Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
File:                     B0Bo8Lwdf2xlr15SAuIhENaFelk.mft (raw, json)
Hash identifier:          RqTSfnRCRZrvSWjLAyIRnUThx3z6qV2L1jr+sMA8og4=
Subject key identifier:   41:78:DC:12:D8:BC:F3:82:6A:B8:86:4C:DC:C7:C2:A2:9E:EF:CE:A3
Authority key identifier: 07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59
Certificate issuer:       /CN=F368D59FAF/serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
Certificate serial:       AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
Manifest number:          AA
Signing time:             Mon 21 Sep 2026 05:31:48 +0000
Manifest this update:     Mon 21 Sep 2026 05:31:47 +0000
Manifest next update:     Wed 23 Sep 2026 05:31:47 +0000
Files and hashes:         1: B0Bo8Lwdf2xlr15SAuIhENaFelk.crl (hash: o1pcxCYVswAaE4f005TGQbx8Ku192ejQKTn2Wh1UcYc=)
                          2: CDA23108324A11F1B60EAEB9DAE4EC9C.roa (hash: cE1RonJWQjRj/5iPA//z9En6WXcsSeuTNBdrevPeLx8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D59FAF, serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
        Validity
            Not Before: Sep 21 05:31:47 2026 GMT
            Not After : Sep 23 05:31:47 2026 GMT
        Subject: CN=6ab0c144-8c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:ff:03:46:72:c0:59:ca:01:cd:f9:a2:d2:
                    77:57:d4:15:fb:d7:11:19:3f:52:13:70:4e:16:f2:
                    fc:e0:b7:8c:e4:67:19:0f:29:fa:33:91:c5:3a:7c:
                    e7:aa:af:45:5e:e2:5d:30:ab:44:74:f8:ec:32:d2:
                    5d:5b:8b:46:b9:7a:6b:41:12:cc:5e:ba:e1:0b:bb:
                    6c:e2:45:1a:bc:27:5d:ba:be:4e:23:b0:64:aa:40:
                    1f:3b:a8:fc:be:30:05:4a:16:52:d4:fa:4f:48:03:
                    31:b5:f1:7a:0c:dc:79:e3:6c:a5:a8:55:c6:38:f4:
                    17:0c:84:24:c6:29:ff:b0:c3:31:ad:8a:46:c9:92:
                    ae:27:38:4f:95:1b:6b:92:29:4f:7e:17:1a:73:11:
                    b6:3a:ac:5c:6a:44:bf:36:0c:2d:d0:0f:e7:26:de:
                    01:c9:14:8e:0a:59:93:b3:33:0d:6c:c7:18:ba:8a:
                    f8:c2:e5:8b:67:8c:e8:02:cb:8c:28:59:e1:14:75:
                    fd:ce:cb:8c:a5:44:1f:8c:b2:1f:3d:ea:8a:0d:5d:
                    02:bd:cc:6d:df:ae:d8:65:a2:4c:0c:84:56:b2:13:
                    06:9d:ab:8a:d5:b4:77:a1:79:ec:8a:09:61:56:df:
                    96:53:5a:18:46:bd:59:71:81:76:c4:1a:46:98:25:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:DC:12:D8:BC:F3:82:6A:B8:86:4C:DC:C7:C2:A2:9E:EF:CE:A3
            X509v3 Authority Key Identifier:
                keyid:07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:f2:69:51:de:5c:48:00:01:46:7f:62:2e:03:46:60:3d:
         46:6c:e0:03:2d:bc:af:a8:7b:e1:65:68:d0:44:a1:eb:e5:02:
         17:41:6d:97:46:64:5c:09:2e:b2:37:e8:32:0d:ed:44:ce:88:
         90:6a:d8:4b:d1:af:cf:01:7b:ae:a8:24:00:ea:ea:02:a9:0e:
         55:ce:7e:0b:56:af:d9:d4:43:4d:b0:bd:bf:2e:dd:f2:32:29:
         06:d7:a8:bd:d0:d8:27:b1:3d:f9:2f:33:ab:1c:ca:fb:8e:e0:
         d5:e5:ee:1b:00:e6:2d:9c:d1:d7:31:fb:1a:0e:bb:ee:73:ce:
         61:78:03:bc:f5:82:a1:b7:4e:7c:f9:cc:0e:74:fe:4c:08:ad:
         ea:ce:bb:03:ec:fc:ef:b2:94:88:ff:11:c7:cd:4b:b4:30:4b:
         e2:37:69:a2:88:a6:cb:3d:66:a3:86:6e:60:83:39:21:8d:14:
         99:ed:20:73:44:4c:aa:47:b5:c7:79:0a:63:53:44:6c:4f:23:
         2c:41:79:d2:b3:6e:ea:17:5f:74:ca:6d:d0:ca:73:f6:63:07:
         55:35:ed:fd:10:c7:a1:45:68:c2:40:57:4b:76:e1:90:9c:c9:
         28:95:8b:23:4d:47:97:5a:fd:9e:7e:37:8a:f0:c4:a2:2f:bd:
         e7:f3:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----