Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
File:                     7KUu1usrGLOvGbp5LPM-AO_td-o.mft (raw, json)
Hash identifier:          PNIsdyzd6USVOBMR9n3UmcmLbIPHf+Fr19GEJmVrunk=
Subject key identifier:   DE:44:11:BF:3E:7A:AC:AA:8A:06:E0:D2:D8:94:DE:70:04:63:8B:9E
Authority key identifier: EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
Certificate issuer:       /CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Certificate serial:       09F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
Manifest number:          09F5
Signing time:             Thu 24 Sep 2026 01:40:54 +0000
Manifest this update:     Thu 24 Sep 2026 01:40:54 +0000
Manifest next update:     Sat 26 Sep 2026 01:40:54 +0000
Files and hashes:         1: 7KUu1usrGLOvGbp5LPM-AO_td-o.crl (hash: fTg25Cls7E0BZpNDjh/8WRUg4Z4V8FKOUT8EzOZ25d4=)
                          2: 72E4BD0412B111EA9EACDA3AF8AEA228.roa (hash: lEGlEyNpK2D28OfWSczq5nyD+T86uHXMrbx63t8Ft0s=)
                          3: 5142A9C212B111EAAF53AF3AF8AEA228.roa (hash: xG/mwLzjMt/AD4VCyWzSqQgk/KYhEOItbq9UQDh1nvU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678D2DAF, serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
        Validity
            Not Before: Sep 24 01:40:54 2026 GMT
            Not After : Sep 26 01:40:54 2026 GMT
        Subject: CN=6ab47fa6-2dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:92:28:25:9a:f0:70:68:53:9a:2b:9f:c0:
                    e3:78:2c:31:79:2e:5d:33:06:69:39:cc:26:a6:fe:
                    14:9f:25:5d:74:34:14:7b:23:75:7a:f8:4a:33:b0:
                    33:94:65:3b:99:fa:d3:0b:a1:7d:8f:d2:5f:dc:03:
                    a7:3e:76:d5:e1:dc:aa:e0:ed:73:69:e5:7e:e6:93:
                    ce:b5:74:8e:fb:b2:d0:69:93:d3:79:3e:ed:d5:2b:
                    19:68:b7:66:f9:4b:6c:9d:b6:80:57:0c:4e:b3:27:
                    1a:20:d1:d3:8a:d8:66:89:a0:67:5f:15:0c:ff:a8:
                    75:4c:36:ab:4c:ea:07:83:d6:37:79:7b:ff:17:9c:
                    45:61:45:4d:52:7b:bf:e4:dc:9a:a5:92:67:18:49:
                    e0:ad:5b:5b:f1:62:dd:2d:e5:4e:d3:3a:b3:80:73:
                    2e:c7:a7:b8:79:11:44:dc:21:9c:7d:8e:e1:ed:eb:
                    08:f5:6a:13:6b:91:14:19:32:c3:f7:a2:ee:62:18:
                    fd:7a:e3:af:73:0b:61:a6:f5:56:06:76:0e:86:85:
                    95:cd:23:87:06:03:b5:ad:63:57:6f:6d:e0:05:6d:
                    22:1c:7d:42:5d:54:da:94:98:56:59:58:c3:c8:48:
                    5e:dc:de:f8:3b:49:95:b2:2b:22:31:67:1b:7b:cd:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:44:11:BF:3E:7A:AC:AA:8A:06:E0:D2:D8:94:DE:70:04:63:8B:9E
            X509v3 Authority Key Identifier:
                keyid:EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:18:19:e0:11:c9:90:c1:cf:82:ef:c0:c1:f7:09:d4:d2:49:
         dd:16:dc:44:f9:7f:15:31:81:2a:76:12:77:e4:78:12:b8:ff:
         3b:30:46:d1:75:5a:42:48:b2:a4:62:bc:fd:81:0f:ae:0c:ce:
         8b:8e:ab:c5:81:62:82:41:f2:71:77:e2:bd:e7:9a:06:f3:77:
         4d:26:98:8d:d6:5a:b6:83:f6:82:df:68:8f:66:f5:89:ba:79:
         0f:ab:7f:d0:72:00:62:41:19:e0:c3:8f:0e:14:29:f9:35:e6:
         1f:64:d8:5d:a7:1f:fa:00:73:c7:c7:35:45:e2:d3:dd:d5:59:
         77:e4:df:33:1d:c4:eb:6c:f4:78:9d:47:af:6d:03:94:4f:32:
         35:08:ce:1a:dc:44:ed:96:62:67:b1:b8:c3:aa:df:71:ce:54:
         b7:b4:9e:e8:77:e3:85:45:b0:c6:ac:66:2e:0f:8a:b0:12:31:
         f3:17:2b:63:7d:21:9d:ad:aa:dc:08:58:b3:ec:7f:da:e1:b4:
         aa:84:69:09:04:c0:8e:de:05:76:94:cc:f1:53:04:81:54:e9:
         7f:be:6f:71:e4:b5:ac:63:fd:dc:8e:22:d7:a4:de:8e:a6:e2:
         00:02:cf:14:41:34:c7:2c:0a:c6:57:f3:f8:5e:34:67:f3:10:
         09:ff:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----