Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          mJjwQYHB8CNNttos8nwMpJfCvLS/oHWuhPfL4nJQxhQ=
Subject key identifier:   24:2F:78:61:33:D8:57:69:0F:D1:54:73:B0:F8:18:14:13:63:EB:26
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       03C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          03C1
Signing time:             Tue 22 Sep 2026 04:02:20 +0000
Manifest this update:     Tue 22 Sep 2026 04:02:19 +0000
Manifest next update:     Thu 24 Sep 2026 04:02:19 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: unpqxwxeJNDmLeWseQqLEneBHOEl7JB5KuGuuY/VcKc=)
                          2: 698B22BAB0E011F098883C87DAE4EC9C.roa (hash: 5UZtU7DBbaKMgey3XqLzKXM826/jRqDSRDPI7cDwmOY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Sep 22 04:02:19 2026 GMT
            Not After : Sep 24 04:02:19 2026 GMT
        Subject: CN=6ab1fdcc-1f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:28:c8:7c:2e:b8:63:2c:03:64:73:b8:65:
                    7f:b5:1c:49:d6:02:c9:26:2b:66:d3:3b:83:7a:c6:
                    fd:6c:5a:fb:1b:53:e0:f8:71:9e:7d:ee:f3:72:21:
                    e5:9c:f7:77:34:b0:8e:03:ce:33:2d:c4:5f:59:6f:
                    71:e5:fc:09:96:ec:bf:9e:09:24:01:9b:20:7d:20:
                    1e:8d:85:1b:f0:3c:65:c7:b4:ba:ff:d1:a4:6b:9f:
                    dd:5c:85:ff:37:5b:d0:fb:ca:5d:43:b2:04:e2:4a:
                    28:97:b5:b3:20:04:29:c8:29:1d:ce:b3:d6:44:a1:
                    40:cc:7e:0f:4b:0a:ef:99:68:15:b6:56:79:81:ed:
                    83:cc:23:21:ce:79:f9:ca:b6:e5:6b:cd:e0:32:fd:
                    37:27:59:a8:84:46:69:37:3e:66:42:2e:ee:4f:33:
                    c9:05:f3:fb:5b:ce:c4:ca:b6:8d:e0:e4:e1:b5:c0:
                    80:25:3a:bb:ed:59:5e:3d:27:9c:a5:9e:a3:31:fa:
                    55:83:7b:7f:90:51:dc:80:5a:6e:e8:fd:66:65:24:
                    4a:eb:af:10:88:2e:fb:3d:c4:59:dd:37:49:5f:e5:
                    b3:26:c0:db:24:a9:9f:70:4b:57:c4:42:61:47:fd:
                    0a:90:0c:ad:0a:d0:91:72:df:57:68:e5:08:39:18:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2F:78:61:33:D8:57:69:0F:D1:54:73:B0:F8:18:14:13:63:EB:26
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:8e:74:a0:3e:09:56:15:c5:12:cc:e6:7e:e5:1b:2a:c5:
         f1:37:99:2b:56:3a:fc:9f:16:dd:69:64:3f:93:b5:22:dc:19:
         d6:c7:c8:e5:22:1c:7f:dd:25:46:7e:cf:9e:8a:4f:73:50:1b:
         7a:df:c8:ea:1e:71:e4:dd:f7:74:36:15:5e:3c:84:0e:b3:c6:
         14:ea:72:ae:49:1d:c9:6b:35:6a:bc:ca:53:fe:9b:2c:b3:06:
         f6:22:e4:38:29:ba:86:76:3d:f1:72:4e:ce:d0:5b:90:75:68:
         ad:24:71:74:8d:fb:ee:ec:ea:71:77:21:56:ed:d1:49:52:9e:
         01:20:75:fe:d8:64:be:9d:ef:32:45:ed:e3:2d:29:e9:6b:81:
         f2:f4:ec:92:51:30:41:fa:c3:f3:55:73:f5:da:53:d9:fe:3e:
         30:9f:64:bb:19:83:2c:b7:74:ee:0c:47:56:d2:e1:9c:35:f6:
         f6:eb:c2:17:18:3c:a0:f0:f1:c9:5e:f4:e4:4c:cc:7a:f3:72:
         d7:e4:1b:d0:de:8a:fa:f2:34:6b:f4:73:dd:0f:8e:ad:70:bc:
         de:85:04:d3:3e:6a:b8:4a:06:80:56:db:c3:30:34:86:ac:43:
         4f:91:b4:9d:47:72:09:3d:9b:f7:aa:dd:2e:47:49:41:cd:6f:
         93:91:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----