Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
File:                     9quAr34JmFsP46OzgjMPLIk1jNg.mft (raw, json)
Hash identifier:          oRVR0IHab/zWGiTH8CPR0gWa2gx7UiqRegPGjuRIVas=
Subject key identifier:   7F:C3:36:6F:87:EF:87:78:DB:6F:D8:CA:D5:56:74:7E:F1:79:7A:A9
Authority key identifier: F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Certificate issuer:       /CN=F36F5D39AF/serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
Certificate serial:       042F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
Manifest number:          042F
Signing time:             Sun 27 Sep 2026 03:50:24 +0000
Manifest this update:     Sun 27 Sep 2026 03:50:24 +0000
Manifest next update:     Tue 29 Sep 2026 03:50:24 +0000
Files and hashes:         1: 9quAr34JmFsP46OzgjMPLIk1jNg.crl (hash: YpYAPO/MNtpnM1aIgTVyeUuXkziNYPWDfQH/54plE2A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5D39AF, serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
        Validity
            Not Before: Sep 27 03:50:24 2026 GMT
            Not After : Sep 29 03:50:24 2026 GMT
        Subject: CN=6ab89280-30e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:4c:30:a7:f0:cf:f3:02:01:f2:06:d3:e2:
                    72:aa:7f:63:81:86:b4:26:47:f4:be:3b:ea:27:62:
                    2a:5a:e8:42:a5:a0:dd:bd:6c:a0:86:a9:d0:fa:df:
                    d0:05:ba:22:6b:5d:e8:1b:10:46:84:ac:5e:95:b6:
                    12:d0:c3:09:83:3e:8f:f8:4f:76:d0:ba:2b:ef:26:
                    d2:ee:7a:b8:ba:1e:bc:c2:a7:72:4f:81:45:3a:66:
                    51:80:a6:78:12:bf:67:30:c1:01:fd:9c:8e:c8:4d:
                    21:fd:c2:80:8c:c0:a0:23:e4:98:c7:aa:e6:07:15:
                    7a:0f:45:7f:15:3c:88:d7:fe:74:b5:01:aa:ec:f5:
                    44:4a:f4:bd:cb:c8:1b:91:27:74:24:b0:24:1a:f1:
                    1c:7a:12:76:4f:b5:1e:21:6e:3a:63:54:a8:28:67:
                    6f:a2:50:df:a8:39:db:b3:ea:37:19:0d:e9:6a:9a:
                    de:10:7e:7d:60:cb:81:14:52:f2:08:de:f0:0a:c8:
                    26:61:87:03:63:4e:98:66:7c:27:b0:3a:06:a6:9b:
                    0c:17:57:2b:a2:17:da:db:90:af:32:b8:2c:fb:99:
                    8a:01:73:83:e7:68:a3:39:76:de:c2:59:df:44:94:
                    e4:24:1a:cd:8d:2e:a4:55:3d:f7:b7:21:67:ef:d4:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C3:36:6F:87:EF:87:78:DB:6F:D8:CA:D5:56:74:7E:F1:79:7A:A9
            X509v3 Authority Key Identifier:
                keyid:F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:19:a9:c3:ea:9f:e4:1f:f9:d7:c7:43:f6:5c:c1:f8:28:60:
         fe:7f:b1:a7:09:25:7d:2c:8b:82:cf:90:f4:b2:2c:39:83:91:
         bb:d7:2b:f7:81:ba:96:fc:20:e4:c9:a7:32:67:48:f3:1c:9f:
         35:13:fc:dc:b3:b1:1f:f1:fa:ce:73:9e:e0:0b:d5:b7:72:0c:
         ef:49:c6:52:13:74:70:96:c4:e3:09:88:e9:37:a1:46:c6:53:
         98:eb:7a:69:52:a7:79:2d:9e:fa:3e:2d:aa:92:a0:32:45:81:
         28:0b:a3:9b:5f:7c:01:5c:cf:a0:d5:69:f6:78:33:86:26:62:
         9c:4d:c9:c7:6d:ba:b2:92:3d:a2:2c:38:15:94:80:ba:4c:8d:
         cf:fa:e6:39:4c:ac:c1:05:22:d3:28:b5:91:b5:19:40:01:c7:
         6f:5b:24:4f:a1:8a:bf:de:b4:ee:64:ea:38:8d:e1:6d:70:d5:
         3c:5b:3f:a8:fd:50:69:ad:e7:ed:97:a0:14:89:c7:a4:d1:0a:
         60:8e:64:10:61:9b:5d:02:71:1b:88:a3:83:f2:fb:38:53:6f:
         68:4e:ba:fd:64:92:d3:bd:d7:39:ca:48:cb:82:3b:43:b3:fd:
         d2:48:38:ed:13:f6:b0:65:42:be:8e:fd:28:f7:bf:f0:89:bd:
         57:2a:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----