Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
File:                     D4kdL9FUeF3D5rPHlmdkbAu09W0.mft (raw, json)
Hash identifier:          +TqHJuf174U+XA74XqKCHUJX29r/GjULzHtxchXOeZQ=
Subject key identifier:   FC:19:E0:C3:94:F6:D9:5B:3E:46:32:52:30:C8:EA:2E:38:5D:A8:47
Authority key identifier: 0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
Certificate issuer:       /CN=F3641110AF/serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Certificate serial:       E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
Manifest number:          D9
Signing time:             Mon 21 Sep 2026 05:29:25 +0000
Manifest this update:     Mon 21 Sep 2026 05:29:24 +0000
Manifest next update:     Wed 23 Sep 2026 05:29:24 +0000
Files and hashes:         1: D4kdL9FUeF3D5rPHlmdkbAu09W0.crl (hash: PpzxgZWftYn51cnWI6Wj10VPEg4h/X6BT1l1vK8ti5U=)
                          2: 70AA590E1E2B11F196DC24ADDAE4EC9C.roa (hash: uMkdtVFtuvQqxiv3P3QzJvhJoUMANuEicE2OUjLsOMI=)
                          3: A90F75EA1E2B11F1A74454ADDAE4EC9C.roa (hash: l0pI77i/3rExThBukFhyhrFHwyUmiyAZc83nnRzr++8=)
                          4: F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa (hash: C6BbRAJGJhQ26iah4zjRl/7QOH2SLtDjfPiGNF+cAyk=)
                          5: CBEEA3561E2B11F1961C59ADDAE4EC9C.roa (hash: pvY9TQ8JUnIxht52zhSA0rWfrxaSQC/iSnp5NKbibUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3641110AF, serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
        Validity
            Not Before: Sep 21 05:29:24 2026 GMT
            Not After : Sep 23 05:29:24 2026 GMT
        Subject: CN=6ab0c0b5-eebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:f8:66:4d:ef:82:da:d7:bc:59:c3:4b:a1:
                    b5:da:b5:1d:86:90:02:c5:a6:89:70:21:12:1c:cc:
                    37:a1:b1:e5:e2:ef:ea:b5:d6:c5:be:f7:a0:c2:90:
                    34:40:66:86:18:be:52:0b:e0:42:8f:df:c9:ba:28:
                    09:c9:1d:ab:93:3c:db:44:eb:01:18:b5:0e:02:58:
                    56:38:82:44:78:4e:24:ea:3c:b5:d8:12:89:01:46:
                    d6:bc:68:ab:33:3a:ef:08:6a:16:28:57:ca:94:88:
                    1c:4d:05:40:9e:94:69:cb:27:49:16:c4:bc:85:08:
                    4a:b2:fd:7e:40:a0:8d:f2:e7:25:04:25:4f:74:2b:
                    5e:18:7c:e4:8d:b8:e7:d3:03:17:0d:b1:4a:87:d2:
                    7d:a9:57:cf:3f:2d:2a:11:32:0b:c1:45:9c:f8:79:
                    53:87:7a:14:e9:3a:ed:c3:3c:d4:cb:8d:c5:15:40:
                    0a:ae:f1:8c:ca:44:fb:aa:3a:c5:d1:e0:ee:55:d9:
                    ca:ab:b8:72:81:7f:c7:e0:22:50:69:78:0d:28:58:
                    5d:86:d7:66:7c:2e:7b:62:a3:67:b1:7e:8b:b4:c8:
                    47:40:bb:65:55:6c:46:9f:5c:26:30:cb:4c:b8:fd:
                    7d:f1:2b:7a:2a:40:60:35:c2:86:eb:0c:e4:dd:36:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:19:E0:C3:94:F6:D9:5B:3E:46:32:52:30:C8:EA:2E:38:5D:A8:47
            X509v3 Authority Key Identifier:
                keyid:0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:c8:69:27:18:d6:9f:ad:b5:62:a4:51:b9:fb:bd:2f:c6:
         bb:ff:70:0e:d9:9d:f0:89:20:f4:ea:3d:6d:d3:e6:e9:d7:a5:
         3f:12:10:20:ed:40:31:9d:7b:ef:0e:73:b4:d3:28:04:4d:74:
         ae:78:c6:ca:5b:76:5f:14:25:df:71:6f:ce:6c:e5:d0:1b:36:
         95:6c:93:e5:38:2e:32:b1:a2:27:7a:c1:34:90:66:63:a1:e4:
         64:5f:22:a5:66:ca:76:02:52:8d:cd:85:9b:95:50:7e:b9:1b:
         b0:88:16:cc:06:ef:c0:3e:43:5d:d7:12:29:7e:9c:19:a1:65:
         47:9b:0e:84:46:ae:a4:76:e3:69:5d:be:2c:47:ff:98:73:42:
         a6:fb:53:44:d2:4f:5c:df:ed:dc:1d:35:fa:89:33:40:5d:c6:
         82:ba:89:11:64:49:df:49:fc:dd:71:a1:92:f0:a1:60:25:83:
         c0:76:85:5f:fd:f6:df:8a:da:22:98:43:c9:8b:4f:70:d8:44:
         96:a9:21:41:16:db:64:77:55:d4:f3:97:38:fc:fd:b9:e1:04:
         3c:43:1b:08:fd:18:10:56:53:61:fb:cd:a7:59:0f:d0:6e:64:
         67:89:92:16:2d:ef:e8:e2:1c:ae:ed:d8:87:24:ee:5a:6c:f9:
         cc:ef:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----