Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
File:                     A-IO7xUFA6CxlRGK6Idof1pCecI.mft (raw, json)
Hash identifier:          mW7JJkzDyi03l4dLUS0/tkcRRSHlVX/WcpD5a6rFEA0=
Subject key identifier:   2C:37:DB:20:7F:3B:48:4E:E7:34:32:07:A4:9E:79:2A:F5:10:92:4E
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       063B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
Manifest number:          0625
Signing time:             Tue 22 Sep 2026 02:54:48 +0000
Manifest this update:     Tue 22 Sep 2026 02:54:47 +0000
Manifest next update:     Thu 24 Sep 2026 02:54:47 +0000
Files and hashes:         1: A-IO7xUFA6CxlRGK6Idof1pCecI.crl (hash: i+nV353ElcUEaaVYhj2pNcIWx5JvVG0nMwkA7+TN2F0=)
                          2: 31A1A204ADF911F19714F7DCCE1D38B0.roa (hash: XD7YArUzQvb4NYRZII5G1y7Bf9VhaiGbaYAymCOGtmY=)
                          3: C2D8A386ADF311F180B3D6BBCE1D38B0.roa (hash: +quuyWeNpBBc0KHUfp1CaDC7Ur1yFOArKapGxWjcOBA=)
                          4: 0AC40528ADF411F1ABEB76BFCE1D38B0.roa (hash: w87n18ULPadsOUYXqoJVNpf3Ux7VMCFOBiYRq5proH8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF, serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Sep 22 02:54:47 2026 GMT
            Not After : Sep 24 02:54:47 2026 GMT
        Subject: CN=6ab1edf8-5e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:47:c0:2e:82:61:bb:4d:d6:19:de:10:a6:
                    31:e7:8c:0d:9e:00:2b:b0:b6:43:64:7d:b6:b6:76:
                    7d:c7:70:42:2c:53:d4:f6:b5:12:37:be:58:33:15:
                    00:f3:af:36:85:cf:f0:85:b8:e1:83:51:07:6f:f0:
                    42:c1:04:cf:c1:08:3e:1b:55:a4:b6:f7:b9:d7:13:
                    25:83:58:4b:ea:5c:af:43:1d:4b:b0:77:1f:28:03:
                    15:4c:83:28:8d:5d:af:b1:7d:de:d9:37:e7:13:6d:
                    e8:3a:db:93:6c:72:48:bc:1f:d7:93:e4:9c:43:c2:
                    69:77:85:48:34:87:ff:ae:eb:5f:36:f6:68:21:ca:
                    79:11:41:0b:87:b4:2f:2a:bd:a4:ec:be:a4:15:8f:
                    e3:07:c9:5f:7d:6b:4a:c4:cf:41:7f:d1:b4:99:52:
                    c9:e0:fe:86:82:42:4a:50:0c:32:f5:4d:2f:25:83:
                    74:02:6d:23:cc:bf:36:4b:18:80:7d:cf:bd:a6:29:
                    44:0a:3d:d5:3b:82:60:7f:81:e6:e7:0f:02:72:52:
                    42:bb:e3:f1:a3:26:ec:f3:3b:53:bb:0d:b5:07:40:
                    3d:c2:a7:bd:63:2b:2b:b6:0e:a5:da:23:26:ba:76:
                    ab:ec:e0:20:fa:51:06:3f:f5:72:e1:9d:21:39:18:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:37:DB:20:7F:3B:48:4E:E7:34:32:07:A4:9E:79:2A:F5:10:92:4E
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ab:b6:4e:1c:d0:ce:ab:06:25:37:04:0a:53:56:f5:fb:29:
         37:e6:94:c3:fb:91:43:57:b7:0b:24:5c:38:58:26:32:e0:3b:
         88:56:7b:b1:95:0d:1c:a0:52:36:84:db:25:2e:82:6e:40:cc:
         5e:b7:5d:f9:ab:2c:b1:84:16:a7:0b:1b:69:cb:8a:e3:cf:46:
         f2:96:a3:4e:29:1c:31:d3:28:7c:4b:70:fb:c7:c1:41:ae:e3:
         54:64:13:9e:d5:1a:f5:6b:50:f4:30:67:b5:a8:0b:3b:fd:81:
         67:46:71:51:50:ac:f9:bf:f8:d3:ff:a7:bd:4c:73:67:a1:ea:
         04:a0:f2:5e:29:4f:a4:14:73:54:cb:6a:b4:62:85:c1:45:9f:
         6e:70:5c:a8:08:fa:9a:9d:33:49:84:de:44:2c:20:8c:92:44:
         2b:54:3d:37:0c:58:a7:98:ee:a1:1d:88:46:c4:99:7b:b3:41:
         10:c0:9c:6b:e7:9e:4f:6e:2d:45:f7:35:8c:6b:6c:6d:33:c0:
         89:1b:b1:44:9f:11:cd:8c:3b:e3:ad:db:e0:33:5a:c8:f4:90:
         19:61:70:fa:f9:42:20:41:c1:e8:50:49:c8:8b:13:15:9b:c0:
         3a:72:b8:76:62:b2:3b:6d:ff:0d:57:c5:93:55:0f:50:c0:41:
         41:b1:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----