Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File:                     KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier:          7e3HNbFTNA49gSLg73l60KD9ap7Pk+DIRdtZNlZnWOs=
Subject key identifier:   87:AC:70:A0:F9:0C:B5:22:83:C4:7C:BE:AC:C9:2F:12:85:4C:42:96
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer:       /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial:       04A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number:          04A5
Signing time:             Fri 25 Sep 2026 03:36:14 +0000
Manifest this update:     Fri 25 Sep 2026 03:36:13 +0000
Manifest next update:     Sun 27 Sep 2026 03:36:13 +0000
Files and hashes:         1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: fFA8nPhhSbbFLuJHPlvt+QE+WkrMmfe2PZCgb1GaUd0=)
                          2: C26927C8123411F1827B8CF6DAE4EC9C.roa (hash: FKmgrUQrHwB7Bn53T709mzLbEAJMnGZv0nhnz9QSrfE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364791EAF, serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
        Validity
            Not Before: Sep 25 03:36:13 2026 GMT
            Not After : Sep 27 03:36:13 2026 GMT
        Subject: CN=6ab5ec2d-0427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:fd:33:f3:49:e4:d9:6c:fb:5a:31:6c:fd:
                    f9:d6:12:23:dc:f7:27:f3:e6:0d:3f:c3:a1:bb:35:
                    24:b1:a5:d3:e6:07:ee:3e:f5:84:43:80:d5:cf:a5:
                    21:3a:33:f7:45:4b:3a:e0:24:da:b5:82:ee:15:9a:
                    c6:bb:e8:f3:52:0d:ab:82:ee:cc:29:22:fc:d7:ec:
                    e3:08:fe:97:a4:55:75:af:48:4f:43:00:6c:0b:d6:
                    c6:a6:04:d2:6b:c9:c5:9f:be:b6:f3:97:84:80:2d:
                    12:e4:39:2d:02:7e:7c:ca:56:81:2e:a3:ed:1e:7f:
                    10:1f:68:59:c9:1f:c4:7f:7c:d4:0b:43:c9:d4:9d:
                    c4:fd:44:aa:ba:b3:d5:21:e4:63:98:ae:2d:39:97:
                    25:dc:52:3f:ec:92:68:46:3f:28:6a:18:aa:29:48:
                    b9:a5:e5:df:df:96:7f:59:b0:5a:b2:5d:27:62:5c:
                    b6:cf:10:48:b8:72:94:58:71:75:7e:b7:ba:79:9a:
                    43:c8:55:28:49:9a:31:be:cd:aa:6a:cd:5c:8b:0a:
                    4b:bb:48:32:0b:ce:6e:38:a9:13:e8:33:0e:f3:22:
                    42:57:67:a5:32:66:78:4d:8a:36:c9:e8:d8:bc:4d:
                    86:be:f2:42:bf:88:f6:81:53:5b:f0:43:7d:07:d7:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AC:70:A0:F9:0C:B5:22:83:C4:7C:BE:AC:C9:2F:12:85:4C:42:96
            X509v3 Authority Key Identifier:
                keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:36:e1:1c:2d:24:b5:04:41:4e:3a:58:82:2c:26:09:0a:b0:
         fe:06:55:8e:a9:9f:01:09:bb:00:8f:11:52:56:dc:bb:6d:29:
         da:7a:c9:5e:a2:10:be:38:ca:4b:ff:51:33:b5:33:04:8d:63:
         d5:fa:ab:30:5a:b6:c7:9f:11:cf:8e:3d:98:37:97:5e:c5:ae:
         60:b8:35:a1:88:f9:49:34:36:20:a4:1d:fd:0a:92:0f:5c:57:
         fd:8d:10:bb:df:a7:09:2e:97:1f:1a:c8:25:43:e2:01:a5:a2:
         4e:21:2d:bc:82:74:48:52:ed:0a:ce:0a:54:2d:ec:2b:0f:85:
         30:57:1a:e7:28:1a:33:e0:5b:e8:a9:e4:9b:ab:15:b8:1f:62:
         94:5c:44:d4:8a:b5:38:a7:d7:dd:cc:61:8b:6b:3a:0d:49:5a:
         3d:13:f4:cb:0a:01:56:cc:5e:a4:23:5b:bc:38:30:5f:9e:eb:
         2a:f4:fc:62:9a:a3:0c:e4:11:4e:f8:4f:b2:7f:ac:ed:62:55:
         ad:64:ff:57:d0:17:4b:9d:6b:e1:98:0d:1e:c9:3c:ce:32:f6:
         e4:71:13:46:f7:d8:3f:22:c9:22:66:fa:ee:c6:cf:1d:37:04:
         de:b0:67:8c:5d:92:f9:cb:7f:26:2a:36:dd:6f:40:14:ac:6e:
         fb:45:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----