Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File:                     JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier:          Z9M+1NfH62h4dDZ652nePHyO2wDQYdo+L7GXA7VJOLs=
Subject key identifier:   4D:1A:80:90:E6:FF:96:D3:2F:04:ED:B6:6B:B8:3E:8A:A2:B3:9B:08
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer:       /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial:       068C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number:          068A
Signing time:             Mon 21 Sep 2026 02:39:37 +0000
Manifest this update:     Mon 21 Sep 2026 02:39:37 +0000
Manifest next update:     Wed 23 Sep 2026 02:39:37 +0000
Files and hashes:         1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: rhUjovmeR/Gkh562WUs6wNvCy1jhvN4rpnoGm1B+M0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFD9AF, serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
        Validity
            Not Before: Sep 21 02:39:37 2026 GMT
            Not After : Sep 23 02:39:37 2026 GMT
        Subject: CN=6ab098e9-1d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:35:de:16:ff:2a:55:6b:8a:40:4b:48:5d:
                    f6:5c:8f:37:93:48:db:90:e3:55:88:57:70:fb:d1:
                    62:51:df:25:ca:91:55:b6:61:b2:46:8a:46:76:a4:
                    1b:26:98:61:fe:9f:29:93:70:e6:05:bc:97:b1:a6:
                    65:0c:18:70:4f:72:1f:28:09:e3:76:8b:9e:14:1f:
                    66:bc:46:e3:8e:20:4d:c3:46:fb:4c:ce:df:bb:af:
                    3e:12:ed:5b:d2:8e:b3:c3:c5:be:5c:59:0a:25:9b:
                    7d:e9:90:11:a2:42:2a:26:d9:c2:f2:d7:12:3c:49:
                    b5:eb:4b:63:69:8b:6b:dd:dd:17:ef:15:81:d3:5b:
                    dd:a3:4f:2b:c5:5c:0c:f6:6b:7a:4e:86:3c:c7:19:
                    64:a1:41:fe:7d:8c:3c:d3:76:8e:36:f1:5c:da:87:
                    14:64:80:a6:40:d6:a9:a9:e3:a4:a9:69:87:50:72:
                    c3:00:ec:e4:ce:2b:8c:44:d7:c2:dd:f8:bb:ef:93:
                    8c:d7:b8:b9:99:d0:9d:89:7e:9c:4f:85:93:1b:63:
                    85:f3:53:07:4c:97:fe:a6:56:f1:86:4c:77:9c:07:
                    34:7d:0a:b7:b8:dc:41:a7:b0:75:a1:ac:81:5b:35:
                    55:8a:09:64:6a:b1:ac:ab:b5:98:e5:b2:ff:9d:1c:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1A:80:90:E6:FF:96:D3:2F:04:ED:B6:6B:B8:3E:8A:A2:B3:9B:08
            X509v3 Authority Key Identifier:
                keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:70:c0:24:6c:60:a7:56:a7:d6:30:5b:af:bc:78:da:f7:31:
         ff:cd:fb:a6:4d:7b:22:4a:41:d0:de:aa:b0:db:4d:3f:1a:41:
         fd:a3:34:f8:78:f3:73:7b:c3:cf:44:fc:0f:a5:8d:b2:1d:0e:
         4a:e2:f5:5c:35:c9:59:ba:39:15:4a:0e:c5:d5:0d:27:ce:45:
         0f:af:b2:3e:4e:ec:d9:23:c8:d6:b8:e9:4c:81:6d:4d:79:56:
         b5:ce:2c:1a:dd:40:8a:22:9f:84:28:94:87:db:9c:9d:4b:88:
         2e:24:6c:4f:88:5a:ba:52:d9:8b:d3:fb:0b:f9:ed:ff:53:e7:
         db:33:7d:0c:27:33:c9:c6:c8:06:5b:f9:79:35:67:51:f2:8b:
         66:7a:4e:18:1e:9a:84:66:23:78:ef:03:22:77:5c:6e:09:a9:
         18:94:d4:83:29:92:cc:ff:3e:fa:be:1c:b1:4d:43:9e:62:8f:
         91:be:de:4b:a7:da:71:b4:28:8f:97:92:54:5d:6d:bc:74:36:
         aa:30:4d:1e:e4:88:bf:d8:7b:1f:ff:81:05:3e:d2:cd:18:d3:
         8d:4d:37:46:21:5f:97:00:37:d5:a8:89:d3:e3:67:bd:1f:7f:
         5c:7b:da:5f:a4:b6:1d:c9:bd:2f:7d:e1:95:79:fe:d1:86:c5:
         86:b3:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----