Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
File:                     UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft (raw, json)
Hash identifier:          +v9Qcc6j3MSUmls/E9EdDg2tsn6K+HLlwdhOts5U2I0=
Subject key identifier:   B0:EC:E4:D5:F6:AC:A7:0F:D4:C3:94:08:AA:40:A4:2F:57:98:9C:60
Authority key identifier: 52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71
Certificate issuer:       /CN=F3656325AF/serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
Certificate serial:       14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
Manifest number:          13
Signing time:             Mon 21 Sep 2026 05:52:32 +0000
Manifest this update:     Mon 21 Sep 2026 05:52:32 +0000
Manifest next update:     Wed 23 Sep 2026 05:52:32 +0000
Files and hashes:         1: UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl (hash: v1uNBlz2rH8GKCN0fp4NW86snLQQghMeSsP3DZQrJqc=)
                          2: 79C18868A86011F19F3763F9CE1D38B0.roa (hash: vaoELsOFVOg4HJw3Qs5sWp61mQ8soCkWjOfsBwURWO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656325AF, serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
        Validity
            Not Before: Sep 21 05:52:32 2026 GMT
            Not After : Sep 23 05:52:32 2026 GMT
        Subject: CN=6ab0c620-2351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:57:77:17:53:e6:93:78:2b:88:a4:91:c5:
                    48:3b:aa:b1:b1:8d:7e:4c:43:d0:7f:6c:2b:ab:08:
                    06:71:7a:83:a2:87:8c:f2:af:26:45:4c:01:04:ae:
                    6a:1b:af:46:e2:13:7d:59:02:35:18:df:cb:f1:86:
                    88:f1:88:b5:ed:b8:9c:f9:7b:74:84:73:c5:db:0a:
                    9e:b9:f2:f6:cc:78:ae:8e:18:84:57:d9:78:52:4a:
                    97:d3:ca:52:11:c7:b0:4a:52:8d:4f:7c:98:fb:da:
                    61:7c:ad:0c:4e:70:0b:fe:39:22:c6:7e:e8:14:c6:
                    33:de:49:0b:99:10:e6:18:8f:6b:b7:49:5c:02:40:
                    67:29:79:a4:e3:bb:18:18:0d:4c:ec:b5:75:8f:13:
                    75:cd:e3:f2:84:bf:fd:ae:9a:1e:2a:dd:20:b8:a9:
                    8d:ee:8f:b0:39:52:2c:ef:c7:6b:06:d1:3f:ee:4a:
                    16:d2:c6:d8:84:3f:b1:64:83:3b:46:bb:75:bf:79:
                    24:ac:3b:f2:d0:c4:8c:71:9c:ef:cc:f6:ff:b2:8d:
                    d7:38:2b:99:7e:f8:f9:00:3d:de:88:8c:dc:5f:33:
                    79:6a:e5:30:e6:a2:96:e2:f2:45:f8:b2:ac:8d:69:
                    e0:e3:66:99:e4:2c:be:94:13:db:7c:55:e0:97:d8:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:E4:D5:F6:AC:A7:0F:D4:C3:94:08:AA:40:A4:2F:57:98:9C:60
            X509v3 Authority Key Identifier:
                keyid:52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:83:0d:40:2b:1d:32:15:92:82:e1:92:b3:6b:a1:c8:51:6f:
         8f:f2:d9:2b:d8:b5:19:c8:07:e8:db:fb:30:18:58:b0:a7:52:
         ee:b9:1c:b2:ba:5b:3b:20:04:b6:3d:21:e7:d3:e8:3c:db:e1:
         29:fa:61:03:bb:f6:4a:d1:b2:2a:ef:ef:49:53:ee:8f:f8:b6:
         1c:7f:af:de:fa:53:83:64:39:9b:2f:76:ad:d8:28:75:92:93:
         74:b2:93:68:e3:09:f7:ed:58:fd:32:ea:ab:79:8b:24:95:9c:
         c5:e0:cd:75:a3:55:2d:a4:fe:d7:7c:ce:6d:df:bf:15:4e:11:
         00:37:ec:81:f3:88:e0:7c:e0:16:19:e2:7a:d1:63:c8:18:0b:
         f4:f4:27:3a:0d:4c:4e:44:ca:45:38:2d:b3:66:85:a4:dd:ca:
         fc:47:3b:46:75:b4:99:0e:df:c1:79:c4:24:60:c4:8a:b5:23:
         9d:b2:de:f5:20:38:7b:76:7f:63:29:e8:98:1d:22:0f:bd:f2:
         7c:58:20:55:5b:7b:01:9e:e6:c9:41:ef:63:9b:67:33:0a:b4:
         6e:a9:6e:bd:9d:4f:ec:e3:20:33:48:b4:ca:fc:00:eb:e2:ec:
         8b:4d:dd:c4:e3:7a:49:4f:48:30:e0:d0:ab:62:cc:ff:45:b9:
         43:1a:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----