Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          ck+pmejTLH83BlwU4rxrxJ5qSH0/xSlnDAEX8VrQ5h8=
Subject key identifier:   D3:F7:EA:A3:11:24:FA:00:F4:1E:48:42:8C:02:37:B8:83:01:A0:B8
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       0444
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          0444
Signing time:             Fri 25 Sep 2026 03:46:41 +0000
Manifest this update:     Fri 25 Sep 2026 03:46:41 +0000
Manifest next update:     Sun 27 Sep 2026 03:46:41 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: 1vCEK7Q8GddjDpfqNdQHy9rR1hrtxls9d0gtSAU4XY4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF, serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
        Validity
            Not Before: Sep 25 03:46:41 2026 GMT
            Not After : Sep 27 03:46:41 2026 GMT
        Subject: CN=6ab5eea1-8fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:48:7d:a5:3d:7c:a7:b4:76:b0:52:85:7b:
                    53:d8:59:0b:25:94:bc:9e:b6:a5:57:35:49:7f:07:
                    f0:0c:4e:6f:6d:18:43:3a:16:58:c3:5e:43:20:5b:
                    df:10:db:00:b6:7f:b5:fe:d9:9f:57:87:81:0d:0a:
                    12:e8:8b:73:0c:b8:d7:62:88:a5:38:ae:c6:66:b8:
                    64:94:06:d8:7f:3d:f7:71:1f:6c:1c:1e:7c:af:4a:
                    43:fe:17:28:de:52:65:3d:85:de:cc:3d:90:bc:88:
                    f0:cd:ec:d5:b2:b9:6c:32:80:8e:e5:f4:c5:e1:dc:
                    24:9e:50:1d:a1:a8:c3:46:66:b2:b9:68:30:39:32:
                    25:17:e8:ab:74:9d:2a:e8:78:8d:47:ef:df:83:ae:
                    87:a9:5b:41:62:63:33:f0:66:bc:0f:01:75:75:eb:
                    b9:c9:91:b0:02:47:47:d5:3a:c7:ee:e7:89:5f:9c:
                    48:88:19:e2:e6:e0:81:91:86:f9:86:a7:71:08:3b:
                    87:58:2d:95:ce:93:f8:e2:e4:02:ce:21:ef:7e:52:
                    c4:6f:ef:ef:37:e4:16:01:62:48:a8:a5:1d:cd:6f:
                    97:ce:db:76:30:1d:a6:1a:41:e1:e8:6f:7f:41:a8:
                    73:44:3e:04:ae:89:db:12:7b:12:98:b1:70:4e:de:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:EA:A3:11:24:FA:00:F4:1E:48:42:8C:02:37:B8:83:01:A0:B8
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:17:2e:31:ca:fc:46:89:50:8e:47:5d:e2:8b:41:64:a2:62:
         2f:62:4e:7e:7f:d3:5a:b9:ec:65:53:56:4e:14:b7:d5:c7:f1:
         cb:06:00:c2:58:0c:82:e8:bc:1e:4c:0f:f8:e6:e9:83:76:c1:
         dd:b3:26:82:1c:e2:fa:b5:3c:b9:11:f9:8b:69:26:1e:ef:e3:
         f2:da:42:4e:70:e2:b5:0e:02:74:36:d1:8d:20:18:de:03:05:
         0c:fd:d3:c5:90:1c:51:b5:b4:04:41:56:a0:4e:60:bd:a6:e1:
         c1:9d:1d:35:dd:86:38:a8:0a:b3:d1:94:f4:9b:d6:86:19:46:
         43:f8:c8:8e:4f:0e:3d:d4:dd:21:5b:dd:6b:a6:07:68:39:c6:
         d8:81:78:03:28:7d:59:a9:26:c9:05:f5:e3:d9:ea:b8:bf:73:
         59:ea:70:fc:f0:31:b1:61:86:4e:85:11:5a:84:10:2b:f3:4f:
         dd:af:f5:b0:c5:b0:d4:1f:38:d6:22:6b:80:64:ee:3f:6e:21:
         90:f6:d6:9a:b9:25:a2:22:2e:da:c7:f0:be:28:63:19:00:55:
         7f:89:9e:f2:c3:a4:4c:16:a4:ee:d3:8e:11:72:83:79:06:ff:
         20:99:3a:25:4a:0e:bb:30:f7:17:42:b3:4f:43:81:19:ae:ff:
         ea:23:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----