Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File:                     vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier:          IqEKZMtvm4+YNiqOj1VrQxSA2YrJFq4wnsXVQyffd8E=
Subject key identifier:   F5:6B:A1:05:2A:6B:E5:64:9A:41:9F:0A:47:9B:6C:08:13:1F:78:13
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer:       /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial:       0450
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number:          0449
Signing time:             Thu 24 Sep 2026 03:47:26 +0000
Manifest this update:     Thu 24 Sep 2026 03:47:26 +0000
Manifest next update:     Sat 26 Sep 2026 03:47:26 +0000
Files and hashes:         1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: l7LeZVy1NZJUHQydzUG777OJb+ePqn9Ci49QOwAomFM=)
                          2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
                          3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
                          4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
                          5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
                          6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCA07AF, serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
        Validity
            Not Before: Sep 24 03:47:26 2026 GMT
            Not After : Sep 26 03:47:26 2026 GMT
        Subject: CN=6ab49d4e-9331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:0c:cd:bb:74:51:e8:03:10:78:57:47:02:
                    aa:b2:0f:dd:c3:22:4d:d6:e1:c1:53:2e:d4:07:40:
                    c3:1d:c4:00:73:8b:4f:8e:ec:35:4f:a8:6d:1c:59:
                    7b:6d:07:5b:49:8b:74:7b:13:d0:73:4a:10:95:a4:
                    5e:a1:57:27:70:e0:2f:50:a6:b6:63:34:d5:6b:ec:
                    93:ca:23:8e:4a:c5:13:05:ba:32:ed:86:76:ef:d5:
                    1c:12:46:6a:e9:7c:b3:54:92:f5:79:4e:50:83:9a:
                    dc:aa:f2:9a:90:64:73:7f:ff:55:e8:f3:13:a0:b4:
                    af:a7:e5:8c:94:96:db:e9:78:24:b5:21:d4:99:28:
                    ef:82:8a:a6:4d:ac:a4:f1:a8:9a:a1:c8:6d:b0:db:
                    20:e7:2e:ab:90:8c:ee:f1:bd:6c:18:a0:6f:d7:21:
                    c6:76:ba:cf:08:ae:23:50:0b:b3:56:a8:2d:58:a3:
                    5c:26:ba:d7:34:6e:14:7e:64:84:51:30:69:5b:ba:
                    e6:84:8f:bc:27:3b:6a:ca:94:4f:16:3d:68:20:5e:
                    09:0d:a0:e7:e4:f7:c5:72:58:50:91:3e:14:d1:8f:
                    30:ec:54:4b:b4:b3:fb:52:64:9a:c5:37:6a:dc:b4:
                    73:55:3d:ee:01:79:5f:34:9e:26:47:78:e9:70:2f:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6B:A1:05:2A:6B:E5:64:9A:41:9F:0A:47:9B:6C:08:13:1F:78:13
            X509v3 Authority Key Identifier:
                keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ef:2b:92:0a:1b:86:ea:0f:3e:19:f2:d4:86:68:9b:ed:91:
         da:da:51:76:84:c0:99:1b:c8:d4:78:7a:18:5e:91:9e:79:c1:
         f6:08:78:7d:e0:0a:d6:a3:f1:92:33:0a:aa:85:cc:73:21:2d:
         43:c8:38:47:62:fb:92:a8:21:bc:f3:43:e3:d2:5e:d0:77:dc:
         bd:f7:f9:a9:da:4f:b8:e9:54:29:81:65:4f:1d:52:7d:ac:11:
         73:2b:3f:9d:11:ee:ce:7e:23:b6:c0:f2:e8:61:30:6c:83:19:
         00:e0:f0:5f:5e:d3:a0:00:da:63:52:0a:60:4b:06:ea:68:80:
         83:e8:c0:83:c3:0f:62:66:b3:eb:a8:09:0a:4a:e4:57:59:cd:
         71:6b:93:cb:e7:43:e5:71:32:a2:3b:e2:0d:a7:9f:b2:7f:82:
         1e:2c:f5:b3:2e:5e:55:e3:8f:8d:72:73:de:0e:a5:cb:52:7f:
         fe:ff:07:c7:dd:61:83:ad:29:4f:31:b2:a4:06:75:b0:40:32:
         c8:74:82:46:c9:a0:96:65:c0:98:09:d9:c3:5a:45:65:01:77:
         54:ad:3b:a1:e7:ee:50:05:6c:f3:f9:cb:6a:84:9d:31:a5:35:
         c8:3d:24:5f:0d:ed:db:20:bb:c0:db:63:f9:94:b1:25:6f:07:
         b0:45:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----