Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          aAbgrTs/zPjjoT0GhUC+APfaympjzYREATS2RPsBXEc=
Subject key identifier:   5C:9A:88:89:BF:DD:53:E3:B9:CC:61:5B:B2:06:9F:18:B4:3C:01:84
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       08AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          08A7
Signing time:             Wed 23 Sep 2026 01:56:03 +0000
Manifest this update:     Wed 23 Sep 2026 01:56:02 +0000
Manifest next update:     Fri 25 Sep 2026 01:56:02 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: 08Q4OK142ZnmcSRD4KeOGFpDYBLiBESj42eg83otQ90=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218 (0x8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Sep 23 01:56:02 2026 GMT
            Not After : Sep 25 01:56:02 2026 GMT
        Subject: CN=6ab331b3-1b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:6c:94:0f:d9:33:5b:a3:16:85:4d:e7:5b:
                    20:a9:98:8d:f3:db:75:69:1f:92:b7:f4:e4:b2:15:
                    b1:9d:f7:12:9b:dd:25:75:04:6d:ec:d7:d4:a9:e5:
                    a2:21:09:0f:53:57:b4:fd:83:ab:f4:80:a5:49:04:
                    d3:e6:a9:ad:76:69:69:a5:7c:f8:c5:f0:ef:cc:ae:
                    c8:f5:95:4a:fe:9e:9e:c0:93:50:03:55:53:0f:a3:
                    40:2b:16:65:90:94:c3:3b:a7:da:24:c5:3a:74:0d:
                    e4:de:8a:c9:f4:e0:d6:98:71:67:d6:ab:40:5b:78:
                    65:c0:1a:f3:b0:10:bc:e5:03:dc:7c:e6:ce:24:b5:
                    6d:78:9d:82:9a:28:81:df:5e:b9:d8:60:10:e1:a0:
                    22:2a:45:28:db:ec:70:f9:67:60:38:06:76:22:f7:
                    e7:99:40:32:eb:55:97:ef:8d:a3:9c:80:cc:04:e2:
                    9a:55:19:31:e3:80:14:af:9d:87:bc:89:c6:5d:9b:
                    46:4f:56:ca:70:d1:98:da:c5:dd:d9:2d:a9:19:6d:
                    e5:21:b7:dd:da:65:f8:ed:07:a1:8c:01:7e:fa:d1:
                    9c:59:58:70:85:c5:96:00:ee:69:a1:3a:b7:3e:b4:
                    01:eb:92:75:12:0c:d4:ee:56:4b:30:d4:3b:cd:3f:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9A:88:89:BF:DD:53:E3:B9:CC:61:5B:B2:06:9F:18:B4:3C:01:84
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:c4:31:39:ca:02:08:de:20:06:27:a6:fd:02:96:b5:b1:
         8d:c6:1a:6b:83:ea:6f:d4:a6:8e:95:e0:0b:06:50:41:13:6a:
         43:14:f9:41:30:e9:9d:0f:c6:60:94:28:65:d0:6a:5c:bc:fa:
         7d:4f:76:fa:e5:70:28:4f:89:2c:14:47:60:fc:6c:91:15:26:
         88:bd:00:5f:ab:9e:79:1c:c6:e0:4b:db:ef:09:e2:98:aa:db:
         d5:35:b9:d5:42:68:53:e8:10:64:8b:c9:8e:db:fc:dc:86:9b:
         b8:40:aa:13:d5:c6:6f:e3:e0:98:14:ac:5a:a6:fc:b2:0b:d7:
         77:76:70:ca:3d:13:ca:a4:b3:88:4d:b8:b0:f7:f1:25:3a:cf:
         9c:7e:c2:e1:b3:5b:fc:a7:0e:10:57:ad:b8:3f:f9:7a:2d:39:
         a8:12:39:3c:c8:f6:de:53:a7:e8:aa:06:2f:ae:50:07:f7:fa:
         14:9d:78:cd:f4:1b:ca:64:d1:48:a5:99:55:0d:2c:31:24:b3:
         5b:8a:ba:4d:f8:88:fa:84:25:0f:a6:05:91:54:e9:f2:7d:a9:
         46:c6:8a:95:fe:7b:c3:6d:c2:a7:09:94:13:9b:e1:f3:f8:a6:
         fc:0f:42:24:f5:f5:3f:08:ed:6a:5c:6f:b4:4c:74:e6:33:16:
         35:4a:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----