Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
File:                     qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft (raw, json)
Hash identifier:          w/AH+FPCGSy1BxW7VfpGP3rxHZEk05s/kCs3d7+xS2c=
Subject key identifier:   FA:46:21:2E:2A:3F:D8:25:6E:AE:2B:71:21:F7:FB:79:CC:CF:BE:66
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Certificate issuer:       /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial:       0854
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
Manifest number:          0843
Signing time:             Mon 21 Sep 2026 02:00:33 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:33 +0000
Files and hashes:         1: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl (hash: guwMYO6MsCBiacBJB3LWp0E0MdYvpzvTtU9fy2qz0X8=)
                          2: 6E11E8C68B7011F18D00CBBBCE1D38B0.roa (hash: R6ZAuWQ1b65qdYhlJLI34DH8ImhOccUwMkIcZJKfSZ4=)
                          3: C76433F68B7111F1BB81E8C3CE1D38B0.roa (hash: Jyo6mTt5D+siT/5Sy486p7UlD/qKwUVTTEmDw7nQRpU=)
                          4: 44E2BFD6BEB611EEB2F13E55775412E6.roa (hash: 6BGl+d3/Qn7Bi9MGN7eS+0tAvnZagMzcLCnJkf/75K0=)
                          5: 1516EA16764311EB901D143DF8AEA228.roa (hash: NKQ3jb8Jf2A8DHKj6MSRen4+1RRngARTbxS7x9DY4og=)
                          6: B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa (hash: Tkfyz7A/sSnniZvLtR3qk5hB4dmcR1R0uZM1aLmEtpE=)
                          7: 614715108B7211F1B8A9A6C7CE1D38B0.roa (hash: GCcG6qz6sOs6xxzlm6NT7/+vvW8mXelsZNfCKKxtonA=)
                          8: 64B3D22A8B7111F183D4E9BFCE1D38B0.roa (hash: 17rQOz1O2eNeJPsxK6qXRaLtzqR4vb82M+67xoEWKq0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132 (0x854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
        Validity
            Not Before: Sep 21 02:00:33 2026 GMT
            Not After : Sep 23 02:00:33 2026 GMT
        Subject: CN=6ab08fc1-ec10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:48:8c:b6:81:ec:49:b4:60:06:69:37:d4:
                    b6:0d:a0:e4:d4:5c:46:76:4e:b5:f8:ae:ba:2f:22:
                    a6:f2:e1:c9:b3:95:1a:c7:ef:61:d7:0f:a2:53:01:
                    e4:23:5b:0a:41:ea:c6:51:28:c9:45:24:36:d0:53:
                    28:fe:c2:c8:85:1f:e1:a9:e8:4e:48:4a:7b:7b:59:
                    13:4c:08:f0:3c:1e:d6:e5:f7:24:8c:f9:59:85:e1:
                    92:51:d4:52:0c:18:df:51:ff:ef:82:81:bc:96:db:
                    dd:19:c9:ec:b4:4a:f9:b1:98:2f:04:bc:e1:71:b2:
                    15:eb:68:18:2f:d6:c4:e1:68:55:a7:c2:93:29:2a:
                    81:3c:84:d9:44:15:40:55:99:39:7e:a3:b4:d5:23:
                    35:ea:7f:36:66:42:fd:98:76:ae:df:11:22:db:90:
                    3a:ee:48:2a:a8:de:25:2f:c8:87:4f:03:1d:94:61:
                    57:69:9e:9b:4b:84:f7:6e:b9:de:88:0f:6f:1d:89:
                    bb:a1:5b:a9:d4:ab:6c:1c:af:8c:b5:88:73:06:1e:
                    e5:cc:60:2e:4c:1e:dd:ab:f7:9a:d5:5d:ee:4d:bc:
                    f0:aa:0d:a0:b1:7f:6e:85:8f:05:78:d8:cc:6a:47:
                    43:bd:c4:b2:db:72:4e:42:77:a0:c6:d2:a8:98:37:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:46:21:2E:2A:3F:D8:25:6E:AE:2B:71:21:F7:FB:79:CC:CF:BE:66
            X509v3 Authority Key Identifier:
                keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:79:8a:ac:db:25:18:d3:14:a5:27:1e:b0:d3:1b:a6:bd:87:
         fb:d0:24:64:4e:87:49:0c:76:0a:32:76:ad:4c:db:48:a0:43:
         f2:a8:46:10:41:7e:16:c1:66:ea:28:af:03:8e:6a:13:00:bb:
         3d:65:cf:ce:77:b5:22:7e:8d:6f:2f:48:b5:36:3d:9d:c0:4d:
         eb:c6:f2:f1:1b:2f:da:ec:3b:9f:9f:db:7b:5f:15:39:29:93:
         83:0b:c8:79:d5:fc:40:7a:cf:2c:7d:e0:3a:58:66:da:4c:44:
         4c:29:17:8f:12:1a:ec:11:c6:a8:d4:3a:ce:cb:b9:fa:e2:70:
         eb:ab:05:2f:c0:4e:ad:1b:92:89:89:6e:da:8d:cd:cd:98:ca:
         ad:bf:a7:b9:96:43:2b:da:ab:ba:37:f1:7e:1a:5d:3f:17:19:
         b5:a1:da:cc:ec:0c:15:d0:4b:98:da:c9:f8:28:be:c0:60:c5:
         c9:37:eb:58:b5:36:b9:09:6b:80:ec:ef:fe:b9:65:e8:d5:3b:
         3e:0a:c1:fd:5c:2f:a5:c7:0a:0c:53:10:3d:42:eb:d2:db:1e:
         12:aa:1f:46:ef:01:c3:26:22:54:59:e6:e3:35:64:e3:af:58:
         e1:5b:6c:70:83:0c:d3:a5:a2:e1:6e:d7:a8:0a:ab:03:26:cb:
         5f:45:7c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----