Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
File:                     -HlTHl-cqfSLcTODpQCBDVDy0kQ.mft (raw, json)
Hash identifier:          oU14wyNvIilfzidKLTJblCbN6qLGVGLjF6T/Sk/oA4Y=
Subject key identifier:   2F:15:44:92:61:67:70:27:B0:FF:6C:7D:74:4B:76:9B:42:D8:3D:84
Authority key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
Certificate issuer:       /CN=F361950AAF/serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Certificate serial:       01DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
Manifest number:          01DB
Signing time:             Mon 21 Sep 2026 04:55:07 +0000
Manifest this update:     Mon 21 Sep 2026 04:55:07 +0000
Manifest next update:     Wed 23 Sep 2026 04:55:07 +0000
Files and hashes:         1: -HlTHl-cqfSLcTODpQCBDVDy0kQ.crl (hash: pvBz0Gp00El0ZNCahtF/EBZdnDInlcgQ1T3Y0jRGVvQ=)
                          2: 7B6F3054478411F0B371B7DADAE4EC9C.roa (hash: w5E8JBOJdrFnCHufU8YUVNcTyXQmMdg4vF0OTc1n9B4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
        Validity
            Not Before: Sep 21 04:55:07 2026 GMT
            Not After : Sep 23 04:55:07 2026 GMT
        Subject: CN=6ab0b8ab-0707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:57:6b:65:2a:56:20:68:9b:7e:c9:8b:a6:
                    a0:53:89:85:f0:63:d1:21:ca:a5:88:bf:c1:d4:9e:
                    b8:07:eb:9f:1b:3d:2a:1b:26:08:98:da:05:18:c5:
                    85:d7:f6:ed:24:83:8f:a6:c1:19:5d:f3:d9:7a:9c:
                    82:c2:1f:fb:c3:29:ff:9e:2c:83:55:59:c7:2b:76:
                    51:90:42:b7:ce:ef:1a:19:eb:b8:bb:e3:65:b5:9d:
                    93:bc:69:7e:95:17:ef:14:d6:ad:e9:ab:18:82:c5:
                    b8:f3:6c:bf:44:60:16:8a:0c:d1:5f:d8:79:95:78:
                    65:d8:ae:bf:a9:a5:ce:9e:ff:73:4a:74:f8:05:10:
                    0f:92:a2:fb:90:29:62:04:ce:8d:8d:7f:0b:02:fb:
                    72:ac:df:50:2f:f5:61:1a:a9:23:d0:f6:e2:90:1a:
                    0c:b0:b9:c1:68:c4:01:45:5e:d1:c9:e0:d9:e6:24:
                    c0:8f:42:96:9d:ec:15:de:f1:eb:fc:0a:c8:7e:30:
                    39:6e:c7:55:60:1c:c0:81:06:54:5c:9b:e6:b9:e4:
                    97:81:80:28:31:5b:7b:b3:dc:c1:5c:44:e1:4e:f7:
                    c3:ba:b6:1f:4c:af:c6:22:ea:36:0c:26:06:81:f0:
                    69:e0:d8:cb:f0:b4:00:17:72:20:eb:bf:ef:dd:bf:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:15:44:92:61:67:70:27:B0:FF:6C:7D:74:4B:76:9B:42:D8:3D:84
            X509v3 Authority Key Identifier:
                keyid:F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:9a:06:24:ce:19:95:02:a5:b4:1e:33:09:a1:1b:ab:36:
         e0:de:fd:38:ed:95:68:6e:09:a0:5a:88:20:e7:ed:3c:48:28:
         ba:16:1c:84:a4:0e:f1:97:9f:02:05:e1:bc:26:9d:39:63:a0:
         df:f5:8a:8f:ed:b8:5b:84:be:c6:ea:85:5a:92:6b:15:d0:13:
         f7:75:8f:45:49:3f:7b:70:9c:bc:32:5b:00:4a:d8:15:5c:56:
         33:45:a1:af:be:e7:6b:fe:cf:3b:4f:25:ae:70:ac:46:ae:9c:
         04:76:98:c6:69:d4:da:dd:e1:26:03:97:11:9c:35:39:80:23:
         8c:e7:02:b8:c8:1c:12:e4:3f:43:d0:6f:a2:04:c0:81:09:50:
         e9:47:b8:aa:6b:24:2c:2b:b3:87:1b:1b:d0:e9:4c:17:4d:24:
         cd:8d:2f:5d:a2:23:9b:b4:e5:8b:eb:88:d0:52:83:9e:fd:ea:
         7a:d7:b0:29:ed:4e:7c:33:59:06:bb:f1:ca:7c:75:f6:ea:2c:
         1d:9e:39:db:48:bf:76:bb:59:1a:e2:e2:e7:36:5a:26:de:36:
         4f:51:a5:a3:16:d4:e9:0f:d5:50:2b:95:ea:c9:a8:54:1c:73:
         1c:d4:03:c9:2e:50:31:66:f2:21:b5:81:f7:01:39:3a:81:86:
         4a:eb:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----