Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
File:                     bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft (raw, json)
Hash identifier:          T/oORepuMW1esfICvW7TnZwhFjEz30+f22+wydnp4AI=
Subject key identifier:   28:94:42:BC:23:92:C1:43:8A:0B:BD:C1:BC:F8:A8:C4:1E:11:30:56
Authority key identifier: 6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64
Certificate issuer:       /CN=F36B7E77AF/serialNumber=6E3D1AA94E2D62AF8112BDFFB049C40FF9BD6D64
Certificate serial:       021C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
Manifest number:          021B
Signing time:             Tue 13 Oct 2026 04:51:52 +0000
Manifest this update:     Tue 13 Oct 2026 04:51:51 +0000
Manifest next update:     Thu 15 Oct 2026 04:51:51 +0000
Files and hashes:         1: bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl (hash: 2jFgztIRM1EoBV1j/pyfeA26jihpJCcUc0qoxoLXyB0=)
                          2: EC8CEE0424CD11F0A95A70B7DAE4EC9C.roa (hash: vHw6M4Jn3ZWzx4xczXCaEyluLBv1RtYMY0f4ZJEhTsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7E77AF, serialNumber=6E3D1AA94E2D62AF8112BDFFB049C40FF9BD6D64
        Validity
            Not Before: Oct 13 04:51:51 2026 GMT
            Not After : Oct 15 04:51:51 2026 GMT
        Subject: CN=6acdb8e8-63d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:32:51:f5:e7:0a:5f:cb:da:c1:4e:02:45:
                    a7:83:2d:08:4a:f3:c1:4d:14:8b:9c:c8:db:55:1d:
                    ea:97:af:d9:78:c5:8e:c3:01:ec:8b:a5:78:6e:bd:
                    8b:54:74:c8:95:3e:2c:cb:94:91:7b:52:cc:cf:3a:
                    76:b0:3a:00:55:75:3a:10:4b:76:76:db:c2:83:6e:
                    43:6f:6f:8a:50:d5:a9:6a:c7:6e:f1:a3:6d:02:04:
                    12:b2:fd:7a:a0:fb:37:63:97:b6:2b:f8:f3:08:e6:
                    ef:4f:70:bd:7c:82:c3:41:d8:ac:22:35:1e:0d:81:
                    f8:90:12:49:1a:37:bf:c2:7a:35:ca:70:ee:1e:60:
                    c9:ed:fc:00:4e:a8:1f:87:59:3d:62:e4:cf:e9:4b:
                    4b:87:35:da:22:16:7d:a4:77:e2:c3:ac:da:7c:71:
                    be:19:55:1b:c1:6a:39:1a:83:b3:f1:3a:e0:44:3e:
                    12:f4:55:f7:7b:2f:b2:9f:c2:ec:91:39:ac:f1:06:
                    88:54:93:ec:e5:ce:fb:c9:73:89:3d:dd:3d:c3:ea:
                    6a:76:cf:84:66:90:d1:c9:9e:8b:2a:cb:31:28:9d:
                    0d:c1:df:b2:3e:3c:b9:3d:9c:8e:e4:96:4f:1f:50:
                    ae:5b:8f:51:5b:2a:51:e0:6b:62:b1:49:f1:d6:f2:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:94:42:BC:23:92:C1:43:8A:0B:BD:C1:BC:F8:A8:C4:1E:11:30:56
            X509v3 Authority Key Identifier:
                keyid:6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:96:a9:a2:42:98:a2:a8:86:50:a9:e1:72:5c:6e:b4:60:db:
         08:72:d8:d4:6f:8b:1e:bd:46:e4:40:12:7e:73:a4:18:ff:42:
         0b:29:f0:f8:35:5c:a7:2d:60:d4:d1:34:0a:e2:58:bf:c7:56:
         7e:1f:4f:90:c6:ec:76:2e:b6:ca:7a:a7:a2:2a:90:da:f2:db:
         63:27:5c:5f:9c:b0:a9:54:be:ca:78:3e:6c:7a:7c:50:20:2e:
         37:df:3b:ff:18:d4:70:59:2c:59:33:4e:3f:ea:d5:40:a0:fb:
         ce:d1:50:bb:03:da:6c:95:64:69:1f:54:7f:b7:2b:a9:ae:00:
         d1:c9:86:54:e6:df:ac:f4:9e:ff:25:68:32:4b:bf:f2:5e:bf:
         f3:9f:de:ac:82:4c:43:6d:6e:1c:a1:1e:4e:4d:3b:35:e5:11:
         86:ed:29:87:24:ee:47:28:a6:94:e3:c4:08:44:d4:01:67:32:
         e0:b3:d1:e2:89:07:0b:51:7c:8f:2d:1e:4e:c3:8e:80:44:5a:
         98:23:e7:52:44:fc:c7:27:97:9f:25:4a:1e:ed:8a:2d:88:d1:
         26:09:03:e1:84:bb:00:5c:dc:e5:b4:23:7b:5f:58:77:33:32:
         79:8a:f7:d5:3b:09:54:2b:66:57:22:ee:72:05:b0:da:3a:2d:
         ce:e3:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----