Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
File:                     Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft (raw, json)
Hash identifier:          V9lNKqZ+4vOmYbagW5ptNjPRAH8xuQvv2qunIwDHg3U=
Subject key identifier:   6A:48:B2:99:BB:34:55:51:FB:14:38:77:98:E8:AF:58:28:9E:0C:B1
Authority key identifier: 0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A
Certificate issuer:       /CN=F36B222DAF/serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
Certificate serial:       0157
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
Manifest number:          0156
Signing time:             Fri 02 Oct 2026 05:11:04 +0000
Manifest this update:     Fri 02 Oct 2026 05:11:04 +0000
Manifest next update:     Sun 04 Oct 2026 05:11:04 +0000
Files and hashes:         1: Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl (hash: Fivqd0qKHiZxrrHfnCm1gZwRH/KsPk/Cqjr6qKRXzag=)
                          2: C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa (hash: tOfIeOAf4uXl6pOeSJ1Xju9VQWrYerPezpD2f2dwyfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 05:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B222DAF, serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
        Validity
            Not Before: Oct  2 05:11:04 2026 GMT
            Not After : Oct  4 05:11:04 2026 GMT
        Subject: CN=6abf3ce8-8f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:da:13:5d:f9:6a:e0:8c:46:ee:6d:78:07:
                    46:f2:25:95:eb:6f:9e:cb:b4:ec:fc:fd:0b:e2:42:
                    2b:5a:3c:f2:b4:9c:f2:12:5d:1a:7d:c1:4a:ed:a4:
                    15:7e:80:d7:f3:38:6f:fa:65:ec:ad:dd:a9:95:81:
                    5c:76:89:e8:d5:b3:cf:3e:d2:26:80:42:2e:26:b1:
                    68:84:e2:13:b1:50:8a:a0:48:97:80:01:d4:c9:3f:
                    20:eb:3e:92:b9:1f:b4:b1:2b:9b:3a:a5:4c:71:24:
                    ce:7c:1e:41:44:41:02:18:c6:1a:5b:0c:60:13:d1:
                    67:ba:d7:20:9f:1b:d7:ab:47:9e:37:4d:cc:91:4b:
                    1a:16:fa:23:d4:3a:35:f0:e3:95:a1:70:ef:d0:1a:
                    13:a9:3d:ce:8c:15:4f:eb:4e:33:ca:21:0d:cc:51:
                    97:58:08:9f:a5:09:a2:55:69:89:7c:8d:43:d7:0b:
                    2e:6c:12:c1:e8:7c:57:6b:0a:0e:21:e8:8c:4c:8c:
                    0f:4e:28:21:f7:97:55:09:55:03:6b:3b:bc:5f:22:
                    cb:80:5d:9f:21:49:b6:ff:7a:27:39:cc:5d:20:9d:
                    99:62:de:5c:15:1f:98:da:1c:23:77:ef:f7:b4:1f:
                    a4:e0:65:61:fe:09:47:d3:be:ed:d1:10:24:b1:e5:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:48:B2:99:BB:34:55:51:FB:14:38:77:98:E8:AF:58:28:9E:0C:B1
            X509v3 Authority Key Identifier:
                keyid:0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:aa:d2:5c:20:95:d1:6d:ab:15:ba:d2:fd:12:51:c3:65:
         3e:16:af:5a:e2:61:f7:b6:09:b3:ef:d4:06:d3:df:ac:4d:27:
         4c:5b:ae:a2:cb:a7:8b:b7:8c:c4:45:5e:bc:fa:b6:f1:76:4a:
         5b:07:cc:0f:2a:8d:fc:56:47:e0:82:ee:ca:fa:1b:08:b0:a0:
         3b:1e:9c:dc:57:c9:2c:c7:c6:6e:13:87:13:eb:5b:9a:55:13:
         81:87:86:39:c3:b5:4a:ff:c9:5c:0e:94:c9:ef:9c:9a:82:1b:
         40:13:16:e8:14:a7:f6:cf:17:b4:9b:6c:77:34:3a:dc:30:c1:
         34:75:97:30:ca:6f:7a:cf:49:43:7b:26:e2:7e:eb:89:18:0d:
         62:57:77:84:da:9a:bb:82:17:05:43:70:de:63:1b:a9:10:8c:
         dd:c8:be:26:88:6c:9e:5a:19:d0:6e:b0:66:3e:2e:4e:3f:22:
         5a:77:b7:66:31:76:77:7a:65:2b:d3:9f:0f:4b:23:c3:51:73:
         b5:bf:7e:16:cf:12:7d:5f:64:41:fa:6a:58:ab:4f:72:3d:f2:
         a7:65:9e:77:17:33:ef:a6:f1:65:e3:cc:02:5d:ae:f7:5d:0c:
         ce:c0:46:5e:9d:95:dc:b5:f5:cc:8e:81:51:34:9d:c1:29:6c:
         cd:b3:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----