Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
File:                     Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft (raw, json)
Hash identifier:          BZKj82zil71NDpO+SdA0sqG17A08oAbC6wyAc+zBk/0=
Subject key identifier:   BC:FD:DA:07:C7:5B:B3:DC:43:2F:1E:80:6A:61:C7:23:DF:A9:A5:88
Authority key identifier: 43:2E:D8:5C:AC:11:7E:60:35:4A:FF:E8:27:E7:42:83:AA:8E:80:3F
Certificate issuer:       /CN=F3697D5CAF/serialNumber=432ED85CAC117E60354AFFE827E74283AA8E803F
Certificate serial:       36
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
Manifest number:          36
Signing time:             Sat 03 Oct 2026 05:48:07 +0000
Manifest this update:     Sat 03 Oct 2026 05:48:06 +0000
Manifest next update:     Mon 05 Oct 2026 05:48:06 +0000
Files and hashes:         1: Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl (hash: 1icJY6vHooLgis68Bwmcc8wczcr2fx8Gg6WH0Y9NU5U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697D5CAF, serialNumber=432ED85CAC117E60354AFFE827E74283AA8E803F
        Validity
            Not Before: Oct  3 05:48:06 2026 GMT
            Not After : Oct  5 05:48:06 2026 GMT
        Subject: CN=6ac09717-a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:2d:13:91:bd:e6:22:86:aa:16:be:cb:25:
                    f9:fa:e7:f4:d2:d4:61:21:da:df:d0:11:40:ca:57:
                    fd:e5:24:ce:50:20:ea:eb:62:b6:87:66:80:07:21:
                    03:a3:57:b7:b6:b1:5d:46:82:f6:24:b2:fa:21:d0:
                    43:38:f0:66:43:fc:c6:7f:d9:e0:13:54:cb:4b:45:
                    39:7a:bc:5e:cc:2b:d0:9a:21:b8:5f:04:d5:27:18:
                    2f:7a:2d:d7:b6:ac:da:11:90:ee:30:c5:8f:97:89:
                    e3:bb:76:87:58:b2:9b:e2:8c:1a:c1:c9:5a:72:9f:
                    4b:0e:a0:bd:20:68:20:fb:1f:ad:7c:4f:2e:c8:a8:
                    83:eb:c9:28:1d:0e:08:4c:f0:40:b6:60:bf:bf:3c:
                    cb:85:07:0f:d6:25:ed:da:fc:28:ef:80:06:72:d1:
                    86:c4:c4:6f:d2:36:ce:a2:de:2f:78:fe:08:b2:1a:
                    8c:83:b9:82:92:c6:fc:9c:b9:9c:bf:49:1c:eb:8b:
                    b7:cc:3b:3c:37:4a:78:e2:5e:3b:02:a5:b3:47:23:
                    93:6c:98:e1:f5:f1:c4:5a:d6:e6:37:ba:9a:8e:54:
                    a8:4e:d1:83:99:04:f9:5f:af:f5:f2:d5:d7:4f:a9:
                    e1:3f:ca:38:6b:af:35:86:d1:a8:eb:53:67:f8:b8:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:DA:07:C7:5B:B3:DC:43:2F:1E:80:6A:61:C7:23:DF:A9:A5:88
            X509v3 Authority Key Identifier:
                keyid:43:2E:D8:5C:AC:11:7E:60:35:4A:FF:E8:27:E7:42:83:AA:8E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:f9:95:9f:30:de:43:f6:68:59:a7:24:fa:be:be:72:56:ad:
         c4:c0:1d:81:38:f5:4a:33:13:01:2d:56:11:f1:00:d5:f7:25:
         48:50:8a:e5:3a:e5:be:ff:cc:19:d6:d0:5c:df:bb:b4:19:25:
         72:17:17:39:f1:0d:80:57:cf:5c:05:d0:c2:44:a4:35:cc:96:
         5c:b5:c6:7d:83:c9:ff:f5:fa:92:d7:47:d0:ef:00:93:ef:90:
         57:b0:b9:f6:44:37:5b:71:4c:6f:1e:2a:0b:0a:db:d2:cf:83:
         59:c6:cc:82:76:16:22:0f:94:cf:9a:47:18:cd:3b:8c:03:44:
         1f:f6:ad:4b:71:16:38:38:b9:e5:0e:66:ee:33:02:07:e6:c8:
         ab:d4:fc:bb:e3:4e:df:cf:08:26:dc:75:98:14:4c:e8:63:69:
         e6:81:3e:3d:3d:c7:60:dd:92:a1:61:59:75:d9:79:8d:56:12:
         2a:59:aa:f7:26:c6:d0:46:67:4d:73:21:d8:68:63:9d:cd:37:
         cb:b6:b5:33:a9:43:75:ec:56:a4:1c:63:db:04:19:aa:1f:2e:
         77:6f:01:ef:8e:1b:e8:2c:22:9b:d3:7a:c5:c0:2b:29:4c:d0:
         41:0d:90:66:0e:da:0d:60:f9:65:9b:4b:23:f7:a8:09:44:b9:
         94:a5:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----