Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
File:                     U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json)
Hash identifier:          H7ihlkEYIYmlI4j3G/dc6HaqrZ3minJ99pLkgtgo39s=
Subject key identifier:   8F:4A:BE:45:DD:94:7F:44:59:98:D7:8A:6A:F1:F7:1C:14:75:A3:5E
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Certificate issuer:       /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial:       0443
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
Manifest number:          043E
Signing time:             Tue 22 Sep 2026 03:47:10 +0000
Manifest this update:     Tue 22 Sep 2026 03:47:09 +0000
Manifest next update:     Thu 24 Sep 2026 03:47:09 +0000
Files and hashes:         1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: j1U0c3TwjUooypGOXPqhFKuhP1LDs3qyyHt1s0tBDaI=)
                          2: DBC979D8CFB411F0BD144F9CDAE4EC9C.roa (hash: 4zbQGzXYjWG9pUVTMR7RzWQtxqPrQhTqI/M5Rc7TchA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
        Validity
            Not Before: Sep 22 03:47:09 2026 GMT
            Not After : Sep 24 03:47:09 2026 GMT
        Subject: CN=6ab1fa3e-0418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:cb:fa:b5:54:5b:08:16:f7:d1:6e:8c:f4:
                    dc:bf:93:53:a4:fb:aa:5a:7d:fb:bf:3b:97:19:d4:
                    d9:4b:b0:b4:c0:32:18:4c:0e:a7:f4:a7:2e:cf:6e:
                    3e:db:38:c9:51:36:0e:e4:87:55:1e:22:72:f0:8d:
                    f2:45:c6:ea:ac:70:76:72:6b:80:b6:cc:49:9f:63:
                    2c:72:f0:9a:2f:cd:9e:f6:6e:f3:87:16:1c:6b:a8:
                    33:b6:72:17:13:2b:87:20:5a:eb:50:cf:44:66:dc:
                    17:e4:98:b7:7f:c6:41:e5:93:9f:81:c2:57:ed:db:
                    15:13:93:6b:cf:d5:bd:00:12:41:4b:b6:65:f2:bd:
                    06:0b:ec:f7:c8:5e:49:b2:3e:77:95:69:01:ec:6b:
                    71:29:82:ce:1e:ab:c5:6e:5b:cd:72:3e:0d:24:08:
                    1b:84:43:c4:1b:d7:cc:42:99:21:6f:9a:52:df:4f:
                    8d:f2:70:f3:c3:ca:ab:9c:3b:ad:58:eb:68:50:b3:
                    33:b8:79:cb:69:bb:74:da:08:88:be:f9:b7:61:d4:
                    8a:59:02:e7:b8:ff:44:92:78:75:37:a0:15:b7:be:
                    5e:7c:77:0f:37:0e:ff:d5:48:0b:7d:a6:5c:6f:61:
                    a2:97:92:d2:48:d7:00:11:b8:cd:24:d5:27:32:37:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:BE:45:DD:94:7F:44:59:98:D7:8A:6A:F1:F7:1C:14:75:A3:5E
            X509v3 Authority Key Identifier:
                keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:be:fc:46:36:9b:d6:41:6e:14:4d:ed:39:81:79:c7:05:ee:
         c4:0e:b4:e3:10:56:49:d1:41:2e:11:f1:9c:d5:85:bd:ac:d1:
         c0:e9:f7:10:7d:7b:a2:01:ae:fc:16:d6:fb:de:23:4f:31:db:
         b3:88:12:b8:86:bf:86:86:0e:d4:61:97:7e:45:32:03:2c:29:
         b9:30:9a:df:67:b8:5a:48:1f:9f:d0:b9:fe:3a:46:73:6d:3c:
         bc:78:74:f6:b4:f3:98:71:40:f9:03:51:30:e3:66:e2:0b:a1:
         f4:a8:65:09:69:8f:b4:ad:cd:11:0d:20:cf:42:34:82:9c:95:
         8e:4d:5b:6c:91:11:27:16:85:d1:ae:4b:4e:1e:b3:b3:8e:a0:
         b7:ff:ef:9c:27:81:e4:56:b3:95:7a:ec:bc:ff:94:e4:dc:b5:
         ff:1d:b9:aa:70:c6:76:0e:33:f9:39:85:50:2e:4d:bd:fa:79:
         b5:79:65:47:11:c7:ca:93:c2:23:5d:89:c5:83:7c:72:e2:5e:
         ba:d9:2f:00:17:0b:13:83:60:7f:4a:ce:72:4e:3d:08:37:06:
         59:ea:2c:06:cf:c4:86:47:30:1b:12:cb:3b:d9:64:d0:e3:71:
         b6:05:10:03:3e:86:ff:99:80:e3:ea:9e:28:3e:b8:fd:cd:2a:
         f1:c0:b7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----