Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          GQMaDLGFJvETcl4to79ME0NFk4HEteNk+aTYhOxPXL4=
Subject key identifier:   B0:49:F4:6E:E2:7A:38:37:B9:F4:6D:A1:29:F8:CB:03:69:48:70:76
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       04FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          04FA
Signing time:             Sun 04 Oct 2026 03:24:49 +0000
Manifest this update:     Sun 04 Oct 2026 03:24:48 +0000
Manifest next update:     Tue 06 Oct 2026 03:24:48 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: Ir+6XPCTcY3GUiySsbli4b1z47BHRApp6WM7Jo79yuY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 03:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: Oct  4 03:24:48 2026 GMT
            Not After : Oct  6 03:24:48 2026 GMT
        Subject: CN=6ac1c701-42cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:9e:a0:57:30:55:fa:6d:22:55:6d:80:c2:
                    79:9d:74:9c:0f:dd:50:3b:9d:c5:c4:aa:74:88:70:
                    b6:36:91:d4:29:b7:a5:46:ab:2d:88:62:0f:5a:a8:
                    1f:77:47:33:b5:ed:c6:cf:f2:86:a7:2d:65:eb:53:
                    bc:08:e4:c1:59:d9:1d:99:32:77:ed:4e:db:43:b4:
                    3d:e7:b9:ee:f0:d1:28:21:0f:5c:ad:e8:d3:71:42:
                    0c:4f:8d:43:20:d4:b2:4d:67:50:c7:89:cc:7b:52:
                    25:cc:29:70:50:f8:78:cc:0b:52:b0:2c:65:2d:98:
                    aa:f7:de:13:e5:c4:4b:83:8b:d5:f6:3f:1f:d1:02:
                    58:10:9c:73:da:c5:bb:d3:78:4f:2f:72:d6:92:3f:
                    69:aa:56:56:41:37:6e:16:39:2b:ce:76:73:51:40:
                    66:87:57:4f:29:d9:d7:f6:bb:1d:1c:2c:6d:c3:9d:
                    84:7c:ee:22:79:27:78:be:a4:7f:f6:b4:49:f6:ce:
                    f1:eb:c8:c6:d5:9f:db:ea:db:16:e2:10:5b:c6:e3:
                    40:d6:10:b0:d9:35:e1:46:48:a8:6e:2b:60:a0:cf:
                    15:e8:96:bc:15:c8:25:0f:81:a9:d8:74:ec:27:15:
                    9d:6b:54:0c:24:6a:5a:12:17:c3:c5:23:04:1b:97:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:F4:6E:E2:7A:38:37:B9:F4:6D:A1:29:F8:CB:03:69:48:70:76
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:12:c5:0d:79:fd:fd:61:20:12:58:71:8c:e8:03:59:00:38:
         ea:53:52:a3:42:07:58:5a:46:db:f6:af:74:a6:74:36:16:0c:
         d0:2c:5b:c9:13:6e:b5:26:2f:3a:f1:ce:54:ff:7c:03:7c:c6:
         b7:9c:bc:e1:69:fe:d2:23:89:d5:6e:5e:58:ae:ef:c9:82:7b:
         03:30:fd:f5:5f:f2:0a:aa:bc:b4:fa:74:ea:03:12:fa:23:70:
         2e:e8:6f:fd:3e:cf:85:dd:2f:65:60:9d:e5:c2:92:75:63:29:
         54:c5:f2:cf:22:9d:6b:5e:37:25:76:1b:9d:46:a4:4a:86:6e:
         a9:ed:0c:a5:08:50:14:79:5b:86:16:b9:ff:03:8a:2f:72:77:
         27:ee:1f:2c:c3:d4:a1:24:05:6d:be:40:16:7f:15:60:1c:27:
         50:bd:92:4c:57:1c:72:92:4d:7a:4c:d0:c7:e6:e2:19:1d:37:
         d6:1f:b1:61:45:17:1d:4c:e5:ee:22:6d:f9:b1:1e:7a:dd:af:
         42:6a:18:d0:2d:e1:87:81:ca:4f:28:48:de:dc:b4:f3:e5:e6:
         36:17:35:ed:dc:c8:e5:5b:53:31:7e:00:7f:10:29:d6:91:41:
         f0:ad:d5:b1:a0:28:04:88:59:6d:98:23:2f:e6:14:5c:f1:3f:
         b2:2b:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----