Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
File:                     Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft (raw, json)
Hash identifier:          X6UaOQ7v4gDdZwWq9+kZghQtDto40p4KSvH19VkBbYg=
Subject key identifier:   73:41:9F:BC:68:51:4D:E7:E0:3D:82:5C:0E:C4:30:8E:12:20:B3:37
Authority key identifier: 0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35
Certificate issuer:       /CN=F36965F1AF/serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
Certificate serial:       14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
Manifest number:          11
Signing time:             Mon 21 Sep 2026 05:55:09 +0000
Manifest this update:     Mon 21 Sep 2026 05:55:09 +0000
Manifest next update:     Wed 23 Sep 2026 05:55:08 +0000
Files and hashes:         1: Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl (hash: J+vSktDsy8DQRAMeKG7FHHqWDRXOGO40/vJ8BrQuLjQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36965F1AF, serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
        Validity
            Not Before: Sep 21 05:55:09 2026 GMT
            Not After : Sep 23 05:55:08 2026 GMT
        Subject: CN=6ab0c6bd-6ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:14:c7:00:d2:a8:67:aa:5e:d4:d9:29:cb:
                    58:d6:cd:68:d5:de:8d:ed:2d:ef:ea:c7:6c:b2:4c:
                    08:d0:22:41:51:e1:a9:b2:d2:e7:b0:cf:94:f9:0c:
                    6a:17:f4:f8:e5:46:a1:1e:b0:bb:bb:12:51:2a:5c:
                    3e:bc:5e:c6:92:98:c2:ad:cd:e0:7e:c1:91:09:9b:
                    ea:70:5e:3c:11:fc:fa:0a:48:db:4c:fd:22:04:47:
                    da:b2:f4:d6:77:2b:7b:3b:44:72:4b:45:d2:57:f7:
                    3e:cc:61:9c:d5:04:d1:39:47:df:c6:5d:ea:c1:65:
                    c9:76:df:65:9b:5f:36:56:a0:cf:81:0f:b2:94:dd:
                    57:c7:5c:90:6b:1a:a2:42:20:ba:2e:ee:a8:9c:d5:
                    99:65:58:5e:58:1a:e0:86:d9:f1:cd:70:e6:08:ef:
                    36:b0:41:38:0e:c7:f8:08:65:55:fd:83:d1:6c:cd:
                    2c:d4:04:60:06:1d:dd:62:c6:6f:9b:95:d8:ad:fd:
                    26:eb:9a:5f:b4:0c:59:65:ec:ed:4f:be:06:e6:fc:
                    ce:20:93:40:1c:e5:3a:b2:3b:29:8d:50:b4:39:0b:
                    49:16:3f:03:4d:f0:e8:65:4f:64:35:17:17:82:3b:
                    e9:d7:b2:54:2f:38:9d:2a:69:54:9a:61:e4:56:74:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:41:9F:BC:68:51:4D:E7:E0:3D:82:5C:0E:C4:30:8E:12:20:B3:37
            X509v3 Authority Key Identifier:
                keyid:0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:d3:aa:24:31:74:ee:18:9d:cf:86:60:5a:03:17:05:bd:
         a6:f6:66:21:0a:8a:96:40:f1:b3:b0:5f:d1:2b:0c:69:9c:71:
         53:b7:12:73:04:ee:23:de:09:78:0e:6c:8a:59:64:13:19:45:
         25:d8:f0:b1:e0:31:ec:a4:7b:cc:52:51:99:74:f4:f3:bb:d1:
         55:a5:53:c1:77:b2:10:02:5f:2e:03:55:9b:d0:d2:23:0e:a8:
         0c:b4:73:93:22:e2:44:c4:40:20:df:9e:a2:2e:56:fd:f1:8d:
         9e:7e:bf:36:ab:d9:8a:35:e8:9b:2d:70:e0:11:19:35:e9:38:
         ef:db:f0:ce:96:cb:1f:be:82:b6:8d:9a:3c:12:77:de:f1:3b:
         b2:3d:6f:f0:c1:b8:ab:f8:69:96:ac:3f:45:84:6e:77:5d:e0:
         23:bb:a5:74:d2:8e:d1:60:b0:b4:35:d4:5c:60:f7:fd:d2:cb:
         10:e0:66:d7:a6:0c:6a:02:96:e0:29:b1:bf:67:2c:5e:0a:60:
         ff:88:ab:44:6c:b6:5f:1a:0f:57:90:fb:32:fe:12:2b:25:9b:
         27:1d:7f:f1:70:b1:72:78:a9:eb:f6:bb:e7:16:d8:39:57:32:
         44:9d:68:3e:1d:de:61:b6:f6:fc:0e:82:bd:7e:a3:33:39:18:
         e8:ea:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----