Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File:                     ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier:          ryb59IQgHDAWQEqx6yZ3qaLH/FaRsKNozL+2Yml+DhA=
Subject key identifier:   00:AF:A9:2E:82:42:25:49:25:B4:4A:DE:4A:27:7D:05:25:A4:B7:CB
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer:       /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial:       08A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number:          08A3
Signing time:             Sat 26 Sep 2026 01:55:35 +0000
Manifest this update:     Sat 26 Sep 2026 01:55:34 +0000
Manifest next update:     Mon 28 Sep 2026 01:55:34 +0000
Files and hashes:         1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: eRytRcn4FwoSQRL9T3waieE2aj1D6TWBuAy2EhbPCUc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
        Validity
            Not Before: Sep 26 01:55:34 2026 GMT
            Not After : Sep 28 01:55:34 2026 GMT
        Subject: CN=6ab72617-9558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:fd:86:dd:ef:56:8b:81:8c:84:87:e7:a8:
                    8d:4a:2d:40:e4:46:d9:27:b1:18:69:c0:e7:9c:9c:
                    c2:fe:ce:80:30:cb:d7:b4:b8:91:f4:b7:2c:03:9d:
                    79:b1:55:91:c6:02:71:74:4c:4b:3b:2e:8e:e9:14:
                    b5:5a:a2:ca:51:30:9e:91:5f:fa:8a:be:11:df:bb:
                    a0:6e:29:09:9f:7e:7c:20:4f:b0:7d:3b:a3:db:fe:
                    09:41:dd:14:6e:05:d9:49:19:c7:ed:b9:79:eb:1e:
                    ba:a0:0e:01:6a:92:35:78:db:68:33:b8:9a:df:ab:
                    94:81:79:87:2d:d9:38:4b:4f:d4:f3:db:ec:4e:9f:
                    47:09:c5:c6:79:ee:30:88:f9:90:64:5a:1e:b8:df:
                    32:b7:2d:8f:9f:e4:1b:27:ac:64:64:68:c0:47:12:
                    49:0d:8e:8e:10:12:8f:7f:22:f6:27:03:8e:d3:0d:
                    9a:f9:b5:36:05:eb:12:f3:19:6d:7e:b2:d4:3f:9d:
                    bc:19:b1:81:b1:bf:62:1e:a5:ff:33:8e:ad:54:af:
                    51:29:c0:cb:d3:4f:f9:ca:70:b1:e1:51:1c:35:61:
                    29:50:ee:b7:1b:12:b7:f6:15:13:29:6e:ae:69:89:
                    71:e3:c1:29:a8:6a:ea:ba:ed:c0:5c:07:11:ba:6d:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AF:A9:2E:82:42:25:49:25:B4:4A:DE:4A:27:7D:05:25:A4:B7:CB
            X509v3 Authority Key Identifier:
                keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:51:8e:a8:de:db:15:ff:fb:d9:05:cc:8f:d0:be:43:1a:
         60:a2:07:8a:1b:9b:40:e5:22:69:2e:da:cd:63:c4:e1:b1:62:
         1e:9d:b8:76:21:ad:91:08:27:44:0b:b9:37:08:b7:bd:f0:ca:
         b1:4d:f7:19:a6:57:86:9e:7c:e8:58:de:91:38:75:55:5a:fb:
         84:46:6e:f1:24:ca:e8:f4:6c:f5:84:76:53:cf:61:11:11:a0:
         b0:21:b0:8e:2a:c8:b5:d2:e4:db:bb:68:c9:e4:fc:bd:29:94:
         c0:72:f3:7b:20:40:84:85:eb:b2:00:79:af:6e:19:fc:1f:6e:
         21:83:bc:15:04:f8:17:1c:0a:fa:cf:c4:ce:99:f4:26:33:bb:
         c9:93:b1:d6:bb:be:9c:c4:13:c9:4c:c3:3c:11:5a:03:b6:b0:
         d7:81:43:6e:14:14:ab:d7:0b:ac:0a:fd:e8:b7:71:6e:b3:1a:
         e3:17:da:fb:73:52:73:1a:c0:87:56:ce:c1:84:0a:b3:e0:b2:
         d1:58:89:d0:07:63:bf:2d:a5:34:73:ad:fa:4c:06:80:22:32:
         86:bc:d3:ca:21:fa:f3:55:f4:74:c7:d3:3e:b7:0c:61:a9:ec:
         83:0d:58:f1:14:c6:2c:48:5f:66:dc:8e:44:78:dc:28:2c:2b:
         c0:21:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----