Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
File:                     BkapmNbNXVvutQ9MkpExVTb3xbQ.mft (raw, json)
Hash identifier:          n8PTunTPFiXNM/aDzREgKKDEPyxN9UOED7i3a0CuiMo=
Subject key identifier:   EE:51:C4:18:2A:E5:A6:0B:83:58:E1:8E:48:39:AF:42:50:47:7C:55
Authority key identifier: 06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4
Certificate issuer:       /CN=F36CAE5AAF/serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
Certificate serial:       086C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
Manifest number:          086B
Signing time:             Sat 26 Sep 2026 01:57:38 +0000
Manifest this update:     Sat 26 Sep 2026 01:57:37 +0000
Manifest next update:     Mon 28 Sep 2026 01:57:37 +0000
Files and hashes:         1: BkapmNbNXVvutQ9MkpExVTb3xbQ.crl (hash: KWq3DdIRzM655hL60WS90hd+x9Fq8xYof+5VTRH7g/E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAE5AAF, serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
        Validity
            Not Before: Sep 26 01:57:37 2026 GMT
            Not After : Sep 28 01:57:37 2026 GMT
        Subject: CN=6ab72692-4d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:0f:4a:7b:6c:2e:11:ce:96:ef:0e:ac:1a:
                    61:e3:97:ee:a3:59:e3:16:62:47:27:4c:a4:3f:52:
                    ff:e2:82:24:8f:68:6e:dc:c8:3b:98:ca:15:16:da:
                    c2:2c:cf:fe:d7:89:f9:1b:30:1a:75:c0:78:bf:c2:
                    a9:db:b6:e6:ff:ac:a6:82:4b:45:88:70:13:74:16:
                    40:4a:d4:69:9c:d4:27:11:ac:10:15:cf:69:25:f7:
                    12:9d:99:2a:d1:b1:1a:40:d9:72:76:5f:0b:d7:db:
                    8e:66:ec:a4:22:7f:26:d8:68:b0:5c:8f:5b:44:87:
                    0e:e7:15:38:75:fd:bb:2d:d3:b4:6e:5a:c7:43:18:
                    9b:8e:be:1f:e5:69:62:4f:f0:59:a2:7d:8e:6a:a4:
                    58:ad:32:f2:f9:59:04:7b:6a:2b:0b:b6:1f:96:a5:
                    69:17:1f:c1:94:ee:cb:98:ab:7d:d7:52:6c:81:c6:
                    60:57:81:1a:4e:d7:01:2e:9e:aa:97:23:9d:47:cf:
                    53:b0:4b:33:20:07:ac:6e:71:ae:6b:52:e5:6b:16:
                    c4:02:f5:65:b0:33:36:46:02:9b:33:8a:32:a8:22:
                    90:d9:6d:dc:73:9a:59:b7:cf:b3:e6:ed:72:a7:06:
                    86:1c:69:70:08:56:09:01:99:c9:23:18:b6:a2:d1:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:51:C4:18:2A:E5:A6:0B:83:58:E1:8E:48:39:AF:42:50:47:7C:55
            X509v3 Authority Key Identifier:
                keyid:06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:69:2d:8e:4b:67:6d:d5:1d:d4:85:c3:a7:1e:db:7e:4f:
         d6:92:54:6f:22:98:a1:88:54:d5:97:f6:42:e2:18:39:57:c9:
         33:40:50:29:19:c5:37:a3:71:5b:70:4d:0e:b1:c4:09:5f:35:
         fa:9a:a4:be:8e:37:9f:c5:7a:99:a9:4b:16:6c:b3:bc:20:35:
         c4:a4:c9:69:51:4e:2b:5c:a8:79:a5:ab:72:9e:ba:a6:a4:ac:
         46:aa:d9:61:d4:9f:dc:4c:c8:3c:84:ee:74:3f:92:a7:5c:12:
         89:bd:31:38:2a:51:22:4e:fe:59:5e:39:02:6b:b9:9f:8f:d9:
         54:d9:6a:9a:be:9c:04:cf:43:3d:95:6b:16:64:f2:52:40:65:
         a6:58:26:5b:f2:a2:57:74:e3:b5:36:4e:fe:45:01:2d:3f:9e:
         6d:d6:2d:40:88:62:8d:4c:0a:87:bd:fc:0b:56:32:8c:cb:b4:
         1e:78:e9:73:4f:e6:3c:11:d2:c5:57:60:58:0a:33:fb:ba:7b:
         34:2f:4e:9c:2e:8d:e3:2a:0e:ad:71:0b:05:fa:e7:0d:ca:00:
         6a:08:22:63:99:d0:99:5f:77:78:f0:f2:9d:12:2b:58:11:d6:
         e6:de:32:6f:af:6b:6d:df:6b:18:63:2c:8d:bf:c5:75:1c:1e:
         44:88:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----