Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          7Lknv2P7Wrjw/Ijhy6mIXRsO838mK0wUcUBUJf0gDik=
Subject key identifier:   61:52:E8:4B:67:05:24:A4:4D:6F:EC:E0:A4:4A:0E:C3:DA:65:D0:E5
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0AA0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0AA0
Signing time:             Sat 10 Oct 2026 01:31:10 +0000
Manifest this update:     Sat 10 Oct 2026 01:31:09 +0000
Manifest next update:     Mon 12 Oct 2026 01:31:09 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: H5YfYkGFO+yxZ1vBNeWM0hwNEjHtQF4zeD0iZ389Jb0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2720 (0xaa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Oct 10 01:31:09 2026 GMT
            Not After : Oct 12 01:31:09 2026 GMT
        Subject: CN=6ac9955e-62c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:bb:0e:bc:ae:9c:ff:15:75:71:d5:04:02:
                    1e:85:5f:f5:84:36:a2:ab:79:ec:65:41:b2:f8:4d:
                    72:cb:a3:3c:c1:c0:ea:f5:59:eb:88:9d:43:22:c0:
                    27:f5:3f:96:8b:60:81:ba:25:6e:bd:4b:c7:17:3c:
                    57:07:ab:60:d1:80:c1:70:0a:3a:ee:c9:66:de:85:
                    f9:dd:a6:68:fb:f4:62:44:cc:3a:f7:42:4e:0a:ba:
                    35:1f:04:3b:ac:e4:f0:0e:e1:67:45:32:25:28:8c:
                    6b:21:84:3b:4b:82:93:b9:75:56:9d:92:b6:c5:25:
                    98:b7:2b:54:d9:16:81:31:69:70:7f:51:81:f8:b9:
                    03:b4:d9:ec:04:22:b3:0f:bb:9a:7f:30:7c:f2:4a:
                    8b:16:4a:fb:55:42:49:f3:96:aa:02:4a:b5:5a:f0:
                    7c:81:68:14:82:b7:7e:a0:09:5f:b0:4a:7b:8a:8d:
                    39:49:79:3a:b5:19:0c:99:64:d8:0f:cc:dd:33:4b:
                    e1:a8:8b:d2:6b:b2:6c:59:75:14:8a:d0:21:62:c9:
                    4f:28:6b:7b:93:2c:03:8f:6d:9e:55:28:b4:30:57:
                    8a:d3:94:20:c3:91:26:a8:59:41:53:f9:c5:b2:0c:
                    f8:00:f8:d1:f3:d3:91:e3:75:92:4b:7f:87:ea:e3:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:52:E8:4B:67:05:24:A4:4D:6F:EC:E0:A4:4A:0E:C3:DA:65:D0:E5
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:17:1d:98:9c:b7:1d:96:77:f6:e4:94:47:5b:83:a8:16:
         cd:a3:15:0a:ac:bf:c7:35:e3:e3:ee:d0:03:b0:e6:53:3e:98:
         dc:5a:f1:dd:97:6c:02:29:31:b7:52:1d:24:11:a9:1a:6f:25:
         92:7e:e5:ba:ae:d5:4d:45:4f:5e:5a:a0:b1:6e:42:53:25:f7:
         86:97:ea:26:10:62:d9:f5:9b:47:dd:e6:53:34:1d:5a:c3:54:
         07:61:b6:52:28:6c:fd:fa:8d:28:2f:ec:14:90:89:84:4c:09:
         8f:bd:72:66:a7:21:37:99:86:d3:6c:5b:23:95:bb:a8:53:eb:
         ae:36:6c:c6:01:61:cd:a0:32:e3:94:30:63:32:58:bd:41:1d:
         1a:44:49:af:bf:b9:fc:5f:50:da:fb:57:49:3f:00:54:57:6d:
         27:ed:48:36:50:24:50:db:45:d7:a3:d0:ed:2e:bd:70:90:5e:
         bc:c1:88:21:fa:0a:ca:3d:8a:31:2e:33:ee:f0:f0:9b:db:ae:
         a1:a4:4d:c1:09:7e:0a:4e:28:60:8c:e3:92:04:2e:86:0d:1b:
         af:d3:52:8e:df:60:1d:e1:52:ad:53:4a:8f:e7:cb:9c:ec:fe:
         83:30:a4:22:9d:3e:f7:5b:1d:60:93:41:1b:16:c4:cb:8a:0c:
         94:bc:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----