Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
File:                     44k33jd6GDgiMIvjmfDhbdIecw0.mft (raw, json)
Hash identifier:          W87Ke6jdsPlDOwyYhJSXsYXt6yAvQ8m0mVKrh5VATbI=
Subject key identifier:   52:4E:88:78:36:C5:A3:D6:C8:91:13:08:AC:51:4B:2E:E7:51:1A:60
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Certificate issuer:       /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial:       0307
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
Manifest number:          02FD
Signing time:             Wed 23 Sep 2026 04:29:39 +0000
Manifest this update:     Wed 23 Sep 2026 04:29:39 +0000
Manifest next update:     Fri 25 Sep 2026 04:29:39 +0000
Files and hashes:         1: 44k33jd6GDgiMIvjmfDhbdIecw0.crl (hash: tTusg3cQcSTl3S7+7eP16+cpRvpXH/b1d8jSt759+R4=)
                          2: 760E47CE8E4011EF84E06A96762E951A.roa (hash: 5247yr5gr3JcfvGZJNIVOcPn9L/w4Rzz/cS7nF3BEWM=)
                          3: D8F28FD87BEB11EFB2CEC399762E951A.roa (hash: IrfNf4mCYxKNNTtpjGrbLvkdxYvkdOQJJFgReOprMII=)
                          4: 9C4226C07BEB11EF8997B697762E951A.roa (hash: x6+OaK81Zqdqy3X1fPmupPUQGj9yEz5ZKOjSRkN7RGs=)
                          5: BFB4BD048E3B11EFBE6ED67A762E951A.roa (hash: 29PbBEEmS4+Pdgh0yo4HDRkml04+8Fig9BDKrXuYghg=)
                          6: 8F299E2C7BEC11EFA9BB029E762E951A.roa (hash: tfHTBK6vnY+YBhFxpvxT4QzHXlDBW8NE/EQetOrIEuQ=)
                          7: DE43A2EE73F611EFB5EFE385762E951A.roa (hash: Sd1KUMUsJPhhYi5uJUrLGrb5HVAMCLRPQBpoUaX9878=)
                          8: E0657DEC73F411EF8A821C7A762E951A.roa (hash: N21MoWcROs7ufQGekwsiGnUVwD+p9mSwZWAPbhoKswc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B35B7AF, serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
        Validity
            Not Before: Sep 23 04:29:39 2026 GMT
            Not After : Sep 25 04:29:39 2026 GMT
        Subject: CN=6ab355b3-7deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:18:ea:2f:22:99:58:93:59:53:c7:0e:ba:
                    81:e6:78:cb:4c:b8:f1:20:be:12:93:da:1e:5d:bf:
                    3d:14:8e:ad:96:19:13:f9:f6:f6:db:db:d3:ad:26:
                    5a:e2:e4:b4:ad:62:15:35:9a:f3:64:00:3c:20:8b:
                    30:36:d2:5c:31:1f:e4:c7:77:68:bc:59:eb:39:2f:
                    8d:54:00:0f:94:82:89:8b:5a:f9:1b:1e:a4:90:5e:
                    31:f3:a7:53:b8:c7:74:ce:a3:e1:9b:e1:f2:88:a4:
                    7f:0a:6a:1a:39:c5:c8:cd:d7:1e:40:a5:ef:2a:b0:
                    f4:2a:7c:fc:bf:c9:f6:27:ec:e2:21:8c:b5:81:59:
                    9b:37:c0:41:a9:dc:c8:65:04:28:7b:a3:24:50:19:
                    16:15:35:50:cd:12:09:9b:58:ac:81:0e:f1:26:55:
                    b5:c2:b8:9d:9d:53:1c:50:7b:19:2a:a0:5f:0a:84:
                    e8:c3:6d:50:c0:b8:6d:fe:d2:02:62:c7:2b:85:2b:
                    9b:dd:78:26:75:8a:fa:e4:56:c9:40:89:8c:14:23:
                    4f:c1:f2:58:8f:55:7e:d7:de:01:a5:78:33:1f:ce:
                    a8:9b:59:6e:fc:fe:be:73:bc:a3:f2:0e:5a:3b:9d:
                    0d:ab:42:f1:24:9f:9a:54:0e:3a:d4:b8:04:45:26:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4E:88:78:36:C5:A3:D6:C8:91:13:08:AC:51:4B:2E:E7:51:1A:60
            X509v3 Authority Key Identifier:
                keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a6:dc:06:6b:9d:97:5e:49:5d:f2:1e:9a:f8:38:32:3a:52:
         d9:3b:3e:28:14:d2:56:b6:8d:74:0e:cf:57:53:de:53:14:b5:
         f2:6a:63:94:f9:78:21:10:af:e2:70:28:19:e1:2b:02:00:0d:
         61:a7:24:ab:f1:c8:cf:04:d9:ca:f5:53:72:8e:1c:30:f4:ec:
         57:3a:4f:db:fa:56:df:66:89:d1:9f:b2:6d:e4:8e:b5:f3:af:
         33:81:ed:1e:1c:0f:4e:ef:99:d4:95:12:02:f6:2f:02:24:97:
         d9:45:d0:84:57:a6:f7:f6:e7:0c:fd:cc:d5:46:be:da:6a:c0:
         cc:0e:56:29:c8:be:50:6a:84:03:8b:b5:53:80:35:3e:d1:9b:
         59:a8:d0:b2:e4:1d:9a:ff:95:95:f3:53:9d:f8:d0:f8:c1:23:
         c9:74:60:36:7d:31:32:8a:68:f8:91:a6:3d:c1:66:38:59:97:
         68:d2:e4:4e:ed:28:05:7c:d7:af:01:5c:55:6a:12:bf:bf:33:
         d5:62:a6:5d:1f:c6:12:67:34:e1:1c:cf:45:36:49:cc:34:83:
         43:2e:44:50:22:cd:19:9a:dc:00:cd:b6:e7:c9:e5:2d:00:f1:
         5e:9b:ae:fb:f6:6a:57:18:90:ad:11:04:b8:ff:9e:9a:be:89:
         43:3d:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----