Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File:                     5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier:          TI8T6tJumjY5SWmN7YyI+HHTtBjsi+nriC8HQlR/hWQ=
Subject key identifier:   42:CD:56:26:96:4C:6B:AC:2C:35:95:D2:B4:F3:B8:CF:18:04:F2:12
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       0FE2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number:          0FE0
Signing time:             Wed 23 Sep 2026 00:58:09 +0000
Manifest this update:     Wed 23 Sep 2026 00:58:08 +0000
Manifest next update:     Fri 25 Sep 2026 00:58:08 +0000
Files and hashes:         1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: /EkulNhUFfD+UZju/9vLzWLKqeXCGQeyFtNgSzQJxBE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4066 (0xfe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF, serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Sep 23 00:58:08 2026 GMT
            Not After : Sep 25 00:58:08 2026 GMT
        Subject: CN=6ab32421-277a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:ee:e6:30:2b:d0:1c:84:d3:65:fd:29:9b:
                    a7:fb:bf:48:62:76:7f:a8:ab:bf:93:1a:85:52:98:
                    c6:07:69:ee:6e:dc:63:75:de:3a:de:d7:c2:0b:db:
                    e2:c7:df:f8:19:5e:8c:04:d3:7b:a0:27:de:39:0c:
                    9b:0a:38:86:8b:cb:e6:e6:da:80:1e:6a:af:cd:e3:
                    02:c8:ac:f8:7b:7c:9c:6e:47:b9:25:42:db:78:68:
                    5a:de:3b:60:a5:04:21:0d:b1:39:7d:50:7e:bd:d8:
                    c1:04:71:8b:56:67:9b:27:a0:2f:42:9c:ea:84:c5:
                    8b:f5:d9:1b:28:41:a8:67:92:0f:1d:28:e3:a6:74:
                    26:09:99:a9:ec:bd:10:7a:e4:51:19:32:03:15:10:
                    b9:a8:cd:01:1d:77:14:79:72:aa:1a:b8:e5:9c:fe:
                    87:fd:b8:6e:cc:a2:9c:36:3e:a0:f3:9f:51:a0:8a:
                    02:34:3d:a7:2d:ff:43:95:0d:43:f9:e5:e0:c8:41:
                    38:b5:f8:b0:1d:c9:6c:db:15:9d:5e:27:5c:eb:0b:
                    57:e3:01:80:a8:5e:ac:47:d2:eb:3a:2d:4d:9b:38:
                    03:31:0a:62:20:ce:1f:6e:0e:5c:cc:1f:82:0e:56:
                    44:eb:2d:1c:9e:20:55:55:78:ff:d0:5f:ea:c0:7c:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CD:56:26:96:4C:6B:AC:2C:35:95:D2:B4:F3:B8:CF:18:04:F2:12
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c1:bb:28:ab:d0:8a:16:4c:b8:e0:47:de:ec:5b:01:f2:c5:
         1b:d8:5e:e0:99:62:f2:61:4f:9d:ef:c9:de:14:b3:04:d1:c0:
         af:01:72:ec:62:b7:00:f4:96:11:10:60:57:10:08:51:12:a6:
         9d:89:3d:10:c9:22:40:6d:5b:63:1e:14:66:31:f0:3e:80:88:
         15:6b:f5:bb:5d:a4:17:95:ce:ea:ce:66:68:7c:03:db:87:b6:
         ef:44:a6:ca:d3:09:37:f2:38:0c:64:c9:f4:64:1b:e8:46:12:
         51:27:db:cb:3d:59:ce:f8:20:89:5e:b0:ba:34:97:1b:b0:3e:
         05:48:56:d8:0c:93:b9:d6:ad:4e:62:e1:23:7a:d5:b5:46:3b:
         5f:60:b6:da:42:18:c9:f2:b2:14:1c:af:c4:7e:e1:16:ba:cc:
         8e:1a:15:0d:94:b4:c0:bf:a8:ba:cb:2a:3e:76:d3:9c:ab:33:
         d6:44:f0:6d:70:77:ad:dc:85:ab:c3:4d:26:28:5a:43:14:c7:
         8f:36:1e:2b:02:cd:ce:2a:4d:da:ff:4e:57:cf:bf:11:11:3a:
         25:e5:a2:0c:38:03:90:f5:a7:85:ea:de:3e:23:0f:84:92:5d:
         33:a5:8e:6e:36:9b:51:c2:53:5d:c5:ec:6e:65:d6:5d:d5:04:
         ac:50:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----