Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          G+UaKsFhZFfGe31+REcG/ZlkXgn8E1C1oKQnkyA+qYc=
Subject key identifier:   5A:28:ED:BA:1E:4A:01:9D:2C:76:D5:CC:20:10:45:D9:93:87:BD:F7
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       0525
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          0525
Signing time:             Mon 28 Sep 2026 03:22:17 +0000
Manifest this update:     Mon 28 Sep 2026 03:22:16 +0000
Manifest next update:     Wed 30 Sep 2026 03:22:16 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: H/1qXPnPvbMaygVuXMxdyWY3exCgPse7oBty6qZlVV0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: Sep 28 03:22:16 2026 GMT
            Not After : Sep 30 03:22:16 2026 GMT
        Subject: CN=6ab9dd69-4295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:e9:c4:9f:e4:33:5f:58:e1:68:b3:e8:9b:
                    5b:8c:6a:94:11:5b:77:70:fb:be:b6:e6:13:77:0a:
                    22:53:fc:64:ef:2e:10:da:62:83:78:8a:ea:d1:7d:
                    6e:42:d5:a6:76:e5:5b:b6:8e:25:30:3c:4d:44:ca:
                    52:3a:39:c5:98:ea:ce:31:23:ae:7e:19:8b:af:c3:
                    ae:e8:70:d3:f1:9d:a5:67:e0:7f:84:af:ea:ca:9f:
                    5d:e0:fd:8e:72:45:93:b8:67:7e:70:95:27:ef:7b:
                    99:6d:4d:be:59:83:2a:54:8b:a2:a3:9b:b0:a5:e1:
                    0b:9a:ae:c7:97:8c:0f:d0:b8:d4:38:6f:f8:2b:95:
                    c7:60:f3:3a:13:93:c4:a1:62:3a:d6:5a:63:e9:e6:
                    d9:54:60:ad:7e:3a:b8:40:ca:8f:a8:e3:96:7c:a0:
                    e1:d4:02:4c:b8:6d:03:be:f1:2b:e1:19:77:7b:9c:
                    d4:03:71:33:f0:34:85:64:8e:ee:58:1a:08:32:2a:
                    9c:fb:19:23:07:d9:96:47:a1:24:93:27:b1:50:36:
                    ff:3b:a6:b3:bb:d4:ad:6f:9d:93:99:f8:99:6d:84:
                    e8:09:b8:8a:82:ea:94:65:ee:37:21:c6:45:23:95:
                    56:6f:b3:2e:60:fa:72:fd:7e:b3:5d:ec:2f:6e:8b:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:ED:BA:1E:4A:01:9D:2C:76:D5:CC:20:10:45:D9:93:87:BD:F7
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5f:04:c0:4f:b2:b4:d3:02:10:4f:00:c6:03:5e:85:18:f1:
         67:c2:fb:3b:d1:dc:23:38:df:72:03:82:41:f5:58:a1:6d:c8:
         f4:07:3c:82:61:c5:82:bf:ad:6e:44:e3:d7:a6:75:07:57:a6:
         2e:a9:24:bb:88:d8:f7:d7:e3:ba:e9:59:52:2b:9f:d1:17:9b:
         e3:3d:47:e1:40:2a:f0:83:07:f3:13:19:d7:c6:8c:e4:a1:0d:
         ff:38:12:23:91:5e:a4:b3:ee:9c:27:18:c5:34:3e:57:8a:b1:
         12:a2:90:53:aa:b3:10:8c:a7:a2:75:08:c4:c8:a5:64:59:bf:
         79:78:df:79:fc:e9:df:c2:3a:dc:61:4a:88:d2:3a:0e:83:60:
         53:e2:d8:b3:b5:ee:25:78:fc:2a:7e:14:db:45:c5:b5:6b:e7:
         8f:09:79:19:11:b1:d4:ab:92:e6:df:af:28:d5:42:c7:b2:5f:
         bf:a7:24:ba:19:88:e6:c6:fc:7e:df:fa:f3:36:a4:64:38:9b:
         bf:1d:9e:88:8b:c0:8a:3a:2a:d4:6b:62:ae:14:d5:b8:30:2d:
         3a:c0:15:b4:29:f0:ee:fa:e7:16:de:78:53:a8:10:d2:b6:68:
         d6:b3:e7:03:dd:34:10:50:3f:fd:9b:cd:df:31:d3:c9:f8:ee:
         84:c9:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----