Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
File:                     QabtdYD_4RTJIrivEHMnCV4AVbo.mft (raw, json)
Hash identifier:          agwOnIBfSPSTAwARH7E/g78b3CujYurvsKDUcAiH5tA=
Subject key identifier:   D6:0F:D7:97:A1:19:E4:8E:87:55:3A:46:AB:2F:87:D6:C2:81:3D:AC
Authority key identifier: 41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
Certificate issuer:       /CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Certificate serial:       074F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
Manifest number:          074C
Signing time:             Tue 22 Sep 2026 02:25:45 +0000
Manifest this update:     Tue 22 Sep 2026 02:25:44 +0000
Manifest next update:     Thu 24 Sep 2026 02:25:44 +0000
Files and hashes:         1: QabtdYD_4RTJIrivEHMnCV4AVbo.crl (hash: +emIgNQOHgQ6w650UiekhliXB0B3m21wDuyqxYNhuQ4=)
                          2: 8961C8808CF111F18A83BEECCE1D38B0.roa (hash: QljAnFSb/QBMhFaqF0/T5YKBD3OTqbRzJH5A+zTfq1g=)
                          3: B904AFAE405211F0AECBAA98DAE4EC9C.roa (hash: EPkgdYP45sUjC5MQQ8eIhXPc3ynifHxMQiyi4EpsgAM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633204AF, serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
        Validity
            Not Before: Sep 22 02:25:44 2026 GMT
            Not After : Sep 24 02:25:44 2026 GMT
        Subject: CN=6ab1e729-14c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:09:8b:75:9d:da:75:57:61:6a:27:a4:31:
                    02:42:bb:e6:9b:eb:6d:06:1a:fa:bf:39:38:d9:2b:
                    d5:c8:ed:b3:c5:b6:6a:53:0e:f2:e7:4a:98:94:8d:
                    43:40:fa:cf:5a:60:96:e4:73:b6:45:8b:eb:3e:60:
                    8f:fb:ff:7a:1c:92:ce:7a:12:6b:b3:fd:d4:ac:83:
                    d0:98:47:ef:19:2c:00:da:50:85:cb:b3:8b:e1:9c:
                    f4:8a:2a:2d:6c:06:b2:9c:7a:72:dd:76:c3:14:d6:
                    96:e4:f9:55:cf:05:e0:50:ea:b5:ad:a6:9f:e1:dc:
                    78:70:0f:5e:28:11:2a:2d:3a:8d:49:b4:ac:58:4d:
                    2c:82:47:48:a8:51:24:4b:2c:64:78:c0:e5:f7:1b:
                    5e:6d:33:5c:38:56:b5:d5:38:72:32:95:33:f4:72:
                    04:e5:47:e2:ff:b8:75:25:f0:79:e7:b4:f1:09:1d:
                    bd:ea:a8:92:44:87:45:57:30:f0:17:71:e6:12:e4:
                    25:ca:e1:63:5a:c4:64:f8:25:96:44:b5:88:a2:66:
                    a5:1e:b8:9d:9d:ea:69:10:04:80:6a:18:e2:5b:55:
                    27:c7:69:70:0d:f1:73:c5:1a:48:9a:39:80:8d:a7:
                    bd:47:2d:3f:4c:80:a1:9d:47:8e:db:17:9f:8d:8f:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:D7:97:A1:19:E4:8E:87:55:3A:46:AB:2F:87:D6:C2:81:3D:AC
            X509v3 Authority Key Identifier:
                keyid:41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:ce:24:11:34:f3:bd:4f:77:8a:3f:98:14:a1:be:ae:96:
         2a:3e:ac:31:28:81:23:fd:c3:99:1a:a4:ff:ca:ca:b8:88:d9:
         a9:14:2c:bf:43:6c:f0:1c:3a:8a:e2:1d:66:ce:7d:a9:4e:65:
         a9:bf:da:6d:96:b7:8f:cf:ce:51:3c:8e:ad:55:28:2e:15:4c:
         92:f7:a4:35:ad:9c:38:bd:e2:1c:fb:7b:07:fd:b2:e7:e2:db:
         86:a1:f3:dd:2b:b4:f2:d3:c7:6b:8c:c9:b1:c2:65:65:aa:dd:
         1b:46:71:5b:1c:a0:e3:c4:7d:bb:cd:48:5a:14:33:f1:80:67:
         02:0b:db:4c:35:ba:44:17:c5:fa:d7:26:48:c9:64:77:5b:6d:
         b2:9d:9d:37:a2:c1:e2:ba:90:91:03:f7:0d:37:68:00:73:e4:
         e2:2e:25:a7:f9:b1:b8:b1:6a:1a:f1:b9:1b:ce:85:4f:eb:e3:
         43:af:da:87:d2:3a:1d:00:61:08:b6:fd:e1:4c:69:e0:89:8a:
         d8:eb:3c:9e:c0:62:ef:1f:3b:ba:f7:e7:2c:70:4a:c2:db:7e:
         0b:b8:77:ea:7a:82:ae:54:f7:5a:1e:69:d3:e5:74:80:d1:ea:
         f7:58:62:94:8c:d5:bb:ea:5a:fe:79:41:2b:c2:dd:a4:87:c8:
         af:f8:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----