Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          Boy5tX6d4j0hBzm+wWfafaP5T1AO1p3SJyGN2JwIXfo=
Subject key identifier:   FE:A6:49:E9:76:69:BD:2E:52:B6:9C:0A:F0:64:72:92:ED:56:F7:3A
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       0947
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          0947
Signing time:             Tue 22 Sep 2026 01:48:51 +0000
Manifest this update:     Tue 22 Sep 2026 01:48:50 +0000
Manifest next update:     Thu 24 Sep 2026 01:48:50 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: rmJUhJPGLFNJqJ2sSYkQFkDVFYO/85edPltGVFtmQX8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375 (0x947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Sep 22 01:48:50 2026 GMT
            Not After : Sep 24 01:48:50 2026 GMT
        Subject: CN=6ab1de83-442c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:03:7e:33:75:7d:50:2c:be:05:3e:a1:e2:
                    dd:fa:d5:63:a3:96:ec:d8:e1:60:30:8c:e1:c1:53:
                    71:c0:45:9b:49:dc:5c:a5:74:08:2a:07:0f:44:47:
                    59:7e:db:14:00:c9:b2:dc:a1:7e:17:57:57:d8:fc:
                    00:69:7d:8d:91:8b:69:f9:a0:f6:6e:9d:f6:d7:5f:
                    2f:d7:b6:9e:0a:38:36:d0:f2:5c:96:3d:e3:71:11:
                    33:ca:fe:09:ce:48:d6:af:0a:64:0c:d9:dc:93:2c:
                    8d:38:f3:47:5f:76:be:57:d5:06:96:d4:26:70:ef:
                    e2:85:ed:bf:74:07:ef:15:b8:99:08:94:c8:4a:a7:
                    ae:aa:e5:18:3f:cb:d0:a4:08:8e:25:15:4c:49:87:
                    3b:5e:58:4a:26:3f:01:01:c9:02:9d:46:dc:a4:33:
                    40:57:70:b7:21:29:07:4a:1e:98:dc:86:e9:06:88:
                    fa:8a:7f:d2:ec:44:c8:6a:f8:b3:51:3f:c2:ae:ba:
                    84:d3:39:b9:9b:a1:97:c8:7c:01:18:c5:76:b2:27:
                    6a:2c:be:05:a1:24:05:54:7c:4f:73:d8:24:6f:a5:
                    9d:0b:41:5d:a5:3a:2f:a7:0e:29:9f:75:b5:71:82:
                    67:c9:2f:5a:a2:20:5b:36:07:3c:06:be:ed:4a:ea:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A6:49:E9:76:69:BD:2E:52:B6:9C:0A:F0:64:72:92:ED:56:F7:3A
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2b:fd:d2:f0:74:86:b2:e2:ab:41:09:84:e8:64:31:0f:40:
         bb:97:75:0e:7d:b1:d4:a8:64:8c:a8:6d:7c:1b:be:73:4c:13:
         bb:cb:a5:f5:ef:56:a1:82:8c:58:30:6e:62:dc:7b:b6:df:4d:
         74:62:02:aa:e2:e8:69:e7:ae:ff:3c:a1:11:ce:c7:37:cf:2e:
         96:66:d7:59:d6:3b:80:d2:0d:54:7d:79:e4:9b:1d:59:cf:d9:
         62:38:23:0d:d6:7c:f5:8f:64:d3:c1:ec:50:69:42:25:a5:29:
         40:cc:e9:f5:01:08:0e:b2:b6:49:e0:3a:46:0b:37:43:8c:b9:
         e5:5c:3a:f8:d2:c3:3e:82:a8:77:b3:6f:6b:8e:e9:d6:a5:39:
         8c:99:55:15:11:f2:25:bb:91:5c:60:b6:62:ec:d4:6c:71:a8:
         b3:b3:5a:26:a6:17:8d:03:6e:54:e1:d0:83:bf:43:6f:49:12:
         ba:1e:14:d7:5c:97:77:aa:8d:ba:47:91:dc:64:aa:d3:a2:91:
         bd:3a:18:3e:dd:a8:a1:ee:54:44:6e:be:74:c2:ab:44:30:b6:
         59:91:82:f4:52:32:44:4a:de:c8:64:95:a9:88:8a:5e:08:d0:
         3e:25:ad:98:75:5f:35:50:27:2a:d9:ca:e8:90:3c:7e:6b:e6:
         75:43:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----