Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File:                     gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier:          YpPmLUDcUiBUhXE91x7itu5IT4oflSHQfpnuOy/ZrL0=
Subject key identifier:   92:39:C1:29:D9:6F:52:38:6E:0F:2E:26:A2:EF:FA:96:6D:6D:B0:E8
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer:       /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial:       02A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number:          02A8
Signing time:             Sat 26 Sep 2026 04:40:06 +0000
Manifest this update:     Sat 26 Sep 2026 04:40:05 +0000
Manifest next update:     Mon 28 Sep 2026 04:40:05 +0000
Files and hashes:         1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: mEOMHIjgSgo5cnLP+7KglKqNPuhQeODO9lQ0rgCYXyE=)
                          2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
        Validity
            Not Before: Sep 26 04:40:05 2026 GMT
            Not After : Sep 28 04:40:05 2026 GMT
        Subject: CN=6ab74ca6-e2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:dd:d6:9b:50:f4:a7:78:17:2c:4a:38:44:
                    7e:f4:c5:7d:82:73:ce:1c:e1:6a:46:cd:4c:0c:44:
                    c2:4d:aa:df:fe:e3:93:0d:9c:78:1e:a8:06:ee:30:
                    b8:72:c0:de:0f:56:18:1c:57:67:7a:1c:bd:4f:c0:
                    57:7c:2d:8f:cd:a6:ce:73:f6:0a:40:2e:5e:14:f1:
                    c1:09:35:b4:62:7c:8a:ba:8b:60:19:c3:f5:f4:5a:
                    3a:bc:11:46:e1:68:b2:ef:dc:a3:00:03:b7:6b:b9:
                    d6:18:de:fc:5a:d9:d0:87:af:8f:e3:cd:a7:1a:5e:
                    e8:4a:f1:e1:23:cb:ed:b5:5a:9b:42:80:82:2e:66:
                    b0:dc:ff:d1:65:fc:fd:e5:12:86:73:5a:4a:84:36:
                    b8:9a:42:a3:71:d2:bd:0f:16:2f:5e:ff:a1:88:41:
                    3c:1e:9d:c4:a5:c3:7d:dd:11:0b:74:ec:a0:48:ab:
                    33:65:f3:b8:ea:30:cd:1d:b4:a9:89:7e:20:4f:fd:
                    0f:76:9f:e2:26:8b:1d:da:38:0a:e1:0d:b8:2a:58:
                    8f:59:f9:e4:65:49:a8:22:a1:c5:b0:2d:59:0b:0e:
                    83:d2:f2:98:67:49:b5:12:c5:0f:2b:6f:bf:75:72:
                    86:68:93:48:ae:43:ef:6b:5b:a4:7c:81:a5:53:b8:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:39:C1:29:D9:6F:52:38:6E:0F:2E:26:A2:EF:FA:96:6D:6D:B0:E8
            X509v3 Authority Key Identifier:
                keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:fe:be:fd:4c:16:1c:bd:c8:92:dc:1c:b8:63:c2:4b:bf:
         cc:c3:b0:2b:00:db:7f:44:88:54:f7:ab:a7:25:79:5c:c0:cb:
         78:d7:87:93:63:01:f0:83:cf:73:2e:86:7d:9b:be:7a:d8:f8:
         43:e5:7b:77:8d:84:26:e4:9e:77:6d:32:a2:95:73:83:ad:76:
         b2:ed:7f:2e:4a:d6:c6:c8:20:0d:29:3b:25:6c:dc:da:42:fb:
         b7:11:36:61:ea:a3:48:49:cd:32:30:c0:e1:04:76:ac:76:51:
         8c:5c:8f:a9:4f:f5:b8:3f:26:c9:ce:d2:40:45:17:c2:83:05:
         51:a3:09:eb:b1:a7:27:b9:d7:b0:e4:d9:f6:e5:11:03:28:2f:
         43:42:c3:b6:93:62:65:62:26:bb:3b:ea:9d:5b:21:2f:4d:1b:
         db:f1:72:9b:9c:11:66:2a:4e:e7:ac:eb:a9:54:73:2a:49:00:
         2d:62:ae:34:32:7f:2d:94:3e:50:96:bb:4e:75:f0:f0:17:e9:
         24:a4:39:c9:70:09:e1:dd:24:db:b8:8a:13:91:14:53:68:1b:
         20:a0:0e:62:44:23:a9:0f:73:c6:87:7e:32:4b:6a:92:46:d0:
         39:a7:d3:43:e0:81:06:ae:5e:9e:59:46:fd:f5:7c:8e:15:64:
         a6:5b:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----