Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File:                     tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier:          q8NZd/5IK08I39QAxxrK0p6KJAlPVJmDmGO97zcZ1Dk=
Subject key identifier:   61:11:E8:F5:47:D9:41:DE:54:4C:7C:52:68:05:5D:DC:DD:81:A9:5B
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer:       /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial:       0335
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number:          0335
Signing time:             Sat 26 Sep 2026 04:17:40 +0000
Manifest this update:     Sat 26 Sep 2026 04:17:40 +0000
Manifest next update:     Mon 28 Sep 2026 04:17:40 +0000
Files and hashes:         1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: kbwufnSzGOwMj0L7+QGO9GEF6q4E9DjVde0+GyYF+FI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D26A1AF, serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
        Validity
            Not Before: Sep 26 04:17:40 2026 GMT
            Not After : Sep 28 04:17:40 2026 GMT
        Subject: CN=6ab74764-55d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:47:7a:b5:04:3d:fa:a8:94:cd:06:a8:01:
                    02:f3:7c:7a:57:e3:99:e6:83:4b:83:f9:7a:4c:66:
                    4d:7b:61:15:4a:64:6e:84:a8:0c:85:b4:d6:15:ca:
                    13:35:9b:98:fb:7d:7c:02:93:db:55:9e:5d:af:77:
                    40:c9:f9:b5:d4:e8:43:66:11:dd:02:ab:c4:bf:e8:
                    cf:89:59:49:c5:1b:6c:bf:b2:8a:a7:cb:bc:e2:fe:
                    e3:0c:c1:1c:f1:f3:8d:f8:0b:47:92:6e:55:5e:ea:
                    5a:03:c2:b5:32:d7:59:7c:cd:3b:3c:5e:34:1d:e4:
                    cb:0e:42:2b:0d:0d:23:b5:18:8d:74:36:d7:85:8e:
                    2c:dc:02:8c:c3:83:e4:bc:fc:90:21:0e:2c:1e:d8:
                    8f:e3:fa:03:3f:e4:65:2c:a9:2f:8e:d3:0f:90:13:
                    ad:99:cb:11:b8:55:aa:56:0d:f5:41:c4:bc:c0:f9:
                    00:92:a2:dc:88:3d:15:19:72:84:16:f5:fe:48:b5:
                    fa:41:b2:55:63:78:42:8e:12:59:bc:1b:23:f5:33:
                    80:56:f6:c2:fa:41:23:70:ee:7d:f4:71:2e:c6:dc:
                    87:aa:13:28:2d:06:63:78:40:35:37:5a:72:62:3a:
                    96:10:5c:54:2b:f3:bc:e2:fb:03:85:75:70:69:1f:
                    10:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:11:E8:F5:47:D9:41:DE:54:4C:7C:52:68:05:5D:DC:DD:81:A9:5B
            X509v3 Authority Key Identifier:
                keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:aa:0c:98:23:6a:60:4f:44:2c:0f:4d:12:2e:95:e4:7d:
         9d:78:c7:d5:7b:1b:c2:02:85:ba:ba:5f:5e:78:04:b0:0c:3e:
         dd:87:47:cc:7f:fe:67:52:69:fb:41:39:49:18:3d:92:18:16:
         88:59:50:3f:21:69:9c:01:26:22:9f:dc:c9:1c:4e:08:b7:28:
         2c:40:e2:70:e4:06:c2:18:50:56:06:07:f3:b6:7a:99:4c:72:
         53:45:21:29:9d:ef:ea:36:3f:53:f0:8b:a6:d1:73:1f:58:f7:
         a6:16:78:91:6e:cd:e8:c7:ef:f2:df:8e:3c:3a:fa:cb:ab:f5:
         f9:9c:03:03:40:21:27:31:37:2c:2a:f3:79:c8:f2:f6:c3:eb:
         e9:77:17:89:e7:10:a7:82:b2:cc:1d:d2:4f:f5:67:d9:1c:db:
         49:00:99:91:84:2b:7d:4c:c1:81:26:b4:7f:03:e2:05:41:db:
         df:ce:04:60:5a:cd:4e:1d:ba:7f:c2:02:62:1c:da:1a:f4:68:
         1f:d4:5d:fa:91:24:cb:d1:21:96:1b:4c:ba:35:c1:20:1e:61:
         b6:0e:57:46:12:cd:9f:82:60:0e:95:ff:c8:ec:cc:95:04:db:
         f5:7c:4a:e9:b0:c2:a5:6f:d8:15:52:db:da:21:85:b5:b2:0c:
         eb:91:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----