Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File:                     ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier:          sK04Pf1izGJfGMu7HsTCty8ZUI2Hs/+gjQbODK+2l20=
Subject key identifier:   B1:BA:9A:2B:34:4C:37:9E:9B:A4:00:8A:67:77:BA:1A:79:0A:63:B2
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       0593
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number:          0589
Signing time:             Tue 29 Sep 2026 03:08:11 +0000
Manifest this update:     Tue 29 Sep 2026 03:08:11 +0000
Manifest next update:     Thu 01 Oct 2026 03:08:11 +0000
Files and hashes:         1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: JK4aVcQizMrsqI9H1pVhgInwyHy3VJZcRmUCQr3fL5w=)
                          2: FF2158528AA711F1B550CFF0CE1D38B0.roa (hash: cZ1trg8d+F5o+UUdS9EJoldliC9ZeXJBsBQSd753BjQ=)
                          3: 992D4D268AA711F195A7CFECCE1D38B0.roa (hash: sZQhcPLiBX/Tc/KviHIxHQCpBR2q2wGBC3IndjYyl3M=)
                          4: 42CD7A328AA711F1BDD8B5ECCE1D38B0.roa (hash: DuDVtP8ufRkIHxwSxkSH7iTRXAL2+9UFTBMr8aoAQDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1427 (0x593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Sep 29 03:08:11 2026 GMT
            Not After : Oct  1 03:08:11 2026 GMT
        Subject: CN=6abb2b9b-d6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:45:5a:fa:0c:02:54:e9:b9:4d:02:d5:49:
                    0d:fd:c4:33:78:fc:35:44:b4:da:0c:3b:a2:a6:52:
                    55:48:82:7e:e4:89:8a:09:e0:18:5e:8e:48:e5:8d:
                    ef:f1:fe:34:b7:61:eb:50:f2:86:84:62:a6:4b:73:
                    41:8a:42:23:c3:cc:c3:43:d9:ff:53:21:d3:c0:44:
                    82:1d:2d:9c:97:5b:33:83:7a:f5:c4:5b:12:63:0c:
                    d1:54:90:5f:12:b8:6a:c7:53:08:0c:7f:db:4d:28:
                    f5:5d:55:86:eb:92:ec:32:64:9c:1d:6c:e5:41:87:
                    b2:5e:9f:47:1f:5a:99:54:65:fa:f9:a0:39:4d:d5:
                    8b:03:e5:ad:33:c0:57:f7:c9:ea:b4:1b:1b:3d:71:
                    25:90:fc:d4:14:c7:0d:39:8e:93:9b:fd:e0:2c:1e:
                    6c:fa:c1:75:f7:39:52:2d:b5:89:eb:50:b9:10:22:
                    a6:da:08:c2:fc:9d:65:25:cb:0f:10:2d:53:42:04:
                    33:c4:f0:2b:b5:31:bf:39:6a:e5:bd:74:49:3b:1a:
                    d3:0a:08:a7:fe:b3:81:c1:83:bd:ba:45:a9:a8:4a:
                    b1:d0:c5:98:ff:d0:b7:1e:40:b1:03:d1:f2:7b:2c:
                    dd:47:74:e8:28:98:f6:d2:a1:9e:b3:2b:c4:b6:13:
                    d2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:9A:2B:34:4C:37:9E:9B:A4:00:8A:67:77:BA:1A:79:0A:63:B2
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:8d:33:12:b9:ad:d9:57:cd:dc:92:5b:81:43:35:8d:7b:
         2c:ca:3d:39:40:42:a1:71:10:7b:40:41:a3:52:ec:41:0c:f9:
         69:6d:54:4c:b0:1d:e2:e4:a0:a6:91:0a:79:6b:ca:2f:47:91:
         94:c3:e8:3a:68:67:55:80:87:35:ef:b5:bb:d8:73:29:ea:8e:
         bb:09:73:5f:58:f3:2c:8f:ad:3e:fa:c5:d2:d9:64:e7:29:79:
         58:4b:7a:37:07:81:0f:33:42:9d:44:e9:81:75:cd:40:27:d5:
         36:03:77:62:8a:d0:f5:47:7f:6d:2a:84:e3:ee:c6:db:67:91:
         b0:87:47:9d:2c:4d:9d:3c:d4:90:cb:1a:47:8b:23:14:66:6a:
         23:49:d2:6b:38:f2:70:a8:5d:06:8d:6b:a4:d5:13:aa:2d:12:
         80:3b:72:6f:4a:05:dc:8f:44:f4:ed:d5:f3:e9:db:43:8d:4e:
         33:fe:9b:c5:33:76:cd:25:a8:7c:c0:fd:63:e8:e1:1f:46:73:
         a8:8d:4d:c6:b4:e2:ad:cc:22:1a:3a:cb:c2:87:ef:85:ac:7d:
         cf:c1:c7:6a:49:0b:28:e6:e2:a1:5f:5f:09:8f:b7:66:6e:15:
         cd:da:3a:c1:45:8c:6b:9e:84:01:3d:66:04:1f:07:c0:79:a3:
         22:39:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----