Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
File:                     TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft (raw, json)
Hash identifier:          yo4QC5T79UVXaZErOcJ0+fbXzu7RiW7+x5hI+1dsXvA=
Subject key identifier:   31:F1:36:59:AB:A4:4E:56:3B:AC:E1:F5:0A:35:8E:0C:24:07:93:B3
Authority key identifier: 4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
Certificate issuer:       /CN=F3611B04AF/serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Certificate serial:       01ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
Manifest number:          01EC
Signing time:             Sat 26 Sep 2026 04:54:27 +0000
Manifest this update:     Sat 26 Sep 2026 04:54:26 +0000
Manifest next update:     Mon 28 Sep 2026 04:54:26 +0000
Files and hashes:         1: TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl (hash: yVozas68nV0Gucl3l5Rj+w6WZKPJzIm+yA8HKOwuZx8=)
                          2: D4D84B9E3D5211F08FF5E995DAE4EC9C.roa (hash: /d1iMp/ZT/BMLsfn6Ybe9u0ARPnAxFGfjCR2WymN//o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611B04AF, serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
        Validity
            Not Before: Sep 26 04:54:26 2026 GMT
            Not After : Sep 28 04:54:26 2026 GMT
        Subject: CN=6ab75003-070c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:1c:cf:6c:31:1b:32:c9:bf:86:d3:3d:b7:
                    85:37:19:ad:78:fe:dd:ba:5c:a4:c4:bb:fe:4e:32:
                    2d:a5:e9:b0:3c:d9:90:64:a6:ab:09:24:52:ea:f6:
                    09:40:4c:2a:ac:d2:95:ac:f7:78:b1:1b:79:3b:03:
                    4e:02:22:af:a8:94:10:40:82:61:92:95:ac:40:36:
                    61:46:12:52:47:90:e7:60:4b:bd:0b:fb:cc:b7:42:
                    86:10:92:9a:d8:e3:d5:77:2f:0d:ee:71:f1:77:a3:
                    e3:b8:e3:24:0b:1b:57:9e:df:f9:df:28:96:05:4a:
                    d9:bb:83:6b:5d:a8:a6:61:46:de:2f:ed:d9:99:64:
                    bf:cb:23:6c:78:3e:f4:80:a1:ae:85:00:96:76:e9:
                    b2:2f:87:39:a3:79:89:cd:70:6a:11:0e:52:98:58:
                    eb:1a:e6:81:e6:5a:64:54:07:28:c7:60:99:b2:9d:
                    78:d0:88:f8:4d:e6:ff:2b:4e:73:e8:de:2a:fa:71:
                    6d:10:4c:b3:39:86:77:fb:18:85:6b:0d:6b:15:bf:
                    da:83:38:d9:b0:32:30:91:3d:e6:72:33:a7:17:ce:
                    b7:d9:d9:41:cb:c5:78:78:f9:6f:2a:39:bc:1d:dd:
                    80:ae:50:7b:2d:1c:8e:83:f8:f3:bc:4c:27:9d:72:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:36:59:AB:A4:4E:56:3B:AC:E1:F5:0A:35:8E:0C:24:07:93:B3
            X509v3 Authority Key Identifier:
                keyid:4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:74:3c:dd:0d:09:7e:78:1d:0a:67:fd:03:9e:a4:1f:70:6c:
         75:c3:b5:0d:c1:60:68:e4:0e:92:79:8a:50:4f:1b:4c:a3:d1:
         02:5f:01:91:2b:82:b6:74:d5:b3:e4:14:b0:10:ce:18:81:75:
         6a:40:48:90:59:5f:90:39:c0:ec:ea:9f:ff:58:23:f1:3b:fa:
         dd:0c:2f:6f:90:d4:f2:87:34:1d:88:22:dc:13:5b:a2:57:bd:
         55:85:2e:7e:86:0b:00:72:73:35:a4:90:3d:e0:af:18:0b:ae:
         8c:fe:40:07:01:8b:45:c7:aa:0a:82:bf:5e:8c:00:5a:ce:cf:
         78:f8:1d:42:cb:59:8c:ec:d3:d1:1f:b3:d1:9e:f1:2b:51:6c:
         77:c1:1f:ff:c3:a1:da:19:72:82:2d:0a:db:d0:e7:51:9c:21:
         f8:3f:b8:95:9c:fc:c2:75:1c:ce:c8:16:6e:0b:f6:00:c4:87:
         0a:ca:a1:f7:2a:49:34:d2:9f:ad:ff:17:7d:a3:dc:7b:f2:bc:
         34:82:04:5a:62:a9:80:b1:4b:ed:70:75:38:fb:d9:c0:4c:2f:
         14:cc:c0:05:3a:30:da:b5:97:5a:68:54:bf:70:4d:ab:a3:84:
         6f:ca:9b:dd:af:66:25:cf:72:40:48:87:8a:81:fb:b4:bf:47:
         8b:ee:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----