Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          baX9jWNM34D0p4ccCQBdr/xgFvzbtLnndjA8HAOqMfA=
Subject key identifier:   CD:D9:F6:ED:95:46:1D:73:20:9C:C8:AE:F3:2E:BB:EA:B0:5F:9D:6E
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0F24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0F1C
Signing time:             Fri 25 Sep 2026 01:01:24 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:23 +0000
Manifest next update:     Sun 27 Sep 2026 01:01:23 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: qoyEk659IzJNHTOMmHRq83cOtRJ0EZSCrhViXNw07Bs=)
                          2: 8986506CD9A811F0859A1F8CDAE4EC9C.roa (hash: JwfObHAK50tWIsXEuklVB8OPIiW45xLTtsZ1Px8dKfo=)
                          3: 57B58AC6D9A811F097E62D8ADAE4EC9C.roa (hash: 3FW5ERWxMNmVOYGzp7EGkp4r94UDhAJZil74hQk+Bbs=)
                          4: 4009105CD9A611F09098297CDAE4EC9C.roa (hash: 1FB2u1NkHPd32cvhaDk1Mr5Y9QwYrKrNoGPZPpvM/bI=)
                          5: 03F106D2D9A711F092519980DAE4EC9C.roa (hash: 2A+bzaBxZS1FQCfP8W3xZV1hAnZdHW1Neqh6rEzQlxo=)
                          6: 35BD0DCCD9A811F0AA584C88DAE4EC9C.roa (hash: f9TCjeq2fcGfLO+SkJPOqxOUdhtc6lIy0wxxx5QROTM=)
                          7: C1C3A48ED9A811F08FEB798CDAE4EC9C.roa (hash: T5p0OPPg3ZWIoDZt6UNj/qsZteopmc0kEMpHqGzt6Xk=)
                          8: ED0E84DED9A711F0AF96B987DAE4EC9C.roa (hash: CNvrTr+jaoNYA9leLXbMkBt22bF9S0j73baTBRDIQzM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3876 (0xf24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Sep 25 01:01:23 2026 GMT
            Not After : Sep 27 01:01:23 2026 GMT
        Subject: CN=6ab5c7e4-4c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:d9:04:95:47:75:5d:97:62:16:cb:01:9d:
                    e3:81:0e:a6:61:1c:96:cc:bd:e1:f5:24:cc:5e:5f:
                    bb:09:84:71:a7:74:89:dd:be:02:aa:44:a7:f6:c3:
                    71:5f:c2:4b:6d:cd:da:45:d0:e9:d7:09:c7:28:97:
                    06:ca:07:2f:cc:a1:97:5f:21:b9:e7:cf:ed:d2:0a:
                    0e:e0:0b:b0:a4:0f:f5:f0:98:58:09:f0:7c:61:91:
                    ed:18:c0:9f:44:c1:f7:f1:a0:cc:31:26:cf:be:a2:
                    e6:b7:fd:d2:68:78:3c:3c:ed:a3:66:64:c8:78:78:
                    f0:49:e6:a8:dd:aa:4a:c8:1a:fc:1d:e8:93:c7:f9:
                    3f:3c:2c:83:2b:ee:1f:ce:51:38:a8:99:27:85:4e:
                    25:fe:cc:c9:83:b0:c7:9e:04:3c:71:3e:c7:4c:e7:
                    f2:1f:97:08:17:f9:80:9e:99:77:0a:97:33:82:00:
                    d2:e7:c5:0a:3e:b4:e3:36:1a:d8:37:83:08:66:d0:
                    6f:6c:f7:58:56:67:a9:e1:bc:d1:5a:8f:8a:cb:dc:
                    a0:6a:44:f6:55:e3:2c:ae:91:51:1d:1e:8a:1e:45:
                    1a:29:1c:74:a4:fd:0c:54:c6:b1:ea:54:00:bc:1e:
                    b8:7d:4b:a0:44:43:cc:a8:7e:b3:db:56:33:59:db:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:F6:ED:95:46:1D:73:20:9C:C8:AE:F3:2E:BB:EA:B0:5F:9D:6E
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:70:d2:80:b3:e2:ae:fa:31:c2:91:63:11:2c:e6:00:fd:61:
         b4:75:a3:77:81:ec:42:f4:51:78:9e:36:af:0b:73:f8:73:f0:
         e9:a2:d0:ca:c7:e5:c2:79:a3:f4:2d:04:3f:43:80:88:9f:06:
         b7:16:19:ff:a6:2f:fa:9d:a0:6b:93:aa:ef:19:48:ea:d3:bc:
         d3:bb:d0:07:0b:71:0a:ae:65:a1:64:1e:25:af:8e:aa:6a:3c:
         98:ca:d5:a4:74:6a:d4:71:2d:a3:62:47:a1:21:c8:62:cd:10:
         e1:54:23:05:54:4a:29:04:ad:64:56:8d:92:e0:61:9c:31:ec:
         e9:09:44:97:c0:14:74:c7:be:86:74:d5:fc:fb:65:d6:c0:d9:
         d9:c6:4c:75:87:d4:37:f2:04:8a:23:f5:21:81:52:9e:d5:28:
         2b:5d:30:0a:79:26:9d:df:ef:a4:57:cc:c7:df:dc:ec:c5:9d:
         04:21:22:76:33:c9:9d:d6:31:2a:0b:06:2d:24:0a:f5:1f:38:
         e0:1d:05:30:bc:54:66:37:69:41:08:f9:f4:6c:a4:9f:5c:14:
         84:2a:fc:c4:82:31:bc:9b:5d:c9:ff:03:88:70:a4:23:db:29:
         b4:37:20:f3:72:44:0a:f7:31:99:ea:fb:0a:bf:6c:f0:27:45:
         96:50:fc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----