Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File:                     iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier:          Am1aHJ++0Coeu7DRPwe6ZWvyqIjWB/fgHxC+gALkITk=
Subject key identifier:   CE:C0:9F:26:64:F3:91:28:1D:43:C1:CE:2A:D8:5A:2B:59:F3:6B:A4
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer:       /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial:       0188
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number:          0188
Signing time:             Wed 23 Sep 2026 05:08:12 +0000
Manifest this update:     Wed 23 Sep 2026 05:08:11 +0000
Manifest next update:     Fri 25 Sep 2026 05:08:11 +0000
Files and hashes:         1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: JbtNxAOLfxXKXskHkZOAn4U054Eeam4AGPvk8XwlC6k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
        Validity
            Not Before: Sep 23 05:08:11 2026 GMT
            Not After : Sep 25 05:08:11 2026 GMT
        Subject: CN=6ab35ebc-95a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:32:88:af:5a:fd:d4:89:a1:0d:65:0d:bf:
                    31:60:c4:b1:d2:85:ea:f7:05:ec:99:45:21:c9:ff:
                    4d:d1:9c:ab:44:1f:25:00:e1:91:2a:cb:de:58:6d:
                    12:2b:ad:00:c6:f3:c7:8b:8f:03:de:56:ab:bb:f8:
                    70:1b:be:70:c1:02:8b:48:6c:c6:7b:4e:6f:13:ce:
                    33:8b:00:b0:e0:02:87:1c:20:aa:25:20:f0:4e:55:
                    6c:a6:2d:b0:cd:80:66:55:b9:dc:49:b2:4d:c8:63:
                    99:15:98:9c:c5:3a:f6:6c:1d:ab:79:15:6d:73:91:
                    cf:a4:00:45:4a:d7:da:7c:82:b1:ed:1d:95:3c:41:
                    76:51:70:64:1e:95:80:8c:22:c1:97:ae:f6:ee:3b:
                    a3:eb:b4:74:f1:76:f8:bd:4b:0f:28:ed:4a:cb:e2:
                    9d:14:3c:21:3e:b4:0f:c2:34:b8:a9:c9:3a:e4:98:
                    dc:b2:15:64:54:73:19:72:e0:27:63:c0:ad:03:ea:
                    0c:74:c4:5b:c2:cf:69:34:06:9f:09:69:8c:eb:40:
                    a4:f6:7b:65:a1:29:a1:39:ad:10:be:f8:0d:c5:fa:
                    eb:93:35:e7:3f:91:89:17:db:df:3e:87:de:6d:ca:
                    8e:75:2c:81:7d:30:38:8d:bb:fd:95:f6:5e:7a:11:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C0:9F:26:64:F3:91:28:1D:43:C1:CE:2A:D8:5A:2B:59:F3:6B:A4
            X509v3 Authority Key Identifier:
                keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d2:16:3e:6d:ff:93:65:d1:89:e2:d4:43:7b:b3:6d:36:48:
         56:26:55:97:58:28:06:55:c3:57:45:88:38:ad:03:04:bf:06:
         33:fb:33:23:5d:18:43:50:2b:3c:4c:d0:71:78:e8:99:7c:bb:
         17:d7:ce:78:fc:1d:7a:9c:4c:93:cb:75:4d:b9:45:2e:77:3b:
         71:1a:19:f1:63:a4:8c:0c:f7:9c:a8:55:31:fb:88:0e:3a:a7:
         51:f8:6b:0c:08:0e:50:a0:3a:b4:d0:80:f9:9f:6b:25:0c:c6:
         14:c6:eb:21:52:c7:d3:3d:20:0a:fc:21:e9:5c:e8:ea:78:b6:
         3f:39:cd:b8:10:1c:ed:78:f6:0b:be:8b:7e:33:35:24:0f:9e:
         03:e1:8f:a2:38:e1:a3:6a:1c:09:c2:25:53:08:03:02:f1:4e:
         ce:36:ad:0a:b7:f2:0a:e6:1c:07:5d:23:ea:02:6e:89:f2:8b:
         fe:3d:79:27:b4:3d:0e:60:81:98:9c:72:bb:33:f3:43:76:7c:
         ed:32:f1:aa:ab:c1:e3:26:06:fd:d2:59:3f:8c:95:1b:12:81:
         70:ac:4c:5e:a3:7c:02:b8:b9:d1:8a:c0:0c:d4:64:bf:1c:85:
         c2:f5:bb:a0:e5:06:69:5d:31:c4:58:52:ca:2b:c1:56:c5:3a:
         ac:69:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----