Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          HctvJV7Ygqb9+GKX3ZinQjW/V0TGcTK0l4hDIFhtw9s=
Subject key identifier:   74:A8:DE:61:FC:13:11:63:B6:19:55:6A:C5:03:90:88:FD:1F:EE:A8
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       08AF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          08A9
Signing time:             Sat 26 Sep 2026 01:55:23 +0000
Manifest this update:     Sat 26 Sep 2026 01:55:22 +0000
Manifest next update:     Mon 28 Sep 2026 01:55:22 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: pNfIhyH75qKgnoKhKKX5vhf7bDOPEBrQ1eC93o1U16I=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 01:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Sep 26 01:55:22 2026 GMT
            Not After : Sep 28 01:55:22 2026 GMT
        Subject: CN=6ab7260b-e893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:b4:bb:1d:89:24:17:8f:87:74:f1:07:60:
                    0a:91:78:57:f8:39:53:2e:f3:b5:d0:2c:af:48:f1:
                    9b:b1:5b:a5:b2:7c:6d:86:34:9c:ae:2d:17:52:29:
                    00:33:40:53:f7:6d:40:c9:43:8a:c8:99:9a:94:a5:
                    ce:c5:1c:05:94:5c:2b:05:c8:b7:23:86:7c:98:a4:
                    66:6a:0e:a6:ec:23:38:fd:af:b2:22:fb:1c:cb:24:
                    cb:de:d4:ce:ce:08:70:f6:8c:d3:f2:8b:5b:fd:02:
                    0f:49:25:54:58:5e:34:cf:b4:05:ee:59:b7:57:5f:
                    8a:34:75:de:0e:cd:45:18:cf:d7:16:7f:9e:ea:3f:
                    62:3b:47:bf:60:cd:1b:43:d6:65:3b:c2:6c:70:97:
                    05:23:2b:e8:23:ad:94:ea:21:ae:4a:23:e5:c3:c1:
                    af:32:c7:18:31:f4:b5:5e:33:2e:a2:bf:4f:7b:ef:
                    2d:ed:41:09:58:f4:49:13:08:d8:b3:76:de:e5:21:
                    ce:df:a4:a2:41:44:9f:aa:c1:25:38:aa:00:01:c0:
                    6e:fc:5f:6c:2a:49:04:76:5c:5d:f5:68:2b:0f:2c:
                    0a:c3:64:f8:b9:8c:0e:09:a1:5e:63:46:f7:36:f9:
                    56:d3:f0:3d:18:6e:85:9a:3c:fb:15:da:14:4c:db:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:DE:61:FC:13:11:63:B6:19:55:6A:C5:03:90:88:FD:1F:EE:A8
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:d2:ac:10:02:45:5d:ea:51:58:0a:b2:77:dd:24:f2:0d:
         a8:d5:9b:90:37:20:0f:d1:79:d1:c6:72:91:93:f6:aa:c1:81:
         7f:e5:67:3e:2a:80:c2:15:1f:fd:ab:0c:ae:9f:86:4e:03:78:
         08:13:b3:e0:39:55:13:cf:e0:92:3b:be:f6:54:bb:cb:cf:1b:
         15:42:b6:96:6a:01:2f:cd:2e:6b:bd:a2:d9:82:80:89:e0:be:
         33:99:54:8c:21:47:b7:97:8f:bc:df:3d:22:a3:07:8b:8d:34:
         4a:3c:40:30:4b:a6:77:94:cb:bc:c8:b2:ca:81:52:0f:94:cb:
         68:fc:f3:cc:6a:14:46:9b:46:5b:6f:50:6d:37:d5:66:f7:c2:
         a0:e6:f1:aa:f9:fb:56:34:02:cb:38:4a:43:66:88:2e:71:4d:
         f0:d9:49:6f:1e:ce:a6:e4:d3:ff:1b:37:d8:fb:40:a0:84:5c:
         5b:aa:ad:a9:a4:b0:a9:31:aa:5d:89:d4:7a:e7:81:ab:1e:66:
         d1:4b:15:0a:29:05:fb:e0:b9:3b:86:32:8b:fb:b8:7a:73:79:
         29:b4:27:cc:3f:2e:0c:82:28:4d:c7:46:ca:88:34:a7:82:93:
         28:3c:84:5a:68:6c:8c:0b:67:1a:24:bf:66:45:73:be:86:67:
         26:9e:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----