Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
File:                     CvRXhhBplSRPEehsGgUDMTN9DuE.mft (raw, json)
Hash identifier:          XAeJSg2gdPtUXU4k7zZGCjZbHCvSoPy5ZWOzVLnxNMM=
Subject key identifier:   D0:FB:60:44:C3:6A:47:B5:6F:30:2F:8D:E6:F6:F5:F2:07:EF:F4:AE
Authority key identifier: 0A:F4:57:86:10:69:95:24:4F:11:E8:6C:1A:05:03:31:33:7D:0E:E1
Certificate issuer:       /CN=F3691A30AF/serialNumber=0AF45786106995244F11E86C1A050331337D0EE1
Certificate serial:       54
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
Manifest number:          54
Signing time:             Tue 22 Sep 2026 05:43:10 +0000
Manifest this update:     Tue 22 Sep 2026 05:43:10 +0000
Manifest next update:     Thu 24 Sep 2026 05:43:10 +0000
Files and hashes:         1: CvRXhhBplSRPEehsGgUDMTN9DuE.crl (hash: L7A0fSOlETKiczmuW4MjpXyyDFC+bWKv+xKg8rItm0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691A30AF, serialNumber=0AF45786106995244F11E86C1A050331337D0EE1
        Validity
            Not Before: Sep 22 05:43:10 2026 GMT
            Not After : Sep 24 05:43:10 2026 GMT
        Subject: CN=6ab2156e-ef6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ec:d0:b3:8a:30:92:ab:2d:17:12:f7:e0:3b:
                    a0:f3:78:1f:a4:be:50:76:06:4b:5d:3d:f0:06:2c:
                    80:7a:ba:ed:e7:dc:c1:39:72:4d:e3:9f:4a:17:94:
                    13:87:5f:d1:ae:a8:29:5d:15:71:76:bd:5b:e2:4b:
                    b4:b5:07:1b:65:90:e4:01:95:75:d6:43:8d:b6:3a:
                    ca:81:d6:c2:46:81:bc:37:c6:80:64:eb:87:d0:58:
                    43:f7:a9:3a:71:fd:8b:64:b2:5d:41:f2:aa:9e:ff:
                    97:39:55:e3:9d:50:d0:5a:f4:a2:f6:14:53:ce:22:
                    aa:ba:b6:bd:f1:cf:b3:43:8a:c1:09:60:2c:62:0e:
                    3b:12:aa:d4:69:22:a6:fb:e6:b5:4f:c0:81:59:13:
                    44:31:c4:c6:5f:18:9c:7a:02:68:c9:78:ef:6f:dd:
                    8a:3a:97:99:7b:ac:c7:95:c6:e4:fb:52:2b:1d:fe:
                    57:bc:90:9b:b2:13:bd:f3:05:2a:17:9c:d5:63:40:
                    b7:0f:9a:ff:2a:f2:a7:5a:f4:0f:ed:2c:28:0e:97:
                    ba:83:06:58:c9:0e:59:2d:c8:cb:d3:52:c4:37:d0:
                    46:3a:1d:3b:c7:08:9e:45:91:65:d9:02:1d:e1:86:
                    1c:46:42:74:5e:96:d5:6c:ef:29:79:f9:f4:34:35:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FB:60:44:C3:6A:47:B5:6F:30:2F:8D:E6:F6:F5:F2:07:EF:F4:AE
            X509v3 Authority Key Identifier:
                keyid:0A:F4:57:86:10:69:95:24:4F:11:E8:6C:1A:05:03:31:33:7D:0E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:22:bf:8f:db:a0:af:d6:d5:b8:97:19:da:cc:c9:65:58:f7:
         7f:83:ba:4f:4b:d4:aa:95:8d:1c:c7:54:54:45:d7:71:4b:ae:
         fc:6d:c3:75:e0:d8:56:ad:c5:fc:f4:1f:1a:95:ed:9d:1c:a5:
         27:ac:e2:1f:ba:17:07:0d:f3:9f:57:84:60:b9:96:c1:27:2f:
         93:af:7d:40:b8:ca:29:f8:30:39:18:a5:86:7a:c9:5f:5a:31:
         b0:4b:a4:97:57:52:d9:28:b3:4f:56:eb:76:dd:78:68:a6:ce:
         c3:8f:c7:3a:83:37:f0:6d:5b:d5:1d:56:3d:d7:88:57:15:4c:
         63:d3:54:32:dc:51:79:9c:7a:e9:34:7c:4f:e6:4d:dc:e2:2d:
         ce:62:bf:07:42:90:55:46:0a:c0:16:31:b0:4d:bd:51:b1:84:
         21:41:fd:13:f7:59:31:f2:b0:6b:94:d0:d7:94:35:70:63:cc:
         75:2a:ac:e6:e7:9e:90:90:12:97:ee:fc:2a:65:ea:80:1e:8a:
         e3:fa:99:25:be:33:83:6d:83:cd:a0:ff:2c:3c:10:22:b1:11:
         c6:68:41:bd:bc:0e:91:b3:f5:16:c2:51:cf:c7:d9:a2:e9:b5:
         b6:d9:61:96:c0:94:6b:ac:3b:ee:9d:e1:7d:5a:3c:65:73:d9:
         e9:d8:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----