Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
File:                     HzhXx5DQI1940ThbDraTCwjzqOc.mft (raw, json)
Hash identifier:          sHaUltdN2phLbTaSyhYuT++W/5RJJXIfQAeGdfX8CQI=
Subject key identifier:   93:C4:46:FC:0A:74:01:32:0E:75:01:9F:2A:B3:6B:97:C6:69:C3:57
Authority key identifier: 1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7
Certificate issuer:       /CN=F365D714AF/serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
Certificate serial:       C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 05:30:37 +0000
Manifest this update:     Mon 21 Sep 2026 05:30:36 +0000
Manifest next update:     Wed 23 Sep 2026 05:30:36 +0000
Files and hashes:         1: HzhXx5DQI1940ThbDraTCwjzqOc.crl (hash: qTrIS2rfSXbG4cWcf3VH01TTziqs1IKM1oKApCSB7Jk=)
                          2: 8F463D3227AF11F1930A44A7DAE4EC9C.roa (hash: olApEm5VDBpoyz8XFSGTWF+ZGrgDV6oxvgIY+GR8RDU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365D714AF, serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
        Validity
            Not Before: Sep 21 05:30:36 2026 GMT
            Not After : Sep 23 05:30:36 2026 GMT
        Subject: CN=6ab0c0fd-c3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:bd:b0:51:28:4d:61:83:bb:c1:0f:a2:79:
                    e7:a4:52:e1:41:a3:2e:6a:7b:30:d6:4c:07:eb:b8:
                    70:cd:3e:28:aa:cc:73:a9:cc:d6:e8:af:c6:fd:97:
                    c0:b4:11:1a:12:27:b5:69:12:36:fe:3b:12:86:02:
                    0c:e7:0c:1b:9a:fd:52:d1:0c:b9:6a:ef:20:8f:d5:
                    fb:a2:cc:84:30:89:bf:7a:f5:9d:79:15:f6:d7:a2:
                    2e:b1:95:21:d1:76:f9:b6:86:e4:76:4e:84:d1:5a:
                    3f:8a:34:c3:41:23:3f:20:81:98:5d:94:9e:cb:72:
                    4e:66:77:30:d3:e0:cc:a0:78:d9:91:ef:f3:59:26:
                    b0:50:a0:c2:97:f8:a1:55:8c:ad:e8:cc:98:bd:3b:
                    67:e0:b6:01:10:4d:6d:3a:7e:56:e7:19:d7:65:81:
                    1d:18:1d:e0:6d:64:ac:bc:1a:de:c2:f5:7f:89:30:
                    c3:64:46:2f:87:4e:50:a6:4a:dd:3c:97:92:50:a1:
                    de:26:6d:e4:e5:56:10:0e:91:74:45:2d:3a:e5:80:
                    94:f4:7b:32:9e:92:ce:71:4d:41:b8:2d:b2:b3:3a:
                    3a:82:07:ae:07:e4:57:9d:c3:9b:37:72:0e:74:b9:
                    99:a6:15:74:d5:93:92:55:3c:e4:61:35:bb:09:a0:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:46:FC:0A:74:01:32:0E:75:01:9F:2A:B3:6B:97:C6:69:C3:57
            X509v3 Authority Key Identifier:
                keyid:1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2e:c2:2f:b1:0c:03:b0:16:bb:7e:16:ee:60:5a:2f:90:24:
         cc:a2:99:fe:41:ce:0d:6b:5a:25:b9:81:19:27:d1:2b:bc:fd:
         e6:77:2c:c3:0f:01:bb:1a:ff:d6:81:a1:79:5b:b8:16:b8:1e:
         07:ab:d7:4f:d7:63:24:e6:51:50:ee:b5:79:c9:82:e0:44:95:
         cc:48:52:ab:02:a0:19:6b:35:b3:c0:e7:26:e0:ae:47:7a:ac:
         22:4f:23:09:63:dd:7b:a8:c5:62:4f:1b:e2:54:45:b9:47:43:
         94:c5:f8:44:d0:b6:8f:26:9f:7d:1e:c7:29:b2:0a:69:13:0b:
         8a:a9:92:95:45:5f:11:23:5b:0c:88:d2:05:0d:8d:8f:0b:31:
         8a:dd:b7:d9:8b:9c:04:2c:c3:44:76:55:c5:2f:6e:c3:29:8b:
         4b:e1:01:0b:9d:02:c9:85:90:fe:c2:ca:2d:36:1d:34:17:b6:
         71:4f:6e:fb:84:fc:ff:cb:e7:1b:54:5d:a7:8f:59:28:1f:5d:
         ab:54:0f:a7:f9:27:eb:de:23:23:d3:6f:89:e4:78:fd:5b:4d:
         e4:a6:e4:34:21:50:e1:13:3c:ba:95:07:9c:0f:ff:50:5d:e7:
         59:64:dc:d9:03:c6:f9:72:6f:52:8a:cb:e3:71:1e:a8:df:74:
         10:6c:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----