Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          4EheBVpR5D1RZ3hTE1V1MXK2LSD/e1OrmXr/BZVlTrw=
Subject key identifier:   CA:E1:16:C7:FD:ED:01:47:C9:F8:4F:EF:FA:AD:03:07:C7:7F:7E:67
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       0357
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          0355
Signing time:             Thu 24 Sep 2026 04:14:02 +0000
Manifest this update:     Thu 24 Sep 2026 04:14:01 +0000
Manifest next update:     Sat 26 Sep 2026 04:14:01 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: W1aOCn4aGg98rTlsqTbvJdOyHMDVMGyhXeq6jfR7/ZQ=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Sep 24 04:14:01 2026 GMT
            Not After : Sep 26 04:14:01 2026 GMT
        Subject: CN=6ab4a38a-280a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:a8:b8:e4:8b:d4:38:b5:3f:24:87:b7:2d:
                    43:d9:6d:e4:8f:b6:67:e1:62:98:be:62:56:db:eb:
                    09:f6:48:99:15:41:a0:b0:2b:4f:07:79:43:66:bb:
                    73:50:0c:e3:2b:b2:69:44:99:b3:77:1f:80:5d:82:
                    05:78:5a:04:27:4e:44:dc:91:e5:35:72:4c:3d:d0:
                    3f:21:ff:1c:75:58:f6:ab:9d:ad:1d:28:50:60:e4:
                    bb:af:db:3a:88:f7:a7:a7:75:56:26:6a:34:72:b3:
                    6e:4c:13:48:9c:45:32:2f:f5:4a:82:ac:e9:1c:ba:
                    83:4b:6c:7b:e9:9d:a6:e3:8d:80:d0:91:d5:85:91:
                    88:5d:f6:13:60:ac:f2:c3:31:be:c6:e0:d5:29:e7:
                    04:6f:4a:11:a3:aa:a8:e2:1b:0d:bf:6b:a3:e0:7f:
                    4e:93:20:29:5a:32:08:d8:0a:0a:ad:ab:f1:51:b1:
                    5d:d1:e5:49:d1:83:cd:a0:3e:16:fa:05:b1:14:32:
                    15:f6:9f:c1:0d:cd:9d:46:7d:8f:96:e7:19:7e:ac:
                    23:21:fc:e0:4b:7a:24:f7:9d:ac:1e:23:8a:e1:2f:
                    c5:62:5a:99:a3:4f:03:c4:dd:e6:e6:c9:b7:65:fd:
                    b7:51:42:8e:36:20:66:d7:d4:d9:35:73:ee:17:9b:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:16:C7:FD:ED:01:47:C9:F8:4F:EF:FA:AD:03:07:C7:7F:7E:67
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:a6:15:36:e0:7f:a3:03:19:cb:dd:1d:2d:33:d6:31:94:
         61:a0:81:88:1a:5a:14:2e:12:17:8e:ae:12:f6:11:68:92:c9:
         2e:2c:b3:02:b3:9e:ca:22:b4:06:92:7e:63:5d:d5:06:ca:22:
         42:5e:fc:d0:23:3f:f2:fb:88:bb:0a:a0:38:38:26:c7:6d:df:
         c4:0f:c8:7d:04:91:83:98:92:cc:5a:9f:d4:20:c9:59:e6:6f:
         04:52:30:41:75:78:e7:94:42:cf:ef:d8:8c:44:e9:2d:0b:96:
         6b:a2:22:49:6f:02:2c:e5:28:3d:e5:29:82:d2:29:de:58:a5:
         bd:e8:41:ec:00:f1:b0:54:4b:21:eb:f5:55:bc:6d:61:92:8d:
         4f:fb:d6:ad:51:3c:0a:a2:c8:c8:8f:96:c1:a4:5f:e3:90:2a:
         8b:91:5e:89:12:77:c7:4a:79:14:5d:7a:7a:ba:fd:9b:34:04:
         ee:3e:5a:20:1a:cb:ae:b6:4e:f1:5b:02:d3:91:be:9e:ce:03:
         0a:de:84:51:9a:c7:ef:45:cb:26:2f:ef:b3:d9:01:3d:59:1b:
         e7:d4:c0:d0:f1:23:5a:e0:86:5c:59:67:f1:6e:d0:d8:f8:cb:
         fa:61:4b:4b:1a:61:8a:0a:0c:37:c4:44:42:bc:ff:63:14:2d:
         c3:8c:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----