Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
File:                     pM4k_g7il2reULOd__0tfkLA8oo.mft (raw, json)
Hash identifier:          xalSfb89MoV7K258oVmMSZ+z1hrUC3vKAxrKHcsFLSU=
Subject key identifier:   6D:CB:87:85:AC:99:98:8C:D5:85:8F:B0:17:AF:AD:AD:87:6A:B8:F9
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Certificate issuer:       /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial:       0872
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
Manifest number:          0870
Signing time:             Sun 27 Sep 2026 01:57:52 +0000
Manifest this update:     Sun 27 Sep 2026 01:57:51 +0000
Manifest next update:     Tue 29 Sep 2026 01:57:51 +0000
Files and hashes:         1: pM4k_g7il2reULOd__0tfkLA8oo.crl (hash: ZdW0rZDXXwHKheGBFVuaDEs0WLZ7ouxT8VccckwLTZc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36987B2AF, serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
        Validity
            Not Before: Sep 27 01:57:51 2026 GMT
            Not After : Sep 29 01:57:51 2026 GMT
        Subject: CN=6ab87820-3227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:92:c1:a5:18:f2:73:53:81:d6:0d:2c:c6:
                    47:30:36:74:5e:d8:54:9b:ff:3a:17:7c:87:c5:58:
                    c0:a4:72:4c:39:b6:ed:bb:da:43:f2:40:0c:20:cf:
                    5e:f0:f8:38:c8:68:9c:ff:de:1f:02:1c:0a:60:61:
                    fb:d5:e2:ac:3c:00:d7:2f:4e:c3:43:4c:83:db:c9:
                    71:84:39:2b:6e:96:32:2e:52:93:d9:ca:75:31:d3:
                    a4:6e:f5:b8:a4:6e:17:39:0c:a2:be:64:1d:0d:9b:
                    7e:cf:94:d5:52:0a:98:3e:7b:f0:56:a3:35:df:fa:
                    f2:38:9a:8b:e7:eb:75:70:46:23:c7:02:5b:fa:eb:
                    d6:60:98:3c:8b:ea:2d:ee:0e:5e:ea:e2:50:1c:18:
                    85:a9:52:5a:e9:cd:2b:6d:ef:70:7a:be:c9:ca:9d:
                    e4:67:dd:bc:11:e9:b4:5f:8b:fe:54:a1:b5:d7:c5:
                    e9:bf:21:6d:90:9b:99:cf:63:5f:88:d9:97:6d:9b:
                    26:06:26:40:af:87:e1:32:6a:63:c5:f2:b7:6f:65:
                    f1:4e:ae:27:02:8b:f4:60:57:f6:85:b2:44:53:ca:
                    74:a0:a2:51:05:19:cd:a4:19:80:fd:77:30:3a:12:
                    39:72:13:c9:c7:21:73:3d:83:39:a0:b6:fe:dc:c6:
                    07:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CB:87:85:AC:99:98:8C:D5:85:8F:B0:17:AF:AD:AD:87:6A:B8:F9
            X509v3 Authority Key Identifier:
                keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:2b:9b:ad:8c:ca:dd:f7:88:29:27:23:9c:1c:a2:ce:17:
         ab:32:19:a8:83:43:a7:e6:8f:68:c5:14:bf:94:b5:be:c6:21:
         39:2c:6a:19:37:fd:a6:99:57:9e:2d:47:92:5c:36:40:c4:ba:
         f3:3e:a0:3a:10:da:28:23:4d:90:25:89:12:46:b1:f9:05:14:
         40:71:c6:0e:f2:f0:6c:ba:da:a0:72:23:e2:7c:29:9b:e9:05:
         9a:8c:32:3c:df:0b:65:0f:07:5d:73:60:6c:47:80:ba:21:1d:
         73:57:77:6c:11:7e:1d:1d:75:62:59:68:45:5c:fd:8b:da:b4:
         94:06:8e:95:f4:6d:79:cf:c9:f3:f7:30:ba:42:55:71:89:5d:
         5f:85:ef:a2:7e:34:bc:c6:e0:b8:99:19:9a:e1:88:5c:94:0a:
         51:69:b9:6a:9b:6d:6f:44:c4:66:f2:66:17:c9:3f:df:9c:62:
         57:89:e6:6a:7b:d1:e0:ea:dc:ec:c2:46:fd:6c:ab:55:f5:54:
         24:bc:8c:49:95:a3:9f:df:28:0c:a6:cc:de:9e:dc:47:8d:f9:
         62:45:c3:c8:77:83:c8:42:be:2d:91:54:35:47:7f:b9:08:cc:
         12:3a:4a:f6:1f:98:03:df:ae:24:7a:45:57:14:c6:bc:31:77:
         3a:01:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----