Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File:                     xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier:          yY4HTZ5OSsn+t8/5byHf82Yd3a9sv66iRIT3BK050S8=
Subject key identifier:   69:BC:01:E2:97:2E:15:E4:8E:5A:E7:76:07:C7:26:E2:90:52:63:B9
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer:       /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial:       0677
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number:          0677
Signing time:             Mon 21 Sep 2026 02:40:13 +0000
Manifest this update:     Mon 21 Sep 2026 02:40:13 +0000
Manifest next update:     Wed 23 Sep 2026 02:40:13 +0000
Files and hashes:         1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: Jd9b78VZ8GwXJrzAMUlAwRovQ32WlN1aXW3LBxoKDXU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
        Validity
            Not Before: Sep 21 02:40:13 2026 GMT
            Not After : Sep 23 02:40:13 2026 GMT
        Subject: CN=6ab0990d-12ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:aa:0c:67:fd:91:e5:c6:cb:2d:e2:5f:3a:
                    45:40:68:52:0a:f1:27:7e:83:e2:07:9e:9f:c9:aa:
                    c0:64:db:9d:ce:e9:7e:b6:15:ca:7d:cb:3c:46:2c:
                    2e:ba:c6:9e:5c:c9:a7:06:e5:20:93:0d:c3:fb:e5:
                    f3:0f:44:fd:d5:ad:63:fb:aa:28:b1:29:0a:cc:dc:
                    5f:04:49:ba:fc:c3:3d:b0:b4:0a:ed:bc:ab:8c:a2:
                    18:e4:df:fd:90:d5:88:44:bd:50:30:90:e2:6d:44:
                    92:af:9d:21:a4:3e:b5:b1:00:9a:ce:02:bc:87:a8:
                    fb:0b:9e:56:5e:2c:29:0d:11:6a:86:9c:30:94:d7:
                    d2:59:2d:38:b9:19:e4:a5:35:d1:57:34:48:aa:62:
                    0d:2d:7b:02:a9:65:aa:e4:14:e3:51:7c:f0:ec:62:
                    7a:3d:29:93:8c:51:1a:25:c7:f2:d6:f9:2f:ed:7e:
                    89:67:83:60:14:35:87:1c:63:5d:69:cc:22:39:f4:
                    5c:66:db:34:4c:d4:d0:a1:6d:b7:19:1f:ce:6f:2e:
                    48:bf:a7:7b:25:a8:0e:39:f4:bd:6b:0e:ee:e5:d6:
                    b8:a9:a6:a6:85:ea:89:59:a2:31:b6:7c:aa:a6:36:
                    0f:90:73:5a:d2:5a:51:e6:16:95:94:0a:80:87:9c:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BC:01:E2:97:2E:15:E4:8E:5A:E7:76:07:C7:26:E2:90:52:63:B9
            X509v3 Authority Key Identifier:
                keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:a9:fb:0e:ec:21:a5:3d:1f:9a:c3:95:21:de:31:08:48:
         99:59:06:f5:36:96:4e:ef:b4:4b:83:6c:27:64:2c:e8:88:89:
         7d:f8:9c:ef:02:f9:1e:fd:2b:df:7b:3b:53:eb:40:e1:ae:1e:
         22:80:d8:65:d4:a3:ae:eb:07:de:6a:06:a2:ac:5b:5e:2c:54:
         65:8f:5d:2f:ec:63:21:0a:cc:e8:b9:0e:d9:d7:53:d8:f3:55:
         3f:ea:6a:22:b6:41:64:17:e5:fc:1d:19:3b:e0:a7:f1:d6:93:
         e0:fd:39:5a:83:80:d2:af:c5:ea:48:ac:2f:29:0b:5f:32:c5:
         73:c2:4d:18:c3:9f:3a:e0:83:d0:ec:56:5d:b2:f5:94:e3:bf:
         67:42:3f:06:0f:d8:d9:ee:d6:28:8c:a2:35:36:2f:ef:83:55:
         9c:e9:52:d8:d0:15:68:d9:83:0e:d3:92:8a:3e:a2:5a:e6:00:
         39:91:d2:37:d2:9b:d5:f2:cd:6c:2d:63:73:d8:c6:37:c6:f5:
         de:03:f9:11:a7:a9:2b:cf:df:34:36:6b:d5:37:59:bd:5b:c5:
         14:58:1c:fa:2f:17:a6:b0:33:8a:12:7e:bf:4c:c8:2e:84:37:
         cf:b5:8b:c2:43:6b:e7:a9:a2:b1:59:77:20:1b:1f:99:d0:29:
         51:cf:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----