Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File:                     B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier:          iDeD/AKgY+rrjGN/7m/Hq5BJPFxUTnyESzqwiFrk+fI=
Subject key identifier:   B8:C5:2A:F2:A3:0E:B1:D0:C6:4A:22:FE:92:FE:6C:AB:DF:09:22:F2
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer:       /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial:       0229
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number:          0228
Signing time:             Mon 21 Sep 2026 04:50:06 +0000
Manifest this update:     Mon 21 Sep 2026 04:50:05 +0000
Manifest next update:     Wed 23 Sep 2026 04:50:05 +0000
Files and hashes:         1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: 0RBPrXPgJbfkTAjxbaWA6oqB8kf3xCMTRT4FZ9SoVnc=)
                          2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
        Validity
            Not Before: Sep 21 04:50:05 2026 GMT
            Not After : Sep 23 04:50:05 2026 GMT
        Subject: CN=6ab0b77e-bf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:c9:be:03:34:8a:a5:ad:47:f2:5e:5d:a6:
                    83:86:4d:f8:7a:ec:d3:b9:1f:28:00:33:be:9f:55:
                    39:0b:66:94:0b:05:bc:f0:f0:d6:9e:8d:b6:ca:9c:
                    81:64:72:30:1c:f5:32:9a:72:ac:ad:4f:8c:f5:d5:
                    0c:e6:f0:41:3f:60:23:56:93:aa:0d:3c:9c:2e:0d:
                    55:09:80:03:b8:b2:d5:39:bc:4f:bc:2a:04:25:36:
                    b4:8c:31:2c:fb:60:00:2d:a7:89:7a:53:6f:57:bd:
                    a2:27:5f:75:19:99:d0:4c:37:05:dc:33:84:90:5f:
                    83:bf:a0:47:d2:59:a2:e7:cd:3f:37:03:e7:f4:88:
                    41:d5:cb:aa:e5:b3:25:d6:2e:25:29:b5:97:4b:9a:
                    8b:cd:65:af:77:b4:00:c1:ba:88:77:6f:f3:96:da:
                    a9:2a:b4:1c:3d:00:c5:2a:ee:41:0a:ee:62:62:42:
                    f5:22:03:94:e6:18:98:1b:35:87:1e:5e:54:1d:8e:
                    77:72:e3:ee:e8:5a:8d:4b:98:42:14:ad:00:a3:22:
                    4e:b5:39:dc:b6:24:0f:42:86:48:4c:d7:74:4a:7f:
                    f7:56:f0:2d:3c:f6:d9:6b:01:4f:d0:a8:70:26:14:
                    43:bd:33:bf:4e:bd:2d:94:3a:ed:ac:3d:f3:de:78:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C5:2A:F2:A3:0E:B1:D0:C6:4A:22:FE:92:FE:6C:AB:DF:09:22:F2
            X509v3 Authority Key Identifier:
                keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:48:96:f4:d6:c1:c6:7b:2d:16:b3:52:eb:86:73:88:73:
         53:f1:b9:8a:f2:1b:22:43:fe:a2:64:de:37:70:d0:e5:d2:5a:
         f7:6e:1d:23:b1:01:e8:86:9d:36:0f:0f:6a:3c:9b:46:bc:b8:
         6d:65:09:88:84:f7:68:d3:db:a9:99:39:64:21:e5:f1:da:30:
         9b:f6:f3:2a:db:12:a4:00:9b:7e:8f:7f:78:46:5c:ae:94:d8:
         c8:d2:88:25:ed:65:17:c0:10:e6:6b:22:72:01:99:c3:52:f1:
         4e:36:02:36:00:59:01:5b:0e:78:fa:01:c1:a3:b3:61:fc:bc:
         08:97:32:75:b3:a2:16:2a:48:48:86:5e:d6:c5:23:d4:5c:ac:
         d9:36:66:06:9f:15:99:45:b3:b2:20:0b:f4:95:f5:3e:e9:b9:
         d6:50:da:6c:32:65:4a:a8:a5:61:d6:08:f8:e2:12:88:89:a9:
         fe:62:54:a4:0b:8f:68:43:2d:97:06:19:20:e8:39:82:de:69:
         48:b2:69:94:1b:9f:b9:bf:0b:ac:e3:f3:d5:dc:48:a1:ef:b7:
         dc:89:ad:2f:7b:c1:a3:9f:9f:c3:97:87:09:6f:2b:16:95:5e:
         61:10:12:9b:52:4e:e8:23:70:1b:20:80:04:3f:c6:82:49:39:
         86:95:00:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----