Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
File:                     2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft (raw, json)
Hash identifier:          xW91JAaMBydGisfwK3vyb4s6oHl+wQQJ5PAtX2x1x2s=
Subject key identifier:   13:16:67:A3:21:32:3A:49:AA:7E:B5:1F:AE:4A:19:75:00:A6:41:29
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Certificate issuer:       /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial:       0753
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
Manifest number:          074F
Signing time:             Sun 20 Sep 2026 02:24:25 +0000
Manifest this update:     Sun 20 Sep 2026 02:24:24 +0000
Manifest next update:     Tue 22 Sep 2026 02:24:24 +0000
Files and hashes:         1: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl (hash: hNAVpPW9iS9/JxT2wKx9ONiVtVmYRMdHEX4nNHA3FuA=)
                          2: 41154872962911F1979923DACE1D38B0.roa (hash: 5lt3Yq+7+mrDu7Rgxl913ugiuhww8fYeSDHdmofrW5s=)
                          3: BE375CAA962911F1878869DCCE1D38B0.roa (hash: Y3X1SBiD4AkB1iF8TfEGnqcGwMoyf7vwpW8s0D8Pl5I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875 (0x753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686F75AF, serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
        Validity
            Not Before: Sep 20 02:24:24 2026 GMT
            Not After : Sep 22 02:24:24 2026 GMT
        Subject: CN=6aaf43d9-855f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:17:56:bd:b1:2d:86:bc:41:3a:ef:40:5f:
                    ab:80:ec:1c:f6:30:a1:01:3e:20:94:3e:40:32:52:
                    2a:68:ec:e9:d5:e2:ff:b6:33:b9:dc:6b:6b:13:4f:
                    a7:66:d8:d7:be:43:77:63:f2:5b:fa:cd:8c:85:3a:
                    40:35:f1:bd:3c:c0:04:15:bc:42:df:19:b6:13:d8:
                    09:16:43:9f:12:c9:a3:69:86:1d:38:8a:cc:e5:91:
                    ef:bb:b8:13:58:11:34:5d:03:b4:f3:e6:e5:1c:a2:
                    ec:43:c6:64:18:f7:81:42:50:f2:aa:24:4c:07:47:
                    b2:97:bb:d4:f6:63:0e:1f:f9:49:88:68:46:b4:a4:
                    72:8a:05:59:bf:8d:df:1a:ba:8a:09:f9:e3:1b:1e:
                    21:a5:98:3b:c9:13:e8:ed:c2:29:8f:a7:07:57:27:
                    b4:cb:b1:c9:dd:77:d4:cd:2d:10:70:48:14:69:8d:
                    29:0e:14:0e:bd:66:ce:15:00:5b:8f:88:90:59:76:
                    a2:50:58:a7:ab:5d:06:e3:14:5e:83:98:47:7e:46:
                    3f:83:42:10:37:27:7b:fb:53:b6:0f:4b:4c:22:52:
                    59:a7:d1:45:53:b9:b1:54:f9:11:f0:c3:f2:90:a9:
                    fa:47:6d:ad:31:ee:c6:ea:66:dd:bb:4d:43:7a:e1:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:67:A3:21:32:3A:49:AA:7E:B5:1F:AE:4A:19:75:00:A6:41:29
            X509v3 Authority Key Identifier:
                keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:87:da:40:98:eb:c1:04:e1:3c:cb:86:61:b8:f3:1e:ed:a8:
         d2:6b:a6:f2:6e:7d:bb:f6:bc:8a:7c:e8:52:36:d0:73:91:3c:
         3e:db:48:21:01:d0:8e:09:17:af:55:53:8e:d9:97:b4:3b:7e:
         e8:6e:aa:de:50:5e:14:ed:26:cd:bd:8d:64:5f:30:76:b9:81:
         15:02:26:1d:34:bb:7a:a0:67:e4:87:f8:1c:7f:a0:8e:4e:d8:
         48:69:8e:3e:b2:0b:9e:5e:66:36:33:56:1a:1a:2f:40:04:9d:
         80:a9:21:61:41:d1:75:8a:d1:68:c4:74:3b:f9:6b:ca:64:f2:
         77:13:e0:7a:4e:45:82:1a:dc:b2:c1:41:d3:8e:c9:18:46:a6:
         22:ba:63:34:40:7f:05:f3:7a:4e:02:36:3a:4b:0d:a8:e7:e5:
         5e:6f:0a:08:9b:70:c5:4e:19:ec:b4:14:53:7c:e3:eb:91:0a:
         ac:00:62:c0:cc:80:44:2b:75:01:e3:a3:03:cb:f7:98:55:eb:
         19:0d:00:49:4a:ec:23:91:82:6b:c5:a0:cd:cc:91:6a:b2:9a:
         60:53:f7:36:5f:dc:4c:4d:53:bc:06:26:79:c6:c7:bd:42:67:
         e9:a8:17:9d:e5:f1:8d:9e:fc:fb:fe:ca:af:d7:14:2c:6c:17:
         67:43:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----