Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File:                     3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier:          hAneodrxYtUOYvetaIycJRsL26E/pgGiKO6ZFJ2P1I8=
Subject key identifier:   01:AC:FD:70:DE:31:29:67:FA:14:D8:33:A1:8E:92:66:1F:3D:B4:F5
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       0779
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number:          0777
Signing time:             Sun 20 Sep 2026 02:20:03 +0000
Manifest this update:     Sun 20 Sep 2026 02:20:02 +0000
Manifest next update:     Tue 22 Sep 2026 02:20:02 +0000
Files and hashes:         1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: yIrwP6N4QCSJGrOdgjPnI0BXnVFxQD6QHYN+YUhVIeY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Sep 20 02:20:02 2026 GMT
            Not After : Sep 22 02:20:02 2026 GMT
        Subject: CN=6aaf42d3-1b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:d1:a0:30:e8:53:43:19:88:4c:ee:1d:4c:
                    39:42:bc:aa:75:0d:76:5b:0f:da:de:97:9c:d2:9d:
                    1f:a1:2b:ca:6c:06:62:e2:b4:80:a1:e6:84:23:70:
                    b4:40:46:9d:3d:f2:66:fe:e7:46:46:0f:7d:cc:7c:
                    9f:29:9b:3f:f1:4b:8d:8f:02:e4:23:50:b2:a7:71:
                    9f:32:ff:17:df:01:fd:a5:0f:5e:7c:ae:67:4a:ff:
                    59:11:85:51:fc:dc:9c:5a:2c:31:6d:b9:7d:18:d4:
                    cb:d3:21:6f:03:ed:23:c4:b2:60:c3:12:c9:c2:bb:
                    bb:2b:02:69:36:ad:3f:87:60:ef:bc:5a:63:a9:3d:
                    c3:f2:80:c6:e9:23:c4:4d:b2:1e:9c:7b:21:b8:c7:
                    1a:e4:cb:a4:86:28:47:f9:4e:df:ee:ea:16:66:40:
                    9b:b4:91:12:bd:58:85:ba:e7:6a:61:17:f2:7a:95:
                    6a:53:02:db:0f:21:89:bd:56:51:ba:d4:71:b4:e3:
                    09:0c:8f:ae:44:44:c0:5e:8e:bf:6a:7e:10:8b:f3:
                    07:0e:00:71:51:d4:6c:71:53:78:30:96:e9:7d:87:
                    fb:b6:d0:3b:80:54:15:19:d2:c7:6d:7c:2b:5a:98:
                    04:2b:ad:64:0e:12:4d:04:4b:3c:1c:92:f1:de:f2:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:FD:70:DE:31:29:67:FA:14:D8:33:A1:8E:92:66:1F:3D:B4:F5
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:cd:cf:9c:70:db:79:57:5f:24:f4:0a:d6:46:4a:18:73:
         32:06:0c:be:87:44:69:4a:1e:90:6d:82:0f:46:05:c2:b4:15:
         a0:bc:19:b1:18:fa:49:ec:2e:b4:fe:1f:f3:ab:52:ac:09:d5:
         50:b6:3c:fd:e1:34:ac:b9:65:5b:d4:60:c6:ae:9e:a2:25:be:
         06:f9:d4:51:fe:d9:1d:fa:4b:06:4f:c0:4c:f3:1f:aa:58:c3:
         f4:f3:59:47:ad:3e:00:ba:35:91:e3:cd:63:8c:e1:ad:bd:46:
         60:95:29:6e:52:8e:15:3d:32:f1:f3:9a:9c:77:ad:a6:97:6f:
         09:10:1e:12:ec:a3:55:3e:67:ba:02:1f:01:d6:6e:3d:75:db:
         17:63:06:86:1b:3b:1c:21:af:b3:97:29:0b:42:46:90:80:69:
         ef:e6:33:25:9a:ad:4a:69:d4:47:0e:40:10:1b:e3:76:74:12:
         36:8c:6f:27:2c:27:70:7c:4e:82:5d:7b:ef:13:72:cb:fd:47:
         58:40:be:a3:96:3b:bc:01:35:9b:5c:1b:50:4d:44:6d:bc:e0:
         63:12:ee:3f:52:77:12:57:2f:38:ac:0d:f3:45:8f:48:6f:76:
         f7:ce:f4:de:9f:65:2a:c3:58:54:f4:00:4f:cf:5b:cb:19:2a:
         4f:96:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----