Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
File:                     rMoLOe836hkY2RAi6kHS1ZNtJCY.mft (raw, json)
Hash identifier:          KMb7Nb1Pc0aMBi+XiGVAf4OQDPRowvtWwSusvJ5FpRQ=
Subject key identifier:   95:48:3F:58:EB:CB:18:88:75:2C:45:3A:9A:1D:A9:E1:56:2E:8F:FD
Authority key identifier: AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
Certificate issuer:       /CN=F361785AAF/serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Certificate serial:       02BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
Manifest number:          02BA
Signing time:             Sun 20 Sep 2026 04:37:47 +0000
Manifest this update:     Sun 20 Sep 2026 04:37:46 +0000
Manifest next update:     Tue 22 Sep 2026 04:37:46 +0000
Files and hashes:         1: rMoLOe836hkY2RAi6kHS1ZNtJCY.crl (hash: BMG4OoxO/Uhir3+eBC5cDRloTq4O+rtjB7/3/i45xVo=)
                          2: 0865A9A03F8011F09D9EB4C0DAE4EC9C.roa (hash: eAtT77xV4NEBf1cf+HT8ySye2iBWrSOl4kk6XxsESlo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 04:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361785AAF, serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
        Validity
            Not Before: Sep 20 04:37:46 2026 GMT
            Not After : Sep 22 04:37:46 2026 GMT
        Subject: CN=6aaf631b-e0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:a8:b7:8e:a9:c2:45:df:77:dd:21:0d:48:
                    3b:2f:b8:6b:b8:c2:64:11:79:47:c5:ca:ef:82:aa:
                    b5:a2:c3:c5:e3:44:5a:01:da:17:d8:b3:30:45:f0:
                    dd:6c:36:2b:6f:50:97:99:ae:fc:60:97:9a:54:44:
                    6e:a3:54:a0:7d:c5:65:d2:77:61:9a:d8:b7:d5:fb:
                    8f:92:56:ec:2b:54:c3:1c:d0:a5:c8:21:74:38:3b:
                    a6:e9:05:b9:72:df:34:e3:18:f3:52:2c:1c:a8:f7:
                    47:8a:88:1f:4a:c8:70:8b:d7:78:7d:ee:e9:e1:ef:
                    aa:9a:d7:c7:be:12:83:44:89:aa:6d:88:39:98:79:
                    f8:61:c8:b0:ff:be:b1:6d:ef:2d:d7:ce:f8:14:92:
                    57:98:44:7b:ff:5b:b3:54:05:37:00:d1:a0:09:96:
                    3e:3f:b2:23:85:cb:04:89:ea:e8:7f:7e:ac:d8:6a:
                    f3:d8:84:95:3d:af:2a:db:b4:c5:dc:78:0e:89:59:
                    b1:de:56:82:90:d4:71:ba:89:05:1d:81:fc:08:fe:
                    56:0f:ec:30:23:c8:5b:c5:3b:ab:58:6c:7a:d7:4c:
                    2a:a7:fd:3c:b5:d2:9f:3a:f0:95:24:e7:5e:ab:a1:
                    e6:a4:7f:25:9c:dc:39:48:42:12:a8:fb:64:ec:ad:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:3F:58:EB:CB:18:88:75:2C:45:3A:9A:1D:A9:E1:56:2E:8F:FD
            X509v3 Authority Key Identifier:
                keyid:AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:54:92:28:d6:f8:3c:ad:b9:56:e7:4c:a6:7b:92:ed:ff:
         b5:9e:fd:f3:38:fb:2e:13:96:b1:02:5c:68:0f:5f:39:41:7b:
         f7:d9:85:d8:f5:02:c9:3d:06:f7:92:58:1b:6a:6b:0e:77:08:
         66:1d:16:95:c6:75:ea:10:67:2e:4e:22:81:cd:f8:c4:61:c9:
         b5:01:5d:86:89:53:63:c9:f0:dd:a7:8d:5d:66:1d:5b:07:1d:
         d7:f3:1d:94:91:82:c3:e3:68:29:08:57:dd:02:47:93:9f:99:
         58:92:db:ff:78:82:c3:86:20:2d:ec:c9:c5:17:bc:b3:03:9c:
         be:e7:a3:c1:d6:34:c3:5e:ee:ed:8b:10:5d:11:db:51:c0:ee:
         9e:c0:17:43:68:ec:0b:2e:e0:76:ec:b3:cf:63:b3:18:a9:d0:
         08:1d:9e:e5:00:01:ff:53:51:1b:65:b1:64:2b:83:3c:de:d8:
         20:77:a0:55:ae:6b:17:2b:48:2d:61:3b:1f:13:8f:35:f8:91:
         66:98:bd:94:b4:13:b0:a2:de:0a:60:9f:0e:27:7c:38:e7:bb:
         e1:ed:61:86:a3:6b:cd:86:c0:b8:69:4f:82:a3:f8:dc:9e:90:
         5e:88:ed:1c:f7:2e:10:b8:f7:72:0f:b7:b0:e6:c6:00:f9:b0:
         85:1b:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----