Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
File:                     b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft (raw, json)
Hash identifier:          JfZO+3dL0qS2mALfrxSsRT1dDYlxfEyAfmBjCZhJOZM=
Subject key identifier:   44:48:6B:74:2F:B2:8D:76:B1:58:D7:E1:ED:23:C1:9F:7B:03:D5:2A
Authority key identifier: 6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81
Certificate issuer:       /CN=F369E735AF/serialNumber=6F8526DCEB5AA824071447D1DEB41CEC806B4A81
Certificate serial:       CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
Manifest number:          CA
Signing time:             Thu 24 Sep 2026 05:29:56 +0000
Manifest this update:     Thu 24 Sep 2026 05:29:55 +0000
Manifest next update:     Sat 26 Sep 2026 05:29:55 +0000
Files and hashes:         1: b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl (hash: 63nkqttclICX6qhxAl6QsCQkYieIqRmuYqX8pz50e94=)
                          2: 8DE4B02A1CDA11F1B51079F1DAE4EC9C.roa (hash: ki1Y7U8ceJ4uu+WWwIuci/NWldaq2lAVwWjFI1+0Btg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E735AF, serialNumber=6F8526DCEB5AA824071447D1DEB41CEC806B4A81
        Validity
            Not Before: Sep 24 05:29:55 2026 GMT
            Not After : Sep 26 05:29:55 2026 GMT
        Subject: CN=6ab4b554-088e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:a7:55:23:b9:aa:6a:3e:8f:15:97:fc:b6:
                    92:4c:ab:4e:ad:db:c0:23:36:35:f1:8a:6b:94:90:
                    2e:72:57:53:37:ff:b2:03:f0:66:11:a9:be:18:ea:
                    db:91:ee:66:86:24:f2:e7:a0:57:51:08:c7:97:99:
                    4b:66:fe:15:cb:4a:a2:d7:fc:b9:1e:78:e7:67:a9:
                    98:6f:85:16:61:bb:4b:9f:6a:a6:c1:73:cb:d3:9b:
                    9f:f3:6a:16:a6:95:d7:62:6a:b0:b7:59:3e:f6:f4:
                    16:d2:53:f6:13:2f:a9:ad:55:88:75:b4:ab:c0:92:
                    e6:7d:f5:10:b1:b2:76:23:f9:56:e5:d6:56:9e:c2:
                    f4:42:a4:8b:d9:93:32:1c:e5:d1:3a:9b:7f:60:0c:
                    3e:e4:55:07:58:45:d9:f9:e5:27:ed:6a:c9:48:02:
                    6c:b7:20:f8:11:37:ba:34:e7:3e:aa:44:0e:f4:d1:
                    7c:95:7c:47:20:b1:68:e2:c8:81:61:76:c2:84:65:
                    96:1d:c9:b8:aa:89:a7:d3:64:bf:70:a4:84:f9:65:
                    7a:f5:e5:ce:3e:b2:f1:ff:bf:4d:90:f4:61:ec:d2:
                    b7:d0:1c:22:6e:3f:53:ed:80:49:20:cb:a3:92:d2:
                    9e:fb:71:f0:3c:5d:e5:a2:b1:94:63:eb:48:f1:01:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:48:6B:74:2F:B2:8D:76:B1:58:D7:E1:ED:23:C1:9F:7B:03:D5:2A
            X509v3 Authority Key Identifier:
                keyid:6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:39:67:b2:c6:8c:53:cf:9a:e7:b2:7c:14:6a:74:ad:fd:d2:
         b7:f1:24:34:0f:9d:5a:6c:20:b6:6a:4a:d6:e0:5a:4a:d6:ee:
         21:1c:f4:34:59:1e:77:20:22:e2:7e:4d:a4:90:f9:7d:4a:13:
         4f:d1:50:1d:1d:71:ca:4a:e2:e8:58:ab:a5:3f:cd:d9:ca:4f:
         03:ad:25:0c:d2:9e:59:da:78:ca:9d:e3:66:ca:28:15:7a:e3:
         8c:ca:69:1a:db:67:f2:7b:f3:47:0b:2a:12:76:34:01:8c:6d:
         b1:36:46:08:f9:e9:a8:d5:39:36:81:1f:60:cc:c3:31:ba:be:
         94:a5:55:c3:2b:f8:cc:9c:59:21:39:0a:c0:7e:be:d0:97:b9:
         10:17:a8:0b:e3:17:85:81:9f:e2:a3:a1:2d:3e:72:1b:01:26:
         3f:4b:1c:57:33:f4:b4:9d:66:31:ae:99:f3:f3:a6:72:76:2e:
         8f:bb:d0:53:e4:5b:d4:63:e0:d7:5c:28:0a:bc:2a:94:64:e1:
         d5:dd:1a:00:b5:1e:f3:f8:19:4e:4d:f5:f6:70:f9:15:e6:ce:
         9c:82:24:0e:e4:12:f7:c3:32:bd:a2:6b:20:67:bf:68:46:ed:
         72:56:c7:10:77:29:85:49:ab:dd:f1:90:64:50:bb:e1:06:a8:
         4a:2c:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----