Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
File:                     aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft (raw, json)
Hash identifier:          yPNWdbwxaxhQGZQmK0CYEAco7J2w55cKbqSHA4gnGP0=
Subject key identifier:   EF:6D:F3:9C:93:ED:1C:09:E5:56:7F:20:93:03:E8:F4:41:0C:6A:3F
Authority key identifier: 68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
Certificate issuer:       /CN=F36BB70AAF/serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
Certificate serial:       62
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
Manifest number:          5C
Signing time:             Thu 24 Sep 2026 05:43:31 +0000
Manifest this update:     Thu 24 Sep 2026 05:43:31 +0000
Manifest next update:     Sat 26 Sep 2026 05:43:30 +0000
Files and hashes:         1: aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl (hash: N+S3LKma2LB6YdhzvIW4oiUZ+yzdHPaIeGKROTPP8pQ=)
                          2: B263604E7B9011F18B89CAB7CE1D38B0.roa (hash: agshf4kc1QeGwzwdxAbbchgJDxavR9643QWxtUo7IzQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BB70AAF, serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
        Validity
            Not Before: Sep 24 05:43:31 2026 GMT
            Not After : Sep 26 05:43:30 2026 GMT
        Subject: CN=6ab4b883-feaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:94:e4:bc:ca:95:ee:0e:95:cb:dd:2c:af:
                    bb:81:fe:81:af:25:b0:86:0d:3b:20:7a:b8:ba:9e:
                    b8:13:e2:49:76:a2:2b:aa:0e:07:e3:59:76:94:28:
                    88:a1:88:28:45:b0:70:46:64:ea:5a:84:4e:f9:ae:
                    8c:3f:1d:7d:89:cd:37:13:41:87:b0:9f:00:b8:5f:
                    02:cd:6e:6f:ae:bb:a8:60:8e:0e:d4:0e:54:4d:19:
                    3e:c8:42:fd:b9:c7:c2:fb:17:08:e4:f1:ac:7f:c3:
                    f1:4c:ee:36:5e:fc:9c:79:50:ce:7a:32:32:b3:0a:
                    0e:06:06:b5:c1:6e:11:44:5a:48:a0:bb:55:31:10:
                    6c:23:28:1f:77:ef:ba:b7:f0:4a:7a:19:87:6a:97:
                    9c:ed:4f:c2:90:18:33:eb:e6:dd:e9:3a:fa:a7:59:
                    3f:9c:2b:99:7d:37:cf:93:40:2a:d7:88:52:c9:48:
                    61:9a:85:59:d1:12:31:36:c0:8d:c7:b3:97:8c:28:
                    81:b2:01:3f:f5:6c:bd:7e:b9:a5:f2:6c:e0:d4:8e:
                    df:b9:7a:bf:4e:7f:3a:eb:fe:4a:32:a6:a8:26:7f:
                    1d:3a:4f:1b:36:d4:91:e6:dc:9e:4c:e6:cb:69:a2:
                    5f:2a:5c:56:eb:90:72:cb:12:95:d0:f6:16:90:0d:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6D:F3:9C:93:ED:1C:09:E5:56:7F:20:93:03:E8:F4:41:0C:6A:3F
            X509v3 Authority Key Identifier:
                keyid:68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ad:d3:1b:c7:45:83:fe:d0:64:af:e5:35:ab:5f:e5:b3:c1:
         58:a0:0a:13:93:cf:3d:1d:23:8f:e8:06:bf:3f:a4:80:fb:c2:
         7c:c1:d9:8a:b5:d8:e4:07:5b:f7:9d:d3:f4:2f:84:92:d3:89:
         1f:c9:43:e7:6d:d7:e9:10:a0:95:b2:b9:6e:1e:a0:3c:3d:61:
         23:ca:42:80:6e:a0:18:76:14:e9:f9:be:43:d8:00:5c:8e:e4:
         16:00:a1:cc:91:da:b9:70:8d:5e:30:5e:5b:96:7d:6a:47:1a:
         73:a2:1e:9e:cf:12:dc:3a:34:16:61:11:fd:59:67:d2:d3:47:
         ba:88:ae:32:34:3d:9c:5d:e4:e7:86:b0:5e:5a:56:bd:dc:ca:
         33:8e:d7:c0:8a:29:2b:de:a3:aa:52:96:6f:c9:42:14:bb:ca:
         c8:19:1f:70:e8:74:89:45:86:91:be:42:a4:04:56:7f:b8:e6:
         14:55:27:2d:b9:29:14:9c:5d:73:1b:86:04:51:ee:bd:ec:75:
         e0:13:fc:31:c8:13:6c:d1:04:67:16:02:2a:de:c9:43:8b:30:
         b4:ba:e4:0f:6c:46:ff:89:02:fe:f6:4b:09:a2:4f:2d:ac:55:
         06:fc:6b:34:6a:2b:f7:66:96:13:1a:32:83:6e:92:6c:80:c2:
         51:65:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----