VhI4usp4njPZ2423cVJ+lDfaDZyz+DQsqqtxkpzWw9k=)
                          13: 933FD9AAA69B11F18E82F4CBCE1D38B0.roa (hash: Begy1Pb2rz2hrdXAve9cyRscu7j1WRjvxAfHS703P5c=)
                          14: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
                          15: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep 22 02:04:52 2026 GMT
            Not After : Sep 24 02:04:52 2026 GMT
        Subject: CN=6ab1e244-66d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:31:8c:8b:44:7c:4f:95:0a:6b:93:16:da:
                    47:ca:bd:e0:10:96:5b:de:db:14:8e:9b:b9:c5:b5:
                    cb:fc:e9:fe:da:5b:31:88:9a:7a:3c:64:c6:e7:4f:
                    70:5a:d7:67:52:76:7b:69:0a:e4:17:c1:15:ca:3a:
                    23:26:0d:e7:1a:b6:57:7d:75:a3:af:5e:88:ea:d0:
                    1a:6e:19:2c:97:36:40:39:ac:f3:55:0c:25:df:30:
                    cd:70:49:6c:94:1f:1f:7b:a8:ed:37:f1:ec:31:65:
                    2c:be:2d:c2:15:e0:c4:ac:2b:7f:b5:8f:d4:40:53:
                    b3:83:cf:41:e4:62:53:8d:4c:4f:f1:d9:91:77:7b:
                    36:a1:94:c4:6f:e7:06:9c:3b:d9:9f:d2:95:20:97:
                    02:af:fa:4a:7c:e1:6e:55:03:85:e4:dc:c9:fd:6c:
                    8c:90:97:c4:ea:0b:43:23:51:68:20:f1:18:31:9d:
                    b6:c4:b4:fb:95:ed:b4:26:a1:b6:79:b6:84:a5:38:
                    91:5b:92:dd:9d:b1:3d:f8:fa:42:a5:41:96:9d:0c:
                    39:93:95:38:c6:fb:64:cd:9d:eb:f2:e8:79:ef:c0:
                    9a:57:f5:02:91:72:7f:7b:7e:e2:08:da:0c:52:8f:
                    d6:bd:4f:38:03:93:e2:19:52:25:80:47:08:4c:d7:
                    91:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:97:D4:51:51:CD:0C:88:35:FC:41:D5:B4:00:77:D7:F0:FB:24:B9
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6d:51:f9:88:93:f7:f9:eb:f0:fd:5a:1a:ec:35:97:53:be:
         99:94:c3:ae:f1:36:18:a6:9c:ef:79:bc:6d:d9:35:57:4d:93:
         6d:c9:20:ec:26:e4:51:48:27:8e:f4:37:b0:a1:ce:b5:ef:90:
         d5:5d:b0:d1:58:5d:a3:f6:c8:f9:66:74:fc:35:62:7a:cf:09:
         d9:d4:7f:a6:ef:93:9a:a5:6d:9e:9a:bd:ca:66:ea:a0:1a:b8:
         36:8e:19:f4:43:ec:14:f4:55:25:95:fe:42:ec:65:9c:45:73:
         72:0a:28:a4:ca:8b:e8:b0:f1:cf:5a:92:e9:61:4a:85:aa:1e:
         5d:d6:69:59:b5:29:bf:a8:fa:66:f4:fe:00:fc:06:48:0a:74:
         20:e5:42:f6:d7:ac:75:67:5a:8f:f4:80:d2:88:ae:51:4c:af:
         e5:aa:0f:70:63:f6:7b:6b:03:6f:94:8f:8f:bd:86:a6:ab:d8:
         87:bc:68:33:ea:8d:ce:d6:90:ff:1e:16:c5:64:99:d4:81:9b:
         d1:41:07:b9:f5:01:20:3e:35:d7:ef:0f:e3:19:73:5e:34:75:
         a9:9e:a7:24:dc:9d:52:27:eb:e9:cd:34:88:ed:89:d5:a1:5f:
         3c:c5:3a:72:96:08:0f:4f:de:d3:7c:b4:6d:70:83:ae:0a:95:
         e4:0e:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----