Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
File:                     dUkJrgeKY-ifABHj0kq7f951hnc.mft (raw, json)
Hash identifier:          WPQ3yaNcyAz43bjZY8clSqPkzoO/09E/2VhWWsFt3H8=
Subject key identifier:   31:B7:E9:1F:BF:F4:39:43:36:32:C5:8B:3C:52:DC:89:A1:C4:EC:73
Authority key identifier: 75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77
Certificate issuer:       /CN=F36FC4AAAF/serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
Certificate serial:       01AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
Manifest number:          01AA
Signing time:             Thu 24 Sep 2026 05:02:48 +0000
Manifest this update:     Thu 24 Sep 2026 05:02:47 +0000
Manifest next update:     Sat 26 Sep 2026 05:02:47 +0000
Files and hashes:         1: dUkJrgeKY-ifABHj0kq7f951hnc.crl (hash: 9tWhsLRm0XuuRB1kPRq27eWiQskZzjT96DhLQfFWC9I=)
                          2: 433EBDCA6DFF11F0AA2AADD3DAE4EC9C.roa (hash: A3nkp4rPy53u0Z5Ms+sfzKlD65yMF9PSrDUFPQ1Fzco=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC4AAAF, serialNumber=754909AE078A63E89F0011E3D24ABB7FDE758677
        Validity
            Not Before: Sep 24 05:02:47 2026 GMT
            Not After : Sep 26 05:02:47 2026 GMT
        Subject: CN=6ab4aef8-f511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:1d:b4:f9:8d:16:8d:05:51:3e:4d:1f:20:
                    8c:f5:d6:cf:62:f2:09:16:28:31:07:4b:45:97:7e:
                    14:af:70:ec:31:b7:65:c8:49:3a:59:79:19:b5:21:
                    a1:8e:36:9c:d8:d3:d9:9c:84:e7:d6:69:51:08:1c:
                    2b:f4:53:8b:a0:b1:8f:17:05:39:36:a4:8c:f5:c9:
                    77:fc:58:73:e8:5d:7b:c4:16:e4:af:b1:5e:3c:c9:
                    6a:c7:d1:c3:31:ba:9c:38:fb:16:7b:7d:7f:fc:ef:
                    a0:ed:09:8a:5a:35:57:ff:51:ec:4b:77:a2:0e:09:
                    c6:af:df:15:9e:c0:79:0a:f0:01:3e:60:3e:a8:ce:
                    74:8d:e5:3a:44:55:a1:2c:bc:58:52:83:39:22:a3:
                    7d:3e:34:2f:4e:5a:ff:6a:21:04:b2:ff:ec:44:d7:
                    12:7f:c1:a1:ca:02:ac:97:42:98:99:35:1f:e4:e1:
                    fe:ee:db:ea:64:01:3a:17:54:f7:d0:b6:91:42:8a:
                    22:79:51:10:07:24:9b:46:d6:95:ee:af:42:e7:f6:
                    82:fe:de:88:f0:49:9b:51:6a:99:8c:16:3f:6d:86:
                    38:33:ea:8d:56:11:f1:13:48:48:a2:9e:c0:0c:d0:
                    a2:84:f0:7d:4b:2a:11:92:e4:85:c8:7d:89:47:7e:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:E9:1F:BF:F4:39:43:36:32:C5:8B:3C:52:DC:89:A1:C4:EC:73
            X509v3 Authority Key Identifier:
                keyid:75:49:09:AE:07:8A:63:E8:9F:00:11:E3:D2:4A:BB:7F:DE:75:86:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUkJrgeKY-ifABHj0kq7f951hnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC4AA/43A969D46DFC11F08A39DCC1DAE4EC9C/dUkJrgeKY-ifABHj0kq7f951hnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:05:e1:7e:dd:81:0c:1f:9e:b8:83:05:ff:c2:65:77:87:90:
         1f:b6:ff:91:2c:68:03:d7:91:56:2f:67:1a:db:5a:7f:2a:c3:
         ce:a6:fc:e6:6a:04:20:51:11:ac:09:c2:bf:5d:1c:98:07:f3:
         36:a0:06:8b:d5:98:25:84:ea:54:1a:59:03:8a:5f:d9:ca:f9:
         12:a3:92:77:c8:ac:83:17:a6:19:8a:65:1f:8e:3a:d5:74:55:
         07:99:63:c4:aa:90:35:d0:a5:36:c1:99:5d:69:f4:7a:18:47:
         ab:9d:a8:f7:b3:3a:bb:88:07:85:74:7a:d0:37:94:22:1c:00:
         22:d4:bf:66:98:47:df:ef:ea:3d:34:d8:c0:2e:ee:e4:21:f9:
         38:86:68:e0:cf:f4:51:75:3f:7b:8b:2e:55:cc:2a:2c:45:5e:
         9e:70:c1:ad:24:05:8a:d7:9f:8a:31:44:83:4b:1f:c7:cc:e0:
         10:46:32:8f:3a:ab:17:8c:71:f7:de:74:08:ea:7d:c1:28:14:
         04:36:11:0f:68:be:90:7f:52:16:a2:ae:e9:3b:fe:ec:a2:50:
         a0:69:6d:6f:4a:c4:5f:f2:5e:17:e0:98:5f:6b:16:44:d0:4d:
         59:4d:97:1e:73:0b:1e:9a:31:77:57:e8:ec:4c:cb:b6:73:cc:
         e1:8d:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----