Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File:                     zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier:          WWZnWTUemVkb731d1QZYihg/gVOEMLAYiNKnJwPvBgQ=
Subject key identifier:   F2:60:8F:90:84:F6:4A:E8:07:B4:20:15:9A:83:C6:1B:D5:50:9B:5A
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer:       /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial:       017D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number:          017A
Signing time:             Sun 20 Sep 2026 05:09:47 +0000
Manifest this update:     Sun 20 Sep 2026 05:09:46 +0000
Manifest next update:     Tue 22 Sep 2026 05:09:46 +0000
Files and hashes:         1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: VnhHBEQG785DaSQ89gY2pwG9vkPveZz6BDnWL28P3Ak=)
                          2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
                          3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
                          4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
        Validity
            Not Before: Sep 20 05:09:46 2026 GMT
            Not After : Sep 22 05:09:46 2026 GMT
        Subject: CN=6aaf6a9b-0156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:d3:d3:a9:e0:5f:b3:59:97:e2:93:5b:35:
                    1f:36:e0:2f:a4:cb:66:bc:5d:92:b3:a7:ae:b4:f8:
                    24:8a:c3:e9:e6:c3:37:ce:e8:76:72:7d:fc:91:06:
                    be:3b:aa:77:ba:89:6f:d4:10:41:92:25:99:a9:60:
                    73:53:07:38:3e:80:7c:f2:2d:7e:bf:68:cb:b4:e6:
                    af:f3:a5:cd:c3:3e:cd:d0:03:4c:91:af:42:2b:3a:
                    f5:b7:62:45:be:d4:29:22:8d:33:df:c4:9d:24:a9:
                    1f:01:3a:02:7f:59:8e:2b:c2:b7:4a:eb:fa:cc:8a:
                    fa:6b:f6:45:a6:77:c8:03:f4:d6:33:6a:f1:43:4d:
                    19:cb:ae:e4:de:7d:15:d3:01:5e:0a:4c:0d:94:e2:
                    77:e5:e3:5a:0f:82:ff:52:ca:4a:fa:5a:cb:a8:13:
                    e1:ca:42:75:ff:9a:a5:61:58:40:5c:fa:d9:37:76:
                    00:f6:ef:94:dd:25:3a:fb:a4:69:35:0e:ae:bf:2b:
                    0e:3b:48:6d:6e:01:0b:91:09:65:c1:99:b6:a1:46:
                    9c:8c:a1:a4:97:0e:72:6a:52:53:be:2d:75:8f:12:
                    6c:94:42:18:7b:01:10:73:df:36:b1:a9:03:46:a8:
                    bd:63:32:83:1f:40:01:2a:64:43:2f:7a:a3:ec:d7:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:8F:90:84:F6:4A:E8:07:B4:20:15:9A:83:C6:1B:D5:50:9B:5A
            X509v3 Authority Key Identifier:
                keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:df:91:34:b1:c4:19:ae:87:b2:c0:17:b0:ee:5a:c2:8d:3b:
         79:27:ce:50:5f:0f:b4:1a:b5:1b:d1:16:c4:f4:41:44:7e:b1:
         cd:0a:9d:5a:b6:88:85:01:36:b3:b2:ef:3d:04:46:be:63:d2:
         15:29:d6:d2:34:c6:c4:7f:83:ea:d6:7f:0e:5f:c2:54:a8:42:
         45:14:da:41:df:57:bc:c2:a9:81:8b:ee:79:8e:6a:1d:ce:dc:
         1b:6f:3c:a8:8e:0e:74:d7:1e:1f:77:f8:b2:fb:2a:61:3c:d0:
         2a:ca:7a:c4:e3:37:dc:f5:d4:5c:63:ba:cd:17:ab:55:93:63:
         3b:a3:11:ae:cf:87:bc:16:e8:b2:a7:51:c4:df:d5:24:5d:be:
         ed:21:3b:71:f8:4b:70:e7:81:e1:10:d3:57:5f:fa:59:d0:14:
         e4:16:d2:c7:cc:c6:d6:23:37:12:4e:f9:82:b0:fb:af:84:55:
         ed:db:29:92:ff:2f:32:4f:e8:3f:6c:7c:6b:05:ca:bf:35:17:
         54:5f:99:5d:b7:1e:e3:13:42:8b:a7:cf:61:aa:fd:d6:ad:3e:
         61:af:f0:d3:4c:3f:54:e5:0b:bc:95:7f:a0:b9:c7:ad:fb:85:
         5d:05:ab:d3:96:ff:4c:ed:bf:6e:f4:91:7e:d5:81:8a:5c:71:
         23:b0:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----