Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
File:                     DlBAMQCavXWbRZGOm4a_uGpKdo8.mft (raw, json)
Hash identifier:          Bn9c7SCn9n14J8iTMW4xoMEcAnCGBbIuwPz5vC/4Jcs=
Subject key identifier:   A0:18:2A:20:4B:C5:AB:D3:44:E7:7F:89:A7:93:E4:2B:E6:CA:7F:93
Authority key identifier: 0E:50:40:31:00:9A:BD:75:9B:45:91:8E:9B:86:BF:B8:6A:4A:76:8F
Certificate issuer:       /CN=F368FEDBAF/serialNumber=0E504031009ABD759B45918E9B86BFB86A4A768F
Certificate serial:       71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
Manifest number:          70
Signing time:             Thu 24 Sep 2026 05:40:08 +0000
Manifest this update:     Thu 24 Sep 2026 05:40:07 +0000
Manifest next update:     Sat 26 Sep 2026 05:40:07 +0000
Files and hashes:         1: DlBAMQCavXWbRZGOm4a_uGpKdo8.crl (hash: XqE4T3yrttD9WSdAaYu36QFv7eMsXtI5JzFyTxNg03U=)
                          2: 9D8AB7FCACE211F1871CDECCCE1D38B0.roa (hash: CQAF0fxCnRwHEzs4FiLJeZIqq/WXbB391SNUvsSo8iM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368FEDBAF, serialNumber=0E504031009ABD759B45918E9B86BFB86A4A768F
        Validity
            Not Before: Sep 24 05:40:07 2026 GMT
            Not After : Sep 26 05:40:07 2026 GMT
        Subject: CN=6ab4b7b8-a94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:d5:bb:25:89:06:ce:67:bb:7e:71:bf:b3:
                    9f:16:57:43:76:92:fc:4d:5b:58:d4:7b:37:45:bf:
                    bd:26:9d:ed:7b:71:05:98:88:09:bb:de:9d:d4:39:
                    c8:a3:3b:3a:c1:0b:1f:ae:e7:40:f7:9f:df:e3:45:
                    61:73:4c:f9:4d:54:6e:06:8c:e6:fe:dd:a3:3b:a8:
                    2f:35:07:39:60:ad:63:c3:2a:45:68:9a:93:c6:97:
                    3f:c3:35:32:ff:bd:a2:7c:75:ba:b3:c6:a7:33:d1:
                    88:74:83:69:6a:19:8b:04:ad:20:b2:b0:31:0a:de:
                    18:8b:c0:f4:89:30:af:49:d7:bf:6c:62:92:29:5a:
                    11:16:07:81:18:e1:2f:7e:fe:ce:96:1c:a7:54:9c:
                    90:ad:b5:11:7f:33:86:7f:df:38:07:30:06:0c:08:
                    94:b1:24:ba:6a:a3:20:ff:80:b0:34:9a:34:83:e0:
                    e6:93:eb:6d:16:e6:ae:a5:73:70:0a:da:1c:e1:2f:
                    3b:30:55:d2:70:56:e6:80:cb:de:c4:20:a5:3d:f4:
                    3c:4d:ad:f6:13:c4:89:ce:fd:bd:ce:a5:6d:63:16:
                    1a:4c:2f:19:19:1b:8d:4a:38:56:bf:4a:42:17:3b:
                    4d:20:a1:4e:60:67:82:a7:8a:b2:c7:7a:2b:d9:9d:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:2A:20:4B:C5:AB:D3:44:E7:7F:89:A7:93:E4:2B:E6:CA:7F:93
            X509v3 Authority Key Identifier:
                keyid:0E:50:40:31:00:9A:BD:75:9B:45:91:8E:9B:86:BF:B8:6A:4A:76:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DlBAMQCavXWbRZGOm4a_uGpKdo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368FEDB/A710F82661A711F18FB3A8BECE1D38B0/DlBAMQCavXWbRZGOm4a_uGpKdo8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:84:81:59:9b:c9:9d:40:9a:8f:d9:cf:e9:13:1e:50:3f:
         8e:81:15:96:d5:fa:13:02:1b:7f:da:61:9d:3c:3b:2a:45:60:
         2c:b1:32:cf:97:b5:51:8f:16:d5:3b:9a:c3:d9:de:52:d1:5d:
         2f:6c:b2:2a:2a:db:5d:1d:14:03:2e:61:0f:e3:22:7f:f2:78:
         37:2e:17:fd:07:2e:72:1f:9c:36:74:5a:2e:f6:9d:c8:16:00:
         69:9c:f1:5c:1d:1c:03:6f:10:8e:4e:db:73:f8:0c:f4:ad:6f:
         bd:dc:ef:c5:d1:59:50:3a:2f:bd:2b:bc:5f:a2:c9:92:d2:7b:
         06:74:47:8f:da:ee:10:a5:da:12:65:d2:b6:b6:1c:e2:fd:90:
         a0:a5:4d:03:f5:1f:76:35:19:98:25:97:7c:a4:1f:be:37:23:
         2b:b7:de:1d:a5:8a:da:f3:c2:e5:77:2f:54:09:90:56:62:3b:
         fa:d1:7b:c1:5f:3c:a2:7e:12:0d:6d:a4:a0:0a:92:48:e4:77:
         0a:fe:26:e5:2c:b8:f2:18:5e:2c:d9:cb:a5:b8:ee:32:63:c3:
         63:bc:9a:98:1e:c5:39:6f:44:ea:03:7c:7e:3d:c4:59:8a:02:
         01:de:36:d0:ed:a2:e1:f4:ab:66:39:a0:79:ef:ee:83:57:e0:
         87:e9:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----