Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File:                     QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier:          FQEtHmeQK37TFO14jCYOFzkTuCzqxM0QiG0D0/O+PUI=
Subject key identifier:   49:A4:5E:75:36:40:2A:87:51:97:9F:F0:92:8D:6B:C0:8F:C8:1B:0F
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer:       /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial:       013E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number:          013E
Signing time:             Mon 28 Sep 2026 05:18:10 +0000
Manifest this update:     Mon 28 Sep 2026 05:18:09 +0000
Manifest next update:     Wed 30 Sep 2026 05:18:09 +0000
Files and hashes:         1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: 0HUs0chPvnBS2haENOApAHWq22iqKJ4Qx7PgWnUIivM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 05:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
        Validity
            Not Before: Sep 28 05:18:09 2026 GMT
            Not After : Sep 30 05:18:09 2026 GMT
        Subject: CN=6ab9f891-66a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:eb:e8:5b:b4:cc:f3:33:55:c2:34:12:70:
                    b5:20:99:62:06:e8:91:8c:af:95:0f:c7:0d:05:ac:
                    a9:9a:45:92:61:da:64:95:b2:4b:cb:40:ba:68:82:
                    6b:64:73:3a:41:f6:a8:7a:77:c4:70:76:de:83:c6:
                    b7:ff:52:c0:18:f2:d7:3e:86:1c:33:d1:ad:e3:99:
                    99:0b:5d:62:3f:a0:58:ca:c7:c3:e5:01:fa:7a:27:
                    5f:b6:b6:41:5d:9b:04:ca:d7:44:1d:18:91:fe:db:
                    5a:3e:9d:67:5b:0b:95:ea:fa:0d:ce:64:a1:7c:b4:
                    c6:64:3a:6f:e9:b3:85:05:09:d6:b1:f7:27:35:0a:
                    43:14:c8:ad:ee:90:7e:51:fe:5f:32:6a:85:9a:67:
                    8b:26:f9:fd:c1:7d:ce:d3:47:68:3e:7b:73:99:04:
                    f9:f6:80:00:68:79:3f:9a:98:47:eb:08:e7:08:4a:
                    0a:36:74:09:6c:0f:bb:87:d3:37:b0:b2:ca:da:36:
                    db:cb:a5:74:f2:b9:04:1a:3e:24:3b:6a:f1:cc:b4:
                    6f:b0:af:8a:9c:ba:e3:59:f8:82:35:de:a9:78:7b:
                    29:a5:3c:4a:12:d0:f6:1b:cb:59:8d:14:20:f4:5d:
                    25:16:84:85:83:b6:07:f9:c2:a4:ff:b4:ec:ee:fb:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A4:5E:75:36:40:2A:87:51:97:9F:F0:92:8D:6B:C0:8F:C8:1B:0F
            X509v3 Authority Key Identifier:
                keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:41:c9:2f:bd:9c:3f:d3:93:1c:9a:a1:fc:2c:4b:56:79:12:
         9d:90:0f:e6:af:5c:d3:3d:ef:e0:0a:7f:a7:48:ee:45:36:ba:
         3c:b9:e7:ef:b1:71:9f:80:6d:f9:35:53:c5:1e:8d:48:64:a0:
         e9:6a:59:f4:e0:6a:48:8b:f8:ea:37:53:12:9b:b0:d6:01:d3:
         b3:ef:d7:9d:7b:22:9a:ef:25:70:e3:eb:54:37:a9:72:57:ca:
         76:d3:33:dd:9c:a0:bc:8b:53:7a:e6:f2:d2:93:d4:ed:c7:0a:
         9a:c4:92:57:61:c8:58:af:fe:2e:01:50:c6:41:34:46:0b:e7:
         c9:51:44:a4:4d:29:82:68:23:98:a3:f8:5d:dd:43:25:3b:23:
         4b:af:7d:77:ff:cf:d5:f9:13:14:56:d6:2e:5c:91:68:50:e1:
         52:67:e4:7e:74:c9:71:9d:93:2f:19:14:83:d2:df:1f:74:e5:
         14:32:88:c2:41:96:10:53:c0:c8:10:76:41:3a:e3:a8:cc:3f:
         fd:0c:49:78:bf:52:70:07:30:36:34:cc:fd:1e:a2:a4:c3:1d:
         34:03:dd:26:48:39:65:3b:d6:54:22:b7:0a:43:42:b4:4a:56:
         18:f7:be:08:56:d1:d2:f0:43:3d:45:8e:af:68:6a:f1:c7:96:
         f6:c8:c6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----