Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
File:                     T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json)
Hash identifier:          5iFOROtjA1kJOl0gJQQTzsKnbmP4Q+KMIIe/hr6uTHM=
Subject key identifier:   C2:2C:DA:65:0E:EA:C7:28:D8:FE:6F:41:72:0E:3C:E0:1E:EE:F6:FE
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       09E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
Manifest number:          09D2
Signing time:             Thu 24 Sep 2026 01:42:06 +0000
Manifest this update:     Thu 24 Sep 2026 01:42:05 +0000
Manifest next update:     Sat 26 Sep 2026 01:42:05 +0000
Files and hashes:         1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: /Fz7wzUf+j18ID/UBK3mzYQ+SHqM6iuWF5LAH3X9A8E=)
                          2: F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa (hash: PW/BAXgHvih22srJgbVXfOqpna8bQSUwnKdkd55yiKw=)
                          3: 63CD6D381C6F11F1A8701690DAE4EC9C.roa (hash: c9onQMQ9ZUC32jP7lmDEH4I1JLO7mXPuFSF2QEzOxqk=)
                          4: B6B99F861C6E11F18CC2268CDAE4EC9C.roa (hash: Nk9KcupgaFrT9HYjwhwayvcsckASnFKmSYP5X4ruEFg=)
                          5: 582A85201C6E11F196474E8ADAE4EC9C.roa (hash: tXQNq5anGZuKI/N3ls0PiguA4/6L6XRyM0QYo8OFjRw=)
                          6: FEE338541C6D11F196022388DAE4EC9C.roa (hash: LVUzPTIff1K9PHg6hyLX45CbcDuYQrRZVEGZDDm6Rkg=)
                          7: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=)
                          8: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2531 (0x9e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Sep 24 01:42:05 2026 GMT
            Not After : Sep 26 01:42:05 2026 GMT
        Subject: CN=6ab47fee-fc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:98:27:c1:72:af:83:e6:03:7d:03:07:bb:e3:
                    ff:e1:b5:47:5b:42:c7:cd:c2:39:a5:dd:b8:87:b0:
                    91:3c:77:36:10:9b:e8:3e:85:66:1c:50:ba:a1:26:
                    60:4d:eb:63:d7:ba:be:22:e3:25:db:eb:13:19:1f:
                    d4:25:5f:84:0f:e9:70:dd:c8:21:14:db:89:56:8d:
                    33:32:d5:88:0a:2f:20:08:a1:c4:9e:7a:ed:02:2c:
                    7a:5d:2e:57:89:49:ed:2a:48:19:71:33:e9:48:b9:
                    3a:6a:e8:b6:66:99:65:30:9d:26:f5:1a:fb:7d:29:
                    9b:29:7b:23:55:e0:d7:0c:17:51:bb:b9:a0:c3:b2:
                    60:35:47:8f:a2:cb:62:65:c0:77:ee:db:52:5f:5b:
                    cf:14:ba:c8:65:db:a6:be:38:8f:4f:56:4c:10:8c:
                    9c:5b:3c:29:73:c5:6f:8f:66:22:97:d7:de:d0:14:
                    de:42:f1:a2:18:7e:66:ec:42:dc:6f:49:bb:14:f9:
                    18:14:28:64:c1:0a:fe:e9:1c:b3:f9:96:0b:8b:19:
                    5c:a0:a2:56:48:f4:c5:36:73:06:8e:de:1e:21:d5:
                    23:a6:74:77:bb:91:38:72:97:f1:c0:70:82:d1:48:
                    86:cd:4d:2f:8b:9c:df:95:69:78:a5:bb:90:b6:66:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2C:DA:65:0E:EA:C7:28:D8:FE:6F:41:72:0E:3C:E0:1E:EE:F6:FE
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:10:e7:18:c4:22:69:f2:c3:4e:30:1b:19:3c:23:26:41:
         2b:15:8f:e5:04:ad:12:21:4b:67:d3:9e:46:23:58:00:15:1c:
         1f:f4:cd:d3:25:bd:68:37:07:44:23:50:50:b3:a7:be:bc:9d:
         15:7f:4d:77:76:ef:27:4b:e5:eb:45:de:72:a2:f9:26:ba:e0:
         68:fc:42:7e:68:d0:6c:00:5d:64:fe:c4:40:24:d2:c1:a4:98:
         85:6a:d3:3e:05:5d:77:4d:06:a8:a9:e4:40:e9:7e:5a:32:af:
         d8:bb:89:be:84:95:94:06:4f:0a:11:ad:c5:d7:d5:17:e7:5f:
         a5:74:f1:2e:59:f2:36:13:2e:39:ab:0d:a2:eb:bc:c4:f2:1a:
         34:ce:4e:b1:db:98:9c:e5:a2:13:13:7d:14:1f:67:2f:e5:ee:
         1f:1e:8a:e0:4e:16:77:55:ce:81:00:0b:97:ad:4f:60:e2:14:
         d0:32:5a:1c:8d:d5:9f:03:47:91:de:dd:3e:6d:47:3e:f9:4c:
         ec:5f:e6:d1:47:a0:f9:9d:f7:58:c4:a6:5c:9a:df:94:bf:3c:
         72:19:ab:9a:7a:21:63:38:cb:ce:0c:73:0f:b3:f8:54:f5:16:
         19:8d:4b:80:77:6e:04:e7:90:0f:7c:3c:f1:ee:91:66:57:e5:
         de:23:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----