Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
File:                     agXQ7beSVTGJRs3ZHy36Wnh__xM.mft (raw, json)
Hash identifier:          K9RYADrHbx3jlPa5FtvcfFCoVGwfcj/W41RK9XrYFrA=
Subject key identifier:   82:9E:AC:0A:D8:39:0D:23:F8:57:9B:C0:02:4E:2A:D3:B4:D3:EF:05
Authority key identifier: 6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13
Certificate issuer:       /CN=F3658AF9AF/serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
Certificate serial:       019D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
Manifest number:          019C
Signing time:             Thu 24 Sep 2026 05:04:40 +0000
Manifest this update:     Thu 24 Sep 2026 05:04:39 +0000
Manifest next update:     Sat 26 Sep 2026 05:04:39 +0000
Files and hashes:         1: agXQ7beSVTGJRs3ZHy36Wnh__xM.crl (hash: I1vrcoYpgLqqV/Jxc1zBkyaSRg1DPb728jxA/4k8zgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AF, serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
        Validity
            Not Before: Sep 24 05:04:39 2026 GMT
            Not After : Sep 26 05:04:39 2026 GMT
        Subject: CN=6ab4af68-4a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:a6:c2:7e:2a:fa:19:22:a4:ba:70:72:77:
                    c1:00:ae:5f:a3:88:d3:ee:fb:90:6e:bc:4d:e5:4c:
                    57:c8:30:ad:d8:01:89:1e:c2:c6:8b:e8:7c:63:cc:
                    09:42:a9:1a:c7:ff:f8:76:8b:c7:8b:8d:4e:14:28:
                    a6:24:c4:8a:e0:d5:12:c6:ac:31:0c:28:b0:4e:a4:
                    4d:31:3d:89:94:54:45:29:0a:27:ad:64:b3:f6:04:
                    8f:2e:e8:a0:12:37:9c:3f:4b:57:4c:a0:3c:5c:9e:
                    94:39:8a:04:a3:0b:19:ce:ea:c3:56:62:69:8a:76:
                    40:be:91:29:06:55:e6:7f:84:64:8f:d0:ea:59:5e:
                    da:c5:e8:8d:33:7f:4d:7d:9d:25:57:34:9b:d7:85:
                    75:9d:7a:fb:82:30:a4:b8:5d:67:30:fd:ac:76:5f:
                    0b:dd:c5:1f:64:12:04:fb:98:a7:86:2c:45:d7:8b:
                    72:3e:43:0a:68:51:5d:be:51:44:53:af:f5:77:94:
                    86:97:e8:21:4f:b8:91:e9:bb:da:a3:08:96:f2:b7:
                    4f:7e:41:2a:4d:6a:c1:c8:29:e3:b8:a1:4a:b8:18:
                    75:e8:fa:cc:28:1a:8b:96:c8:cf:29:34:f8:66:ee:
                    a5:27:83:e2:ad:00:b3:f1:ce:97:ac:b0:9d:d1:e9:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:AC:0A:D8:39:0D:23:F8:57:9B:C0:02:4E:2A:D3:B4:D3:EF:05
            X509v3 Authority Key Identifier:
                keyid:6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:14:ba:41:2d:2f:b5:d1:4b:09:a8:0c:c2:12:f9:af:8d:e4:
         ee:0d:c1:61:4c:e4:7e:f8:e0:fa:49:82:30:f7:e8:8a:3e:e2:
         be:27:e2:0a:ab:b7:3e:72:16:34:dc:9c:93:36:0a:3f:06:aa:
         fd:d1:5a:7c:62:6f:10:a9:bc:3e:13:13:bb:b7:6a:55:4d:c9:
         3c:15:6a:3a:36:3c:83:3d:90:15:a7:77:4a:dc:66:93:d0:11:
         6e:55:db:a9:23:1c:5d:e0:8d:78:3e:12:a4:6f:c0:2e:d1:54:
         c2:7f:5f:77:1d:c5:64:d8:96:07:10:44:c4:bd:8d:df:4b:79:
         3a:d1:55:ff:fd:46:11:29:51:3f:59:b1:b1:b9:13:8e:7c:54:
         e2:36:f6:7c:81:68:5c:3c:bc:01:45:8c:c5:8b:ab:6e:48:61:
         2e:62:5e:bd:d3:2c:12:84:4f:e4:88:ac:c5:9b:3b:ef:54:6c:
         a6:e5:ce:76:e7:7e:e8:5c:c1:95:c7:9e:3e:e1:7a:e6:ab:26:
         a8:4c:7f:0a:bb:4d:aa:a3:8a:a6:fa:cb:1b:a9:26:4d:95:ca:
         43:7c:41:a4:1a:26:6d:c0:5e:95:bb:4b:9b:87:22:6a:e2:da:
         f1:7d:90:96:cb:60:97:2d:76:7b:6f:df:4f:99:d6:89:12:f0:
         4d:1a:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----