Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          LBAoQJXQKGkyB/KMEM8y+hRiAa+cK4PmxnSnUTQL7zM=
Subject key identifier:   4A:DB:A7:AB:BF:1C:F2:F4:B9:B0:3B:E5:A3:8A:22:9C:99:EE:16:1F
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       0379
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          0378
Signing time:             Sat 26 Sep 2026 04:11:06 +0000
Manifest this update:     Sat 26 Sep 2026 04:11:05 +0000
Manifest next update:     Mon 28 Sep 2026 04:11:05 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: CZ3fZWskHBaeCWI24jC4qropdEcmAJVQl1sTNMMJ1KI=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Sep 26 04:11:05 2026 GMT
            Not After : Sep 28 04:11:05 2026 GMT
        Subject: CN=6ab745da-4fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:0b:94:ba:5a:50:20:95:84:08:de:4d:cd:
                    e7:f3:16:57:93:c3:9a:76:6a:97:aa:f0:45:3b:b0:
                    c4:41:f8:28:50:5b:8a:1e:7c:91:45:71:3c:a2:23:
                    77:a3:1b:e0:16:4e:18:8e:41:3f:79:1a:77:6c:45:
                    ed:0c:de:cb:3d:48:a7:9e:1a:47:6b:a9:e3:bf:64:
                    93:ba:78:0d:71:41:ea:67:4e:ad:ff:ad:43:2e:17:
                    b4:3b:9e:c7:27:4c:e9:3d:5f:da:c2:58:6f:91:35:
                    37:42:28:ce:43:b7:47:77:93:06:29:a1:f7:87:f6:
                    20:f3:34:7b:e2:19:3e:f9:f7:b5:57:db:0c:43:70:
                    fb:1a:81:8a:5c:9a:d5:88:af:ad:05:79:73:46:3f:
                    e9:c6:98:d3:c4:e8:3a:a6:2b:e2:ab:e5:77:79:79:
                    b1:a3:34:3d:ee:59:eb:f1:83:f5:76:93:9a:7e:0c:
                    e1:f7:a4:66:78:94:f3:0c:b5:88:dc:c9:ca:55:46:
                    cc:c9:43:2c:97:0b:00:65:d7:65:f6:6b:60:1b:b7:
                    3b:d6:b3:38:98:9f:53:c5:5a:7d:88:6e:db:56:3b:
                    2b:e4:69:9d:96:92:36:7b:ec:f6:fc:ab:6b:a3:0c:
                    56:5c:4b:80:f6:64:8c:77:48:05:de:ae:47:d5:b0:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DB:A7:AB:BF:1C:F2:F4:B9:B0:3B:E5:A3:8A:22:9C:99:EE:16:1F
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d3:fb:1a:c4:76:40:2a:d3:27:f5:ae:f6:64:1b:a9:33:3f:
         6a:26:db:c4:7f:1e:57:66:34:ff:af:d1:d5:a9:12:06:18:9f:
         66:fb:db:9c:0a:6e:fd:cf:29:65:72:ea:1e:b9:66:af:a4:45:
         60:5e:09:37:0f:bd:d3:5f:d2:43:5f:1b:da:ac:46:1d:f9:aa:
         c3:da:6c:4d:a1:c1:e5:68:ee:6b:57:9a:d9:b7:3c:b4:9b:74:
         b8:74:67:5e:59:8e:1a:76:5c:07:c0:4a:f9:44:00:9f:40:3b:
         32:5f:55:41:3b:86:53:47:3d:31:b1:3d:72:b5:e6:03:f0:a0:
         c9:a7:73:93:93:de:6b:65:03:83:90:f7:c7:35:71:9f:e9:51:
         5d:fe:9a:d2:b9:8e:4f:13:19:0b:da:56:8a:be:6d:8f:6e:eb:
         fc:42:b7:ee:ee:44:a0:5c:bc:e3:4a:1f:6d:54:7c:ad:3c:d2:
         4b:23:ad:0f:99:fd:a1:ca:28:64:92:1e:8b:cf:5f:38:99:65:
         a0:c7:01:50:5b:53:ce:a1:36:44:45:ba:cf:58:ba:97:71:f3:
         a5:40:6c:f0:e4:01:76:e4:6d:45:29:a6:7d:f1:68:85:2b:f5:
         39:5e:8a:ef:6e:bb:eb:1a:dc:83:13:d2:51:74:8e:7f:b4:7c:
         96:b4:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----