Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          w1ptctWSeyGjWn84YmkfCMUIF8u4xcaKguXNUWlcrCI=
Subject key identifier:   28:6F:29:4F:01:5D:DB:5B:62:88:E5:1C:81:AA:C0:2F:72:C0:EE:E0
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       043B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          0438
Signing time:             Mon 05 Oct 2026 03:50:34 +0000
Manifest this update:     Mon 05 Oct 2026 03:50:33 +0000
Manifest next update:     Wed 07 Oct 2026 03:50:33 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: d5yc/AzzeWxR3uZVx2MrO8GSo1QEV5YSe8yGyu/pnrc=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 03:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
        Validity
            Not Before: Oct  5 03:50:33 2026 GMT
            Not After : Oct  7 03:50:33 2026 GMT
        Subject: CN=6ac31e89-14b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e9:c0:41:c0:df:5d:6f:fe:df:ce:84:d9:27:
                    b5:26:da:b1:03:28:6c:6f:f1:b2:4f:49:8c:53:f2:
                    90:8d:cb:7b:41:55:f0:b7:15:27:c9:01:9e:b7:fd:
                    96:e7:f8:50:b7:a3:6d:91:87:76:85:88:03:c8:31:
                    29:9c:b4:1e:8e:6c:47:67:7e:58:3d:7d:ca:15:9f:
                    b8:de:aa:e0:a7:1d:69:94:41:5f:f3:bc:a2:73:3e:
                    a2:46:5e:11:49:93:d6:58:ea:15:57:c5:cf:9e:6b:
                    15:19:9f:9e:91:b6:57:9f:a9:c2:c7:a2:d8:cb:84:
                    2a:c2:72:16:5d:b1:a8:06:85:97:f5:5b:cc:e0:f1:
                    be:96:ef:43:c1:87:a8:6c:5e:d6:0b:13:ad:bb:ce:
                    c0:69:63:ae:7f:e2:52:09:9d:0f:2f:3c:36:7d:58:
                    25:08:e8:a2:25:27:06:48:67:ca:18:cb:9d:9f:7f:
                    df:3e:3c:77:91:13:35:b9:f1:b2:69:77:be:c7:b3:
                    0c:35:64:60:30:5e:88:c0:21:b7:0e:03:b3:d1:43:
                    19:be:19:af:ed:17:cc:a1:05:89:33:41:ad:e8:ba:
                    a5:77:72:15:45:70:fa:94:9d:26:b1:1c:cc:8d:66:
                    af:4b:35:97:72:bf:1f:b5:a6:3a:1b:c0:0f:ec:ad:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6F:29:4F:01:5D:DB:5B:62:88:E5:1C:81:AA:C0:2F:72:C0:EE:E0
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:2c:40:99:2f:bd:cb:10:af:20:5e:a6:30:bf:74:a6:14:
         62:c1:2f:57:fe:ae:17:b8:6b:7e:7f:ad:5c:e2:d3:4b:ee:92:
         1d:d9:f1:5d:84:02:fe:5f:30:be:dc:76:be:67:48:04:1a:13:
         4f:e1:c9:0e:28:38:d0:61:6b:5b:2d:e8:5e:8b:0f:08:fc:a4:
         ef:39:29:d8:b8:da:b3:50:b4:0f:95:6c:4a:79:d4:2b:24:52:
         dd:f4:1e:70:50:7e:70:76:4a:30:88:60:7d:72:58:4a:d2:0a:
         b9:95:4b:48:0b:b1:21:6f:f9:72:51:61:d3:8d:f7:63:2c:fe:
         ed:2d:87:7e:dd:89:d9:13:cf:76:76:ea:a1:17:90:3a:4a:9a:
         f9:e4:4e:33:78:8f:74:e7:55:51:c8:aa:eb:bc:fd:98:f6:e6:
         24:16:09:14:e8:db:fb:a8:c4:a2:01:83:26:81:49:9a:0f:e6:
         8a:7c:fd:8e:1b:49:a0:06:3c:38:b1:40:e2:52:45:6f:d5:73:
         ef:6a:0d:6a:81:9e:10:63:22:3b:23:f0:87:bd:3c:e6:98:18:
         3e:ab:70:07:b7:ad:3e:75:7f:24:cd:ca:85:91:5f:0d:d5:c3:
         e1:79:e2:d2:64:f6:83:ce:60:35:2c:c3:98:45:55:7e:a0:50:
         b1:f8:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----