Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          OilgQQCT95rK1Hbkw+SEe7iAYe0mx6qpRHb8riSZuug=
Subject key identifier:   84:6A:C7:18:36:B4:08:A2:A1:A3:13:65:80:12:44:5B:23:B4:39:85
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       0A1F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0A1A
Signing time:             Sun 11 Oct 2026 01:38:08 +0000
Manifest this update:     Sun 11 Oct 2026 01:38:07 +0000
Manifest next update:     Tue 13 Oct 2026 01:38:07 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: lbnZGiUF15kr10xxYEzQt2tdci/8c4Ppm3uZGmYXrLY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591 (0xa1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Oct 11 01:38:07 2026 GMT
            Not After : Oct 13 01:38:07 2026 GMT
        Subject: CN=6acae880-c626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:d9:de:3c:4b:fa:89:2b:00:55:0a:57:ac:
                    01:9a:e5:c9:08:31:b6:31:8d:04:f6:2a:2e:a8:06:
                    3a:69:23:ba:a3:62:b0:1b:a7:6b:08:73:e8:56:e7:
                    d0:10:46:a5:7e:29:de:6f:66:28:59:2e:db:b5:3a:
                    05:52:49:3d:7e:8f:e0:cb:fb:40:9a:b5:f7:1e:ff:
                    04:c6:2c:ef:b4:b5:2c:4f:f7:8b:b5:83:b5:69:73:
                    00:59:fa:80:cb:ee:7c:29:5b:69:f9:f1:03:5f:36:
                    42:bc:46:10:f5:36:74:f3:4d:59:5b:b1:5a:2b:87:
                    fb:6c:3c:17:c6:c7:02:ac:38:a8:fd:c8:15:6b:89:
                    7c:e3:41:a9:3f:3d:2f:22:b1:f8:6d:3c:11:f8:da:
                    0b:25:ba:6b:ce:aa:85:a1:51:c8:a4:f0:a7:8e:f0:
                    f8:5c:4a:11:9f:08:d3:51:c1:be:72:e0:e5:be:71:
                    5d:e4:05:f1:b7:21:c9:ce:77:80:33:38:aa:19:bd:
                    f7:d6:df:74:04:ba:04:92:40:98:e8:b1:4a:4b:8e:
                    a6:60:b1:97:f1:b0:d7:39:e6:eb:21:4b:af:80:4c:
                    cc:0d:4d:40:19:bf:7c:18:3a:eb:44:b0:53:f3:f3:
                    fa:c9:52:fe:a8:48:2b:78:a4:89:69:39:c4:c1:e6:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6A:C7:18:36:B4:08:A2:A1:A3:13:65:80:12:44:5B:23:B4:39:85
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:47:c2:70:82:1c:a9:0f:4c:ed:78:e1:d0:c7:4d:24:c0:89:
         a0:0d:d8:d5:bf:9b:6d:07:3d:19:d9:5f:07:27:d1:56:fe:50:
         b6:77:c4:df:77:6e:aa:4b:69:18:4b:6d:96:c6:e7:16:ea:bb:
         1b:1b:4e:dd:22:43:da:4c:13:67:34:41:1a:a9:2e:50:d0:10:
         87:84:95:26:ea:a4:c0:78:5f:64:d8:2a:fb:d7:e4:54:61:a0:
         df:87:bc:e1:df:18:0f:ae:74:e6:9c:12:85:93:ca:50:44:ea:
         85:e8:6c:9d:68:24:be:9e:14:47:97:11:ea:70:95:76:fd:19:
         a3:86:8c:00:54:c1:41:6a:d3:9b:f9:13:37:7a:49:29:81:ea:
         e7:b9:a4:01:92:bc:f8:f4:3c:41:71:b3:62:7d:9e:35:12:84:
         e9:fb:e5:6b:28:20:44:55:7e:d9:6a:15:e9:a3:a1:99:e2:9c:
         82:e3:78:d4:fa:79:a4:db:65:9b:99:c0:09:47:6a:3c:ce:ab:
         e7:5f:87:e4:a2:a1:d9:69:a2:3b:22:07:85:c2:b6:0a:23:20:
         ba:a0:69:2a:10:b0:b4:ed:af:7d:d8:0a:11:89:0d:06:ce:93:
         9b:a2:f4:57:a7:55:53:a5:fd:55:e6:44:8b:ef:f0:96:1c:0b:
         fc:12:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----