Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
File:                     BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json)
Hash identifier:          Q+G3C+erCfQ7z/YEqbpCnOop+8sG/wKE9SedfCFU50I=
Subject key identifier:   1F:3E:0D:6E:B0:79:7C:26:CA:BE:CD:A1:7A:A2:7B:0C:7A:C3:F2:10
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       05FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
Manifest number:          05F0
Signing time:             Tue 22 Sep 2026 02:59:23 +0000
Manifest this update:     Tue 22 Sep 2026 02:59:22 +0000
Manifest next update:     Thu 24 Sep 2026 02:59:22 +0000
Files and hashes:         1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: sIUfecfaYdLBXXDM9nZ6RXNzbl3oOHD7Tf6BsR4D1NA=)
                          2: 3DF983F290BA11F18AAA01EFCE1D38B0.roa (hash: Qh6y/eRMD6dSAiahenNmTxPPjoSpFyv4fHKPBYfl+Lw=)
                          3: 4509867C89A011F18FB096A9CE1D38B0.roa (hash: aPImwy1cVOEqmtUCa7IvTsb8BnZ1qt4uplLTZBIsKrA=)
                          4: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=)
                          5: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
        Validity
            Not Before: Sep 22 02:59:22 2026 GMT
            Not After : Sep 24 02:59:22 2026 GMT
        Subject: CN=6ab1ef0b-29b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f0:de:44:a6:9e:da:e2:c3:c4:79:4e:c0:78:
                    e0:ac:f6:1e:ce:4b:cc:a9:33:82:6a:d0:53:2a:b5:
                    90:17:50:bf:ca:f3:33:f4:49:2e:57:d7:b5:a0:d0:
                    2f:b0:c4:be:54:76:b1:35:b0:5c:a6:9d:97:20:ba:
                    c1:1e:ec:54:f4:54:59:ef:10:71:9a:7e:bf:87:0c:
                    7e:a7:f8:cf:c8:c8:56:88:57:be:28:8d:04:f1:ad:
                    f7:ea:57:29:52:6a:be:2e:16:72:ce:13:98:b2:f3:
                    0e:46:e8:85:72:1d:ec:90:43:04:c2:4e:ca:0c:07:
                    f1:12:7c:70:6e:3b:8c:a4:a2:b1:24:e4:12:d5:c4:
                    35:73:ff:22:13:cf:b7:ea:cd:85:e1:cd:22:64:12:
                    f2:32:63:89:7c:0c:23:97:d9:1a:a3:15:42:d0:83:
                    40:5d:9f:6b:bd:ed:55:ed:a1:cf:eb:44:d7:a2:63:
                    34:0a:76:81:a4:07:82:d8:22:ac:66:8c:68:94:30:
                    3b:d2:e2:a2:3d:e8:9b:12:84:47:63:2d:d5:db:c0:
                    50:1d:91:74:81:97:18:bc:0a:6f:44:0b:57:74:59:
                    c5:83:65:82:45:a0:77:f2:f0:31:a4:b1:41:96:ed:
                    c4:da:9c:c4:99:e1:aa:85:fa:65:82:ac:a7:3f:ce:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3E:0D:6E:B0:79:7C:26:CA:BE:CD:A1:7A:A2:7B:0C:7A:C3:F2:10
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:96:65:2b:36:b0:71:51:5f:1e:37:4f:b6:56:92:b5:6c:2f:
         c3:cb:7d:19:5f:89:06:0f:2f:03:cf:d0:5f:e2:23:02:3c:81:
         3d:06:0d:de:23:9e:e2:b3:0b:34:10:71:6f:cb:a6:42:30:e8:
         58:65:af:1c:08:86:ae:aa:c1:03:1f:d0:a5:42:1b:71:88:dc:
         90:da:a3:5e:57:60:df:08:50:74:0b:ce:a4:21:04:7a:a5:70:
         fd:1a:6d:18:83:3e:cc:e2:9e:aa:94:b5:66:97:39:28:af:8c:
         10:70:0b:48:a3:2f:3f:60:93:b9:aa:23:9e:23:2a:88:65:bb:
         70:bb:65:34:f4:ee:07:01:19:5f:3b:f6:68:e3:6d:25:d5:5b:
         fc:5c:01:e8:1b:68:f5:cf:e4:98:47:d1:58:16:d6:15:40:40:
         6a:16:1b:00:20:d6:f8:32:64:cd:00:b8:82:8e:82:31:51:4f:
         20:d3:04:bb:d0:ab:41:ac:bf:60:9a:1c:f3:3d:1f:28:c2:62:
         3b:f2:67:8b:42:bb:d4:d9:3c:e4:1c:8a:df:da:0b:a5:4f:ef:
         4e:1e:e2:29:54:a0:c4:5c:f1:c3:9f:ac:b1:c3:28:e3:32:6a:
         ca:e0:57:c7:32:df:a7:b5:16:9a:ce:f9:54:8e:c5:1d:31:86:
         3a:22:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----