Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
File:                     _n_6ewbTc1Hbkta507CtEDB7WiE.mft (raw, json)
Hash identifier:          Mx9AGC3gFLjIWDei8biRILxMFGzcvVP5cYZUGZxWNBI=
Subject key identifier:   C3:18:AB:50:AF:DE:0E:3E:FA:5E:38:A4:78:ED:0C:C4:61:A4:87:A2
Authority key identifier: FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
Certificate issuer:       /CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Certificate serial:       039C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
Manifest number:          0398
Signing time:             Thu 24 Sep 2026 04:07:39 +0000
Manifest this update:     Thu 24 Sep 2026 04:07:38 +0000
Manifest next update:     Sat 26 Sep 2026 04:07:38 +0000
Files and hashes:         1: _n_6ewbTc1Hbkta507CtEDB7WiE.crl (hash: IOCYdNWEQC+ZgIaBEWCH4WAcqxm7xjXeUzz9nQJAUL8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAF, serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
        Validity
            Not Before: Sep 24 04:07:38 2026 GMT
            Not After : Sep 26 04:07:38 2026 GMT
        Subject: CN=6ab4a20b-83c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:dc:87:05:f9:59:6f:5c:c6:64:67:a6:f3:
                    98:fa:74:c9:75:fa:fb:00:71:7d:93:b7:e9:77:6c:
                    97:02:85:5e:73:c7:46:80:8d:80:af:6f:31:3b:8c:
                    76:14:9b:17:6e:7e:e6:04:10:d4:99:e0:eb:53:2d:
                    4e:d8:25:9f:b5:b3:68:f8:87:e4:fe:9e:49:bb:66:
                    36:9d:6c:93:82:7f:ca:ab:6a:a8:e0:23:12:8a:cb:
                    dd:96:a7:eb:f8:0b:98:08:f0:b8:2c:05:f3:41:5f:
                    0b:a0:5f:f9:cc:3f:24:01:ac:98:e8:14:75:53:65:
                    2c:20:dc:f8:31:c2:96:49:e3:e9:34:4b:c2:2c:1e:
                    df:ad:63:ad:2b:ad:47:12:ae:3e:3f:b3:e0:7e:0b:
                    fa:11:bb:c3:f3:d3:fd:1c:7d:a8:a9:08:c0:55:3c:
                    5e:59:55:e1:82:40:58:72:64:86:97:65:69:fb:e3:
                    8e:c8:0e:f5:87:57:a3:89:0a:fa:cc:7b:3f:fb:32:
                    cc:05:1e:4f:82:51:4d:3d:d7:2d:bf:92:02:82:2e:
                    75:b6:5f:1d:19:28:7c:f9:d2:3a:ff:64:3b:53:02:
                    8d:08:1a:bf:cf:cb:80:13:28:ba:58:f0:7a:52:1d:
                    81:8e:3a:04:73:1e:93:86:38:e5:b5:87:35:07:50:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:18:AB:50:AF:DE:0E:3E:FA:5E:38:A4:78:ED:0C:C4:61:A4:87:A2
            X509v3 Authority Key Identifier:
                keyid:FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:3f:c6:0d:87:ed:33:b1:c4:a3:0d:df:ed:a0:60:f9:ca:
         ac:b6:9f:45:46:8c:cb:e8:0d:c4:e3:6a:c1:50:e9:15:51:bf:
         50:8d:75:ed:2a:bf:27:8d:c8:fc:ab:d2:b0:6a:92:72:f2:90:
         35:87:a9:a1:52:af:25:ed:c8:42:ea:b1:23:c2:80:ce:7f:32:
         92:60:7b:b5:0a:2a:13:5f:0b:c9:ff:ab:dc:dc:d8:77:e6:c6:
         09:11:42:fa:68:1d:5c:db:3a:a3:2c:d1:ff:59:e5:cc:c7:3f:
         6e:2b:f4:43:de:42:ad:ac:7e:a1:b4:3a:e9:21:74:ac:e0:85:
         fb:dc:d9:63:f7:88:0d:39:af:35:bc:de:d4:9d:06:79:d3:b7:
         f8:4f:bc:2a:15:ee:ab:9a:54:d5:15:74:39:31:c7:ea:68:e2:
         08:6e:fc:f7:9e:92:66:09:20:dd:a4:26:1e:bd:0c:b8:53:8f:
         eb:72:73:73:ff:12:5e:c8:de:6e:91:fc:8e:6b:34:43:8f:63:
         a3:62:6a:27:5d:9a:83:66:6e:f3:6d:a5:e8:d7:f9:1e:e0:ad:
         02:00:2b:84:7e:fa:dd:35:53:87:cd:6c:42:0e:96:96:91:69:
         cb:ce:bf:7e:bb:a6:51:1d:4d:74:ce:df:c3:9d:71:9a:bd:bc:
         ef:85:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----