Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
File:                     v1plQpwwfXk7DXBa2V_P60lCIWo.mft (raw, json)
Hash identifier:          gHcv1zPJzX5m+deFautn8x4tR2CNpfKyIHtYKdah/Y8=
Subject key identifier:   2A:7E:EC:48:12:37:25:4F:D3:99:54:77:0D:0A:7D:E5:03:47:FA:CC
Authority key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Certificate issuer:       /CN=F3619CE0AF/serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
Certificate serial:       02A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
Manifest number:          02A3
Signing time:             Mon 21 Sep 2026 04:39:27 +0000
Manifest this update:     Mon 21 Sep 2026 04:39:26 +0000
Manifest next update:     Wed 23 Sep 2026 04:39:26 +0000
Files and hashes:         1: v1plQpwwfXk7DXBa2V_P60lCIWo.crl (hash: 6mYv/wBUyqn7dVIhJfyAcWrhveLQ9Htvj6fQv8q/cR4=)
                          2: 3995E772B22911EF8FFA5C88762E951A.roa (hash: q5GdnXuThvMc7lFNIre+h57AswQCqM5v2uH6+3ENceQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619CE0AF, serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
        Validity
            Not Before: Sep 21 04:39:26 2026 GMT
            Not After : Sep 23 04:39:26 2026 GMT
        Subject: CN=6ab0b4ff-0fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:d6:3b:06:85:9d:61:ed:50:88:8e:95:a4:
                    6b:de:9d:77:71:4a:88:bc:9f:5d:f6:df:02:a9:81:
                    d9:3e:65:99:aa:9a:08:8d:b7:78:e6:5f:63:e3:d7:
                    4c:13:1e:eb:87:dc:5c:47:84:b2:3e:91:98:1e:9a:
                    87:31:80:f2:7a:7c:e5:1a:a3:08:06:8d:43:35:69:
                    c0:df:40:c5:c6:fb:a6:c1:6f:e2:c5:f9:df:c5:16:
                    29:03:1b:c2:c1:f9:2f:c9:7d:df:94:68:47:c5:84:
                    97:a0:16:5e:68:12:e3:c9:b9:b7:73:fc:f9:66:38:
                    1d:eb:c1:21:a3:0e:77:3c:02:df:27:49:72:36:cc:
                    43:27:49:98:4a:78:19:cb:ec:c0:c5:fd:5f:0b:db:
                    17:59:36:6e:7f:14:99:0d:58:09:c0:90:77:b3:de:
                    fc:4f:bc:0a:4a:92:f9:c2:e7:25:33:94:cc:10:13:
                    f1:86:4c:b3:6a:49:db:ef:b6:9a:e4:17:25:2f:b1:
                    47:15:6a:db:e4:4d:41:96:b7:32:54:48:bd:79:6e:
                    38:48:ac:09:e3:3f:d0:34:15:e6:1c:ef:cf:32:8b:
                    f3:a5:48:6b:7a:65:7d:29:96:a7:c4:66:8d:db:40:
                    c1:63:b2:82:5f:b3:af:d0:62:27:9d:88:e4:05:c4:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:EC:48:12:37:25:4F:D3:99:54:77:0D:0A:7D:E5:03:47:FA:CC
            X509v3 Authority Key Identifier:
                keyid:BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:cc:ed:0a:ab:bd:47:b4:b5:c6:fd:49:07:13:8e:75:11:
         c4:cc:7f:2b:37:3b:c2:74:4e:a2:a3:af:0a:fe:b4:ae:41:59:
         c5:46:b7:10:02:3b:c2:77:1c:34:bf:8a:99:a3:4f:3f:cc:7a:
         29:22:8a:5a:e8:9a:58:07:61:c3:56:ac:e5:bd:07:7f:7b:de:
         68:9e:61:de:0c:6f:32:c4:98:a7:50:a2:3f:60:65:a5:56:da:
         68:76:37:dd:11:8f:e3:af:67:9c:2c:c1:b3:8c:27:af:73:06:
         ef:e1:2a:58:41:f3:f1:3e:e8:aa:f3:cb:be:fa:92:9a:3b:d3:
         34:10:fa:7e:96:15:9b:96:da:5d:7a:ee:30:9c:c2:c1:72:75:
         3f:8e:d8:f0:62:d9:57:ed:6f:78:4a:a8:61:39:8e:e6:67:03:
         7c:41:5d:d6:b9:47:9e:22:ac:51:96:53:3f:19:26:fe:92:a0:
         7b:48:c0:94:40:f7:97:a0:b4:7f:49:e0:6c:3d:ea:e1:8d:66:
         61:ab:cb:37:3c:b0:e7:8b:61:c4:f8:c7:43:7b:b6:8c:c5:9a:
         20:8b:c1:de:a4:07:0c:78:a2:1f:1d:4b:b5:dc:32:0f:db:e6:
         8b:a5:a0:99:a5:af:c6:84:06:b9:05:f2:0a:ad:25:95:0f:d7:
         dc:52:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----