Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File:                     XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier:          IvVw7/6QMqUjtyBoOiMguJXQaC8VJ2MiVR+tE2wjVN8=
Subject key identifier:   89:33:61:7A:5A:51:43:DC:E9:A4:B3:1B:D4:B3:C1:59:33:C9:21:8A
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer:       /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number:          0101
Signing time:             Thu 24 Sep 2026 05:22:20 +0000
Manifest this update:     Thu 24 Sep 2026 05:22:19 +0000
Manifest next update:     Sat 26 Sep 2026 05:22:19 +0000
Files and hashes:         1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: 5MeLQWN0yGZVzKwAT7eJ6FOjzj7i5bvSQrgPpp9MHmY=)
                          2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
        Validity
            Not Before: Sep 24 05:22:19 2026 GMT
            Not After : Sep 26 05:22:19 2026 GMT
        Subject: CN=6ab4b38c-e6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:6d:16:2e:de:42:80:e8:56:63:1a:d6:59:
                    08:85:15:82:42:4e:73:03:f3:d0:c1:6e:97:cd:22:
                    00:fb:cc:41:3c:80:54:84:30:8a:25:b7:6c:e6:0a:
                    9f:21:e6:69:2f:af:42:c3:3f:7f:02:1f:cb:28:61:
                    bf:3f:92:b2:1b:5f:31:6b:57:19:e6:30:5a:18:40:
                    82:1f:a8:d3:36:eb:30:57:81:01:b6:01:d5:08:86:
                    59:d9:61:1c:43:e5:50:7b:2f:7a:51:ae:dd:e0:9f:
                    b2:23:c5:ba:1b:49:f1:36:c8:19:1f:b3:2d:d8:11:
                    9a:08:1d:58:5c:49:aa:dc:6d:6b:11:dc:06:79:e6:
                    d2:4b:b1:79:7c:39:06:e2:d6:b6:3f:cd:14:60:57:
                    18:f2:d5:a6:8a:7c:ac:34:14:fb:69:fa:d9:f7:b1:
                    27:c4:cf:fe:69:3f:b7:0b:61:80:e3:14:19:67:fc:
                    02:74:fa:e1:2d:76:69:98:f8:a1:f4:a8:62:77:6a:
                    bf:e7:0b:90:e9:32:3a:8d:87:97:e5:00:88:57:90:
                    71:ac:29:bd:74:e4:f3:56:a0:95:01:0f:c6:6f:bf:
                    34:21:0d:e2:42:22:88:ba:25:57:3d:84:07:1a:1f:
                    cf:3f:ec:72:75:ba:7c:ef:b1:01:6a:bd:28:d9:a5:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:61:7A:5A:51:43:DC:E9:A4:B3:1B:D4:B3:C1:59:33:C9:21:8A
            X509v3 Authority Key Identifier:
                keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:f4:c0:38:c6:e4:b4:f4:9c:30:62:ba:29:0d:1d:8d:70:
         09:bf:1d:0a:b7:60:fb:0a:cb:ea:0c:7b:6c:ba:57:2a:4e:e5:
         b2:73:4f:71:d0:78:3a:f1:dc:8e:71:a3:53:3a:61:e7:aa:4a:
         ab:72:7d:cd:83:a2:7c:17:01:c2:b8:31:bb:f1:0d:5c:f6:dc:
         eb:1b:2e:db:a8:2d:b9:9a:12:fb:cb:2f:3f:6b:6e:34:96:44:
         4e:1f:c8:2c:5c:e8:db:b3:05:59:20:ad:d1:83:5e:88:8d:06:
         6f:55:ce:4e:72:d5:40:ec:17:9a:dd:8f:ae:ee:b0:af:78:6e:
         83:1f:d8:d3:28:ee:4f:61:27:ae:a0:0c:d7:d1:cb:0b:3b:f7:
         f8:5d:50:7e:2f:27:8d:ab:f4:82:fe:5d:59:f2:f7:df:b7:ee:
         c8:89:80:be:65:ed:9c:07:ee:97:c0:02:1a:a0:64:29:62:30:
         fe:f7:51:80:38:36:e3:4c:09:d5:59:81:e4:37:04:db:d9:0b:
         9d:89:55:cd:39:39:ca:b2:93:5a:d4:7d:05:aa:e8:83:a0:52:
         e1:f6:af:77:d5:2d:fd:be:23:d7:2a:6b:e8:84:f5:44:bd:74:
         6b:5d:df:82:f7:26:ac:91:fe:f5:fa:03:87:c9:0b:5f:0d:7d:
         2d:3f:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----