Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
File:                     XzgIgB6hYgLrL2fOP2WA29PCwuI.mft (raw, json)
Hash identifier:          5tKLZ784hs0fp4TnXDR8ek5ZxHggWstPBTJ0XoZR3OE=
Subject key identifier:   69:64:74:4E:1D:A1:34:1D:B1:AA:98:6F:52:FC:C8:EA:B9:48:B4:25
Authority key identifier: 5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2
Certificate issuer:       /CN=F3652A25AF/serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
Manifest number:          34
Signing time:             Mon 21 Sep 2026 05:48:07 +0000
Manifest this update:     Mon 21 Sep 2026 05:48:07 +0000
Manifest next update:     Wed 23 Sep 2026 05:48:07 +0000
Files and hashes:         1: XzgIgB6hYgLrL2fOP2WA29PCwuI.crl (hash: gs+o8FXm90LFomjBTFH+dsf0o6TriKL+548f2uWuAxE=)
                          2: B910CB028E6E11F1845A6602CF1D38B0.roa (hash: w0divEnGeKhPaNpp5pSAeh2v6YZz+bPKKZA6O6oQeAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652A25AF, serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
        Validity
            Not Before: Sep 21 05:48:07 2026 GMT
            Not After : Sep 23 05:48:07 2026 GMT
        Subject: CN=6ab0c517-4e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:fa:76:e9:64:4f:63:a8:bc:3f:05:af:39:
                    5b:73:3e:22:39:f9:bb:fd:2d:73:77:3f:05:71:d9:
                    ff:e6:b8:c4:8a:44:b8:1b:e8:b1:a4:65:8e:c8:d7:
                    49:b6:5a:c9:e4:97:bc:73:7d:27:8f:6f:22:9b:ff:
                    b2:83:f1:02:1a:1f:00:38:8a:cf:78:2d:2d:4c:95:
                    18:5d:83:46:24:0c:d0:58:5c:17:6a:8e:5a:4e:b0:
                    69:61:ba:8b:a7:a8:b3:e0:54:8a:f0:58:90:01:7e:
                    1e:16:33:64:c3:3c:08:28:a3:ec:46:2a:67:b7:f3:
                    53:b1:bb:0a:f5:d8:34:db:5c:9b:31:5e:ce:90:62:
                    22:93:c0:68:c9:1b:1f:26:26:37:cf:6d:67:75:fd:
                    30:e5:a6:cb:14:ba:a3:52:fd:cb:a3:18:79:77:03:
                    62:2b:9d:0e:a3:05:02:0d:02:75:c1:9d:d1:6c:da:
                    ff:5d:10:f9:14:6c:c7:0c:4e:40:a3:f9:58:df:8c:
                    66:7d:46:36:f9:1a:ad:e5:b5:ed:12:14:36:21:0d:
                    66:9b:3f:28:5e:b1:89:0f:99:de:3c:ee:8e:09:4c:
                    c3:05:32:37:ac:ba:0c:40:fd:9a:58:3c:33:20:5d:
                    6e:8b:ce:f4:e4:ac:5e:3c:0a:a5:ec:bd:85:38:32:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:64:74:4E:1D:A1:34:1D:B1:AA:98:6F:52:FC:C8:EA:B9:48:B4:25
            X509v3 Authority Key Identifier:
                keyid:5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:c4:21:47:00:3b:be:6c:8d:a6:01:df:23:f5:a1:01:0a:
         1d:41:8b:1e:df:c8:91:6a:1c:df:f2:33:9f:73:dd:6d:5d:38:
         2c:d7:32:32:5a:9b:de:d2:07:2f:85:3c:46:4e:fa:93:18:5e:
         d5:32:a8:29:83:0e:46:61:52:1e:b8:59:84:ba:e1:41:22:01:
         83:09:d5:67:40:2e:dd:e3:c0:79:31:22:8a:de:ef:1c:c6:f8:
         fa:1d:7e:74:7f:f6:2e:6b:4b:62:97:09:ef:0f:ba:19:fc:d9:
         25:6c:81:2d:c9:f3:13:ce:10:e0:a0:19:de:8d:a3:5f:a5:64:
         bc:b6:48:f0:1c:ac:91:4a:e0:39:99:65:40:60:24:cc:98:f3:
         a9:c7:bf:49:7d:ec:9b:70:c2:66:9e:ee:a6:55:44:a0:95:c3:
         08:63:b6:5c:08:66:51:07:ac:9f:25:03:d8:c2:50:2b:17:a7:
         14:58:8d:15:c8:55:69:6c:af:34:45:a3:6e:dc:c5:06:d0:d9:
         48:ff:72:09:f3:4b:e4:a4:e9:ff:86:cc:ba:2b:85:05:b9:f6:
         85:6b:78:8f:ad:68:a0:ca:cb:69:aa:d0:d2:dc:3f:8c:15:bf:
         79:c5:83:b2:97:07:55:5e:00:21:ff:bf:42:38:51:aa:e6:8b:
         b3:b2:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----