Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
File:                     m1ZovBMhETHfDtPunCXTEUxUspM.mft (raw, json)
Hash identifier:          eJ38wCa+n1nFKFnKVc6eyAwiUjA7LkCFTw+NLS+lSTs=
Subject key identifier:   17:02:4E:22:5F:29:A5:69:99:60:E1:B6:4A:F7:E0:A4:2B:3F:B3:1D
Authority key identifier: 9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
Certificate issuer:       /CN=F36A42DFAF/serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
Certificate serial:       0477
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
Manifest number:          0475
Signing time:             Thu 24 Sep 2026 03:42:49 +0000
Manifest this update:     Thu 24 Sep 2026 03:42:48 +0000
Manifest next update:     Sat 26 Sep 2026 03:42:48 +0000
Files and hashes:         1: m1ZovBMhETHfDtPunCXTEUxUspM.crl (hash: odD/ShC33c8QfBlTUi7thS28SBiDm0lHZTpmslR1wPY=)
                          2: 3A4EF220A8A711EF9CFB1394762E951A.roa (hash: L1LHN+SJMi+Tgbc6P2tpj/rVnix2khr9hjlkpH0IVPE=)
                          3: 63EB76DE4D6411EEB8D5BE834AD9E6FC.roa (hash: fbwi/jtS6FeTqYdpHpFLvs6qADWyxrzMpo/5QspGOXI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1143 (0x477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A42DFAF, serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
        Validity
            Not Before: Sep 24 03:42:48 2026 GMT
            Not After : Sep 26 03:42:48 2026 GMT
        Subject: CN=6ab49c39-7344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:f4:2a:b8:3b:ab:35:61:5a:af:e1:f0:ab:
                    82:78:a0:dd:ed:16:d6:3d:08:85:bb:c8:66:ee:c4:
                    3c:a9:d3:39:71:2c:f2:de:ea:9a:0f:51:f9:be:ae:
                    5b:4a:e6:11:db:82:32:5f:f3:38:1b:f4:1f:20:75:
                    2c:d2:c5:50:bf:41:ba:97:fc:36:4f:ed:0a:69:10:
                    13:d7:2c:03:49:73:18:df:b5:0e:5c:dc:22:2d:d5:
                    79:86:f3:2d:4e:de:bb:96:f8:3d:71:2f:83:12:0c:
                    91:e4:ca:d0:31:cc:7b:59:c4:e9:5c:e6:07:e4:4c:
                    6a:96:a6:92:42:5b:24:86:c5:18:87:cf:51:5e:da:
                    6f:af:9f:56:90:4a:40:05:ed:37:d7:38:1a:c3:16:
                    ef:62:6b:68:67:9c:47:d1:38:7f:e9:f5:74:4a:50:
                    17:5c:1f:fd:39:26:2d:49:8d:46:9b:1a:f8:e6:98:
                    b2:e8:45:5c:92:ad:c2:b2:6e:b4:e8:74:7d:f5:5a:
                    ea:83:02:43:0e:b5:44:3a:28:41:66:57:73:18:1e:
                    9d:e2:5d:5f:69:44:ce:f0:fa:0d:4f:df:a3:7e:22:
                    d6:ec:43:9e:62:89:1c:a6:1c:00:d3:aa:cb:4f:b5:
                    2a:52:ae:bf:b4:8a:6f:71:83:8f:0c:97:ca:f9:dc:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:02:4E:22:5F:29:A5:69:99:60:E1:B6:4A:F7:E0:A4:2B:3F:B3:1D
            X509v3 Authority Key Identifier:
                keyid:9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:c6:45:f1:17:e3:85:ad:df:92:53:79:3f:bc:a3:a0:be:
         3e:4d:bb:3c:d4:9d:e5:d4:e1:86:40:c0:3d:23:c7:a3:fe:f2:
         20:4c:ea:89:0f:fa:0a:b8:4e:c4:51:d7:8b:5d:cb:33:a8:9c:
         e8:61:2b:4d:e7:3e:ca:82:2b:38:e5:92:8e:0b:b2:53:f3:7e:
         d1:35:52:e4:b5:0f:a3:15:0b:c7:19:4d:38:bf:69:bf:91:52:
         bb:38:a6:cf:0f:9a:96:4a:d5:e3:1f:82:b0:56:88:cc:d6:b5:
         42:c4:8b:64:69:d9:26:02:63:aa:ed:27:3c:57:71:4a:a0:a4:
         cc:d1:1d:e0:b2:fc:c6:36:35:2c:62:6b:4f:a4:6f:03:12:bf:
         33:7b:76:de:e1:eb:79:cf:bc:0d:ef:ba:d4:a3:2a:57:3a:9e:
         23:34:17:0c:56:83:02:9c:2b:8d:c0:7f:a7:1b:96:e8:3e:1d:
         90:a4:d6:53:fe:3d:cf:07:f7:3f:36:cf:cc:55:10:fe:a9:54:
         44:0b:3a:95:d2:a8:96:d0:55:dd:54:a4:06:51:a9:f7:bd:90:
         a0:2c:6d:a6:ac:23:5f:b5:c4:8b:ce:fb:8e:a4:e5:6b:28:1a:
         98:90:08:ba:7e:6e:15:bd:99:11:e9:32:a8:9a:e9:6f:4b:fe:
         f3:e1:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----