Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
File:                     p2GjM_sHiCoLh27yN6AEmoSNfjE.mft (raw, json)
Hash identifier:          rspzxbK1xLDf5jSnXBINEXH6tHClkp3b8t0OTPq5OfA=
Subject key identifier:   0E:62:2E:32:C9:2B:82:DF:1E:96:81:D5:19:D4:F9:6E:BF:C6:D1:4C
Authority key identifier: A7:61:A3:33:FB:07:88:2A:0B:87:6E:F2:37:A0:04:9A:84:8D:7E:31
Certificate issuer:       /CN=F369A175AF/serialNumber=A761A333FB07882A0B876EF237A0049A848D7E31
Certificate serial:       012B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
Manifest number:          012A
Signing time:             Fri 25 Sep 2026 05:17:59 +0000
Manifest this update:     Fri 25 Sep 2026 05:17:58 +0000
Manifest next update:     Sun 27 Sep 2026 05:17:58 +0000
Files and hashes:         1: p2GjM_sHiCoLh27yN6AEmoSNfjE.crl (hash: ik/AK5UL2ayuQixOBMepojH28/RlJk9hpl8Pz19M5ck=)
                          2: D8BE6E24D1D011F081FB64E3DAE4EC9C.roa (hash: 2R26vV4RIhLeHcqd7Et7YVYkAWTwdZTJEaPCxT554BM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A175AF, serialNumber=A761A333FB07882A0B876EF237A0049A848D7E31
        Validity
            Not Before: Sep 25 05:17:58 2026 GMT
            Not After : Sep 27 05:17:58 2026 GMT
        Subject: CN=6ab60406-6cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:26:d5:a9:b2:f5:a1:d3:1b:c1:a9:c5:8b:
                    27:6e:e0:b3:81:5d:66:7f:73:2f:c0:91:07:bf:0e:
                    32:d1:77:46:8f:a9:9f:94:ee:c9:38:9a:89:be:23:
                    4c:aa:50:a5:b7:fe:28:87:3d:a5:c7:0e:b4:9f:c6:
                    4e:f0:71:55:32:99:be:ff:89:d5:b0:d0:e1:40:4f:
                    16:82:6e:1c:dd:33:0a:56:2a:da:bb:1e:80:1e:3e:
                    62:f4:8f:a5:01:63:32:4a:18:67:52:db:14:47:63:
                    d4:52:8c:5f:8f:88:2a:d4:b3:90:d9:df:73:be:49:
                    b7:85:e0:d3:c3:9e:30:6b:52:68:7f:a1:64:81:b1:
                    25:5c:13:9c:e8:58:25:66:9f:52:f6:08:33:43:2c:
                    9d:49:c2:48:f3:18:9d:28:0c:2c:e0:d0:d2:80:fd:
                    ea:1d:d3:fd:44:5a:2b:d9:78:c6:a2:5d:b1:c4:ce:
                    6f:75:5f:1a:9f:c4:c5:5d:12:66:3d:be:d7:2e:94:
                    d0:74:b1:9d:4b:3f:d4:3f:65:ab:75:e2:d1:a4:48:
                    1a:ef:6b:4f:fb:fd:e7:c7:ee:00:f4:47:f0:1a:76:
                    51:b4:c0:2f:cb:6f:a0:18:31:f4:7e:f7:ae:6a:ab:
                    a5:72:30:69:3e:31:10:1a:b3:f5:9a:9a:c6:6d:65:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:62:2E:32:C9:2B:82:DF:1E:96:81:D5:19:D4:F9:6E:BF:C6:D1:4C
            X509v3 Authority Key Identifier:
                keyid:A7:61:A3:33:FB:07:88:2A:0B:87:6E:F2:37:A0:04:9A:84:8D:7E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p2GjM_sHiCoLh27yN6AEmoSNfjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A175/70EF6578D1D011F089F2F4E0DAE4EC9C/p2GjM_sHiCoLh27yN6AEmoSNfjE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:19:b9:88:8c:05:38:5f:5e:32:fb:b5:e9:c2:f0:b7:8d:80:
         c5:03:92:ad:05:55:e9:0a:2f:ef:b4:81:22:c8:36:07:e9:ee:
         4b:db:35:ca:7b:8f:54:be:36:a0:ce:c5:22:a6:2e:a1:90:e2:
         b6:ff:db:dd:fa:08:7d:20:5b:d6:20:48:53:08:2b:71:2a:64:
         b1:63:ae:59:22:fb:b9:06:67:04:34:06:83:13:5c:69:db:95:
         40:c3:a6:a8:0c:af:66:e7:96:fe:74:3e:e5:c6:a8:de:b0:40:
         6f:57:c8:0d:d0:07:c4:72:af:c3:26:3f:16:78:ee:44:58:30:
         05:61:ae:8e:18:1e:16:fc:8e:c8:ff:1e:34:07:9a:01:92:ab:
         9b:3d:32:59:0e:48:7d:f4:d9:0d:33:a0:16:f5:0d:c4:5f:00:
         6b:c8:52:cf:4c:b6:df:36:37:cf:c9:1a:2f:cd:fc:b5:19:29:
         84:64:7e:8a:6b:b5:ef:4a:56:56:de:9a:9a:95:6b:a5:cd:e5:
         8f:dd:12:fa:a2:1f:f0:0e:d8:93:f3:cf:f2:21:48:a5:fe:03:
         0c:75:a9:33:d3:08:31:54:5b:94:79:86:0e:0b:fc:52:b1:73:
         b3:b6:67:5a:16:16:8e:a1:40:89:1d:21:50:84:a2:a3:0b:f0:
         b4:4d:04:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----